Prepare rules for unrun pending scope registrations - #1130

Scope

Support an explicitly unrun scope registration in the existing validators and report generators. This is the rules-only prerequisite split from #1126 under the CC's 01:12Z ruling; it changes no catalog, taxonomy entry, verdict row, wave or generated catalog output.

• Base commit: 0f4ee075b2ab3af1b099d5ca1ecb8cae02ee3f5b (cue-time origin/main). The registry-only rebase preserves the reviewed change from a339425c; lander change ID excluding evidence.json is fdd30b0f93bc33f7aede372c17479e2285d48a42 before and after.
• Lane: lane:foundation.
• Owned paths: seven existing rule/consumer modules, independent temporary-fixture regressions, dated decision and evidence registration.
• The model-routes registration is held at 0f9e90b1a31f10c213857b36a6d4aa5d5ee4290a, then rebuilt as a separate main-based PR after these rules land. Register the pending model routing layer for its covering sweep #1126 is superseded by this split. No sweep, provider/account change or candidate/winner is introduced here.

SOTA sources

• tests/test_provenance_digest_custody.py at 2614721e: 2026-09-24 community sweep: effort-guard SessionStart notice, working plugin-install commands, dated dispositions #161 custody rule and private-original controls. The extra correction removes the unpublished GPT-review binding and adds a count-only regression for its decision-record citation.
• scripts/verdict_review_gate.py:1567-1576: rules and verdict rows must land separately; the gate and its base-trust behavior are unchanged. Copied job evidence extra-1126-verdict-review-gate-0f9e90b1.md, cited by name without a digest, reproduces the mixed-change refusal.
• scripts/landscape.py:854-859, :1264-1318: pending containers and candidate integrity.
• scripts/validate_foundation.py:35-42, :88-94, :216: existing taxonomy/capability coverage. The unchanged 20-layer catalog remains valid; the supported additional pending scope requires an exact catalog match and cannot borrow a capability decision.
• tools/sota-convergence/build_verdicts.py:164-170, :232-272, :467-486: wave fallback, generation and frozen rows. Marked unrun registrations have no wave; ordinary historical fallback and frozen evidence stay intact.
• scripts/component_matrix.py:580-618 and scripts/new_host_grand_list.py:91-151, :301-373: explicit marker propagation and bounded unswept coverage.
• python/cpython v3.13.16, Lib/unittest/case.py assertEqual/assertRaises: existing test harness, matching installed Python.
• python/cpython v3.13.16, Lib/unittest/loader.py loadTestsFromModule: native discovery collects module-bound TestCase classes. Fixture imports use modules so native test ownership preserves parallel CI sharding.
• scripts/validate_shards.py:94-163 and tools/sota-convergence/record_verdicts.py:720-1043: native discovery ownership and the supported recorder's refusal/publication boundary. A still-marked empty registration refuses valid lane processing before any output is published; missing/rejected returns preserve the row. Candidate promotion and marker retirement require their own screened catalog transition.
• scripts/landscape.py:25-45, :1318-1349, :1606-1608; build_verdicts.py:472-501; validate_foundation.py:98-110, :237-239; final_stack.py:524-528, :660: reviewed admission, historical continuity and candidate-check mechanisms. Admission now requires repository wave/sweep history and refuses previously published keys. All publication callers supply that context.

Evidence-class table

Local commands run

python3 -m unittest tests.test_registration_rules tests.test_pending_catalog_registration tests.test_record_verdicts tests.test_validate_shards tests.test_foundation_catalog tests.test_new_host_grand_list tests.test_landscape tests.test_layer_verdicts tests.test_component_matrix tests.test_final_stack
490 tests passed via the native TestLoader/TextTestRunner with this same module list; fixture stdout captured without changing execution or discovery
python3 scripts/verdict_review_gate.py --base origin/main --json
passed; changes=[], removed=[], changed_paths=[], waves_changed=false, violations=[]
python3 scripts/validate_foundation.py --root . --json
passed on unchanged 20-layer taxonomy
python3 scripts/landscape.py
python3 tools/sota-convergence/build_verdicts.py --check
python3 scripts/new_host_grand_list.py --check
python3 scripts/component_matrix.py --check
python3 scripts/final_stack.py --check
all passed on unchanged catalog outputs
python3 scripts/validate.py
passed after the registry-only rebase: 71 components, 12047 hashed files, 4 profiles, 240 receipts. Earlier old-base runs reported the nine inherited currency rollover lines; current main includes their correction.

