Compile accepted delivery plans into bounded slices

[tom-sapletta-com]

Outcome

Compile an accepted wellmanifest.delivery-plan/v1 and explicit advisory refinements of oversized source tasks into deterministic, dependency-aware, bounded and inert implementation-slice candidates.

Material delivery

• add closed TypeScript DTOs and a Draft 2020-12 JSON Schema projection;
• verify source-NL and normalized accepted-DSL SHA-256 provenance;
• validate HOME/SHAPE/ADOPT, exact workstream ownership and integration-owned paths;
• require an exact disjoint path/component/interface/dependency/acceptance/test partition for every oversized source slice;
• rewrite source dependencies through split roots/leaves;
• reject cycles, overlap, widening, stale hashes and command/grant/authority fields;
• emit stable candidate digests and dedupe keys with execution=inert, authority=none, issue mutation and tool dispatch forbidden.

Validation

• focused: 11 passed, 0 failed;
• npm run verify: 445 total, 444 passed, 1 explicit missing-JDK skip, 0 failed;
• governance: GOV-PASS, 0 errors, 0 warnings;
• Lizard: 0 threshold warnings at CCN 15 / length 100 / five parameters;
• JSON Schema 2020-12 metaschema and git diff --check: pass;
• required production Docker smoke: pass.

The optional make e2e-core image suite passed all tests (438 pass, 7 unavailable-toolchain skips), then hit an existing gold-v2 documentation-recall failure. The same two missing documentation records reproduce on pristine origin/main@f51f20ab1669c98fadd470c54fdf86513fb48b18, proving no ticket delta caused it. No gate was bypassed.

Closes #115

[ifuri-validator-agent]

Deterministic Validator approval for exact head 57fdc7731cc467aee52f3aa8fc4027c5837ee199.

Ticket: ticket-096
Correlation ID: todo2code-pr-116-ticket-096
Model: zai/glm-5.3
Reviewed diff chunks: 7
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 7 diff chunk(s). Chunk 1 of 7 covers governance/ticket scaffolding (TODO, TICKETS index, ticket-096 docs, intent). Documentation is consistent with the stated delivery boundary and no runtime code is present in this chunk. Test results show all checks passing. | Chunk adds well-structured TypeScript DTOs and a Draft 2020-12 JSON Schema for accepted delivery-plan slice compilation. Types are closed, inert-by-design (execution/authority/issue_mutation/tool_dispatch constrained), and the schema enforces safe paths, unique items, bounded budgets, and hash provenance patterns. No executable logic, secrets, or workflow changes in this chunk. | Chunk 3 of 7 adds a new delivery-plan-slice JSON Schema section and the beginning of delivery-plan-slices.ts with strict validators (IDs, repo, SHA, branch, path traversal guards), bounded profiles, canonical hashing via sha256, and inert/authority-none design. Code matches PR intent; test results show all checks passing with only explicit skips. | Chunk 4 of delivery-plan-slices validation logic: helpers for deep freezing, path ownership pattern matching, and validators for placement, ownership, budget, tests, acceptance criteria, slices, topological ordering, plan identity, and complexity budget bounding. Validation logic appears thorough and consistent; test results show all passing checks. | Chunk 5 of 7 adds decomposition expansion, request validation, candidate expansion, disjoint-path assertion, topological ordering, and deterministic digest computation for delivery-plan slice compilation, plus a comprehensive test file. Validation logic is defensive: hash provenance is verified, oversized-source decompositions require exact partitions with duplicate detection, dependency inheritance is rewritten through split roots/leaves, candidate count and path overlap are bounded, and all emitted slices are inert with authority none and forbidden issue mutation/tool dispatch. Reported test results show no failing checks. | Final chunk contains test code for delivery-plan slice compilation: hash provenance, decomposition bounds, cycle/overlap/ownership validation, and authority-free inert output. No security issues; negative-path coverage is thorough. | Chunk 7 adds a test that loads the delivery-plan-slices JSON Schema and asserts its $id, oneOf refs, closed object definitions (additionalProperties: false), and required provenance/dedupe fields. Assertions align with the PR's stated invariants; no issues visible in this chunk.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-096-3596
TICKET ticket-096
HEAD_SHA 57fdc7731cc467aee52f3aa8fc4027c5837ee199
CORRELATION_ID todo2code-pr-116-ticket-096
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["Live OpenRouter contract (opt-in)=SKIPPING","governance=SKIPPING","verify=PASS","Java adapter (JDK 17 required)=PASS","Java adapter (JDK 17 required)=PASS","verify=PASS","koru / code-review=PASS"]
INPUT required_checks = ["verify","Java adapter (JDK 17 required)","koru / code-review"]
INPUT required_checks_source = "protected registry + GitHub applied rules (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT superseded_checks = []
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"