feat(schema): RLD loader/diagnostics contracts (LoaderFault + ResilientDiagnosticRecord) [E13/WS-A]

Makefile

@@ -1,6 +1,6 @@
-.PHONY: validate validate-resource-contract validate-measurement validate-value-type validate-source-locator validate-sourceos-repo-manifest validate-mesh-action-registry validate-control-plane-examples validate-nlboot-examples validate-lattice-data-governai-examples validate-ops-history-examples validate-runtime-observability-examples validate-interpretability-examples validate-lifecycle-boundary-examples validate-svf-contracts validate-sync-cycle-receipts validate-onboarding-examples validate-runtime-causality-examples validate-agentic-os-examples validate-triparty-examples validate-labor-market-examples validate-supply-chain-risk-examples validate-reasoning-examples validate-mpcc-event-examples validate-knowledge-nugget-examples validate-semantic-action-examples validate-epistemic-kernel-examples validate-ab-update-examples validate-device-service-examples validate-duplicate-schema-ids validate-lawful-dispatch-receipt validate-architectural-building-block validate-agent-passport-examples validate-seam