The final staged range passed installed gitleaks 8.30.1 with redaction, idle-class and zero findings. Native registration/whitespace checks pass. Normal privacy/history/registry pre-push hooks run without override.

Native discovery keeps imported fixture TestCases out of module ownership, preserving eight-way CI planning. Additional taxonomy layers require the registration marker; required layers cannot use it to waive capability. Only explicitly marked scopes absent from registered wave documents, sweep ledgers and sweep manifests can use empty-registration exemptions. A frozen row cannot become unrun after a newer wave appears. Unmarked rows retain the existing selected/alternative/challenger requirements. First valid returns on a genuinely empty registration refuse before publication, preserving bytes and requiring a screened candidate transition. Grand-list sweep coverage comes from actual selected manifest membership.

Common verdict schema applies before every registration exemption: protocol fields, dates and overturn-condition types are checked, and unrun lane objects cannot carry run-manifest, adjudication or prose-exposure bindings. Taxonomy matching requires foundation plus the exact layer ID and shared schema validation. The four added Astra controls reproduced eight failure events before their corrections. All bounded round-two findings are included in one follow-up commit; no gate or catalog data changed.

Decision record

docs/decisions/2026-10-15-unrun-registration-rules.md. The next readiness input is this PR's landing; only then is the exact CC model-routes registration rebuilt and reviewed, followed by its paced --slots 2 sweep.

Host evidence

No host receipt, native adoption or platform-status change.

Follow-ups before later scope promotion

• Extend the custody detector to uppercase and line-split digests and add a synthetic positive control for the whole-record method; the CC classified these detector limits as P3 follow-up.
• The next TAXONOMY-ADMISSION trust-base PR must land before registration data or any unrun-scope sweep. Its required scope includes stopped/covering-sweep history, an admitted registration-to-verdict transition, and successful sealed-run history. These are deferred by CC adjudication; the extra commit here changes digest custody only.
• Cue-time rebase validation passed on 0f4ee075, which includes the Refresh nine model landscape checks after UTC rollover #1124 currency correction. The old-base nine age errors are resolved without a currency bypass; CI at the rebased head remains the landing gate.
• A later screened candidate and taxonomy promotion must precede ending registration. The new recorder refuses a still-marked empty ledger instead of publishing an invalid transition; this PR does not authorize a capability decision for a new taxonomy layer.
• The agentsview qualification record's inherited scripts/landscape.py:1373-1381 locator is stale at both base and head. Its follow-up belongs with that qualification record; historical pinned coordinates are preserved here.

Ruled digest-custody correction

The decision record cites all privately retained review and gate records by filename without digests: the GPT fix-one review, both local reviews, the CC FULL micro and the copied gate-job evidence. The original review bytes are unpublished; their digests must not be public bindings. The first citation guard failed on 2614721e with one prohibited digest; the whole-record guard failed on 1b7fe791 with four remaining unresolved digests. Every 64-hex value in the whole record must now match the SHA256 of a tracked, confined repository file. Failure reports contain only a count. No rule code, catalog, verdict, wave, history rewrite or rebase is included in the custody corrections.

All 15 digest-custody tests pass on the rebased tree. Validation for the custody corrections is reported separately from the earlier 490 rule tests at 2614721e, whose reviewed change is preserved. The base-trusted verdict gate passes with no row/wave changes. All 13 branch registration rows, including the ORIG_HEAD rows, were refreshed through the owning tool; main's unrelated registry content was preserved. Required full publication validation passes on the cue-time base. git merge-tree --write-tree origin/main HEAD returns 0, and the lander change ID is unchanged. The rebase conflicted only in evidence.json; no new rule or data edit was made.

Checklist

• No catalog/verdict-row/wave edits, placeholder selections or sweep dispatch.
• No gate modification, scanner override, currency-age bypass or new dependency.
• Prior combined registration and F1 pin work retained in their owned branches.
• Co-op independent reads and CC FULL micro review before landing.