Widen sociosphere-bridge to carry CHRONOS carrier objects (additive)

[mdheller]

Summary

Closes the gap tracked in #329: extends the existing sociosphere-bridge seam
(docs/sociosphere-bridge.md + scripts/validate_bundle.py +
scripts/emit_run_artifact.py + scripts/emit_replay_artifact.py) so it can
also carry CHRONOS neuro-symbolic carrier objects, per Michael's "take the
superset, subsume the capability, meld it into the estate" instruction: same
bridge, a wider set of carried-object types, not a second parallel bridge.

What I verified vs. what issue #329 claimed: the issue's description of
the bridge is accurate. docs/sociosphere-bridge.md documents the seam, and
the real implementation lives in scripts/validate_bundle.py (fail-closed
gate → ValidationArtifact) and scripts/emit_run_artifact.py /
scripts/emit_replay_artifact.py (permissive projectors → RunArtifact /
ReplayArtifact). None of those three scripts had any CHRONOS-carrier
awareness before this change — confirmed by grepping for the field names and
by the tests below.

What changed (additive only)

• scripts/validate_bundle.py: new validate_chronos_carrier(spec), a
  fail-closed structural gate mirroring the existing
  validate_sourceos_image_production() pattern. An optional
  spec.chronosCarrier block (sourceEvidenceRef, methodFamily,
  claimStatus, validationStatus, nonAuthorityDeclaration, owningPlane,
  replayRef) is rejected at the bridge if incomplete, if
  nonAuthorityDeclaration isn't true, or if owningPlane is agentplane
  — agentplane never claims canonical authority over a carrier it merely
  carries.
• scripts/emit_run_artifact.py / scripts/emit_replay_artifact.py: new
  extract_chronos_carrier(spec), a permissive projector (mirrors
  extract_sourceos_image_production()) that folds whatever carrier fields
  were declared into RunArtifact.chronosCarrier /
  ReplayArtifact.inputs.chronosCarrier.
• schemas/bundle.schema.v0.1.json, schemas/run-artifact.schema.v0.1.json,
  schemas/replay-artifact.schema.v0.1.json: document the new optional
  field (open schemas — additive, no breaking changes).
• docs/sociosphere-bridge.md: new "CHRONOS carrier passthrough (additive)"
  section describing the extension and its non-authority stance.
• Makefile: new validate-chronos-carrier-bridge target, wired into the
  existing validate aggregate target (following this repo's incremental
  validate: <target> append convention).
• .github/workflows/run-replay-artifacts.yml: extended to also emit
  run/replay artifacts against a new CHRONOS-carrier-bearing fixture bundle
  and assert the projected fields, plus run the bridge's unit tests.

Proof it's additive (superset check)

• tests/test_chronos_carrier_bridge.py::SupersetTests builds a spec with
  both a SourceOS binding and a CHRONOS carrier declared, and asserts the
  pre-existing SourceOS projection (extract_sourceos_bindings) is byte-for-
  byte unchanged while the new CHRONOS projection is present alongside it.
• examples/run-replay/minimal-bundle.json (the pre-existing fixture, no
  chronosCarrier) still emits chronosCarrier: {} unchanged.
• tests/test_sourceos_binding_projection.py (pre-existing test file) passes
  unmodified.

Test coverage added

tests/test_chronos_carrier_bridge.py (20 tests):

• gate tests: not-applicable when absent, pass + field projection when valid,
  rejection on each missing required field, rejection on
  nonAuthorityDeclaration=false (an improperly-authorized carrier), rejection
  on owningPlane=agentplane/AgentPlane (case-insensitive), rejection on a
  non-string methodFamily
• emitter projection tests (permissive, don't fail closed — matching the
  existing extract_sourceos_image_production split between strict-gate and
  permissive-collector)
• superset tests (above)
• CLI-level subprocess tests against tests/fixtures/chronos-carrier/
  (valid.* / reject.*, following this repo's existing fixture-naming
  convention), including the two negative "improperly-authorized carrier"
  cases

Test results

python3 -m unittest tests.test_sourceos_binding_projection tests.test_chronos_carrier_bridge -v
Ran 20 tests in 0.11s — OK

python3 -m pytest -q tools/tests
323 passed

python3 -m pytest -q tests/ --deselect tests/test_local_control_node_process.py::test_process_local_control_node_input
54 passed  (the one deselected test fails identically on origin/main, pre-existing/unrelated)

make validate-chronos-carrier-bridge
OK

Also ran the full run-replay-artifacts CI job locally against both the
pre-existing and new fixture bundles — both emit valid JSON and the new
fixture's chronosCarrier projects correctly end-to-end through both
emit_run_artifact.py and emit_replay_artifact.py.

Non-goals (unchanged)

• No taxonomy/schema authority over CHRONOS's methodFamily / claimStatus
  / validationStatus values — passthrough only.
• No cryptographic attestation or full authority/delegation reconstruction
  claims (see docs/replay-boundary.md).
• Agent-execution/action logic untouched — this is a bridge-surface
  extension only.

Refs #329, SocioProphet/socioprophet#498,
sociosphere/docs/integration/neurosymbolic-chronos-alignment.md.

[Copilot]

Pull request overview

This PR widens the existing sociosphere-bridge surface to optionally carry CHRONOS neuro-symbolic carrier objects end-to-end (bundle validation gate + run/replay artifact projection), as an additive extension aligned with issue #329.

Changes:

• Add a fail-closed spec.chronosCarrier structural gate in scripts/validate_bundle.py, and permissive projection into RunArtifact / ReplayArtifact emitters.
• Extend JSON schemas and bridge documentation to describe the new optional chronosCarrier passthrough fields.
• Add fixtures + unit tests + workflow updates to verify projection and “superset” (SourceOS + CHRONOS) coexistence.

Reviewed changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
tests/test_chronos_carrier_bridge.py	Adds unit + CLI fixture tests for CHRONOS carrier gate/projection and coexistence with SourceOS bindings.
tests/fixtures/chronos-carrier/valid.chronos-carrier-bundle.json	Adds a valid bundle fixture carrying spec.chronosCarrier.
tests/fixtures/chronos-carrier/reject.chronos-carrier-bundle.owning-plane-agentplane.json	Adds a rejecting fixture for owningPlane=agentplane.
tests/fixtures/chronos-carrier/reject.chronos-carrier-bundle.non-authority-declaration-false.json	Adds a rejecting fixture for nonAuthorityDeclaration=false.
tests/fixtures/chronos-carrier/reject.chronos-carrier-bundle.missing-replay-ref.json	Adds a rejecting fixture for missing replayRef.
scripts/validate_bundle.py	Implements validate_chronos_carrier() and includes its output in the produced ValidationArtifact.
scripts/emit_run_artifact.py	Adds permissive extract_chronos_carrier() projection into RunArtifact.chronosCarrier.
scripts/emit_replay_artifact.py	Adds permissive extract_chronos_carrier() projection into ReplayArtifact.inputs.chronosCarrier.
schemas/run-artifact.schema.v0.1.json	Documents optional chronosCarrier object in RunArtifact.
schemas/replay-artifact.schema.v0.1.json	Documents optional chronosCarrier object in ReplayArtifact inputs.
schemas/bundle.schema.v0.1.json	Documents optional spec.chronosCarrier object in Bundle schema.
Makefile	Adds validate-chronos-carrier-bridge target and wires it into validate.
examples/run-replay/minimal-bundle-with-chronos-carrier.json	Adds a run/replay example bundle carrying chronosCarrier.
docs/sociosphere-bridge.md	Documents the new CHRONOS carrier passthrough lane and non-authority stance.
.github/workflows/run-replay-artifacts.yml	Extends CI to test CHRONOS-carrier fixture emission and run new unit tests.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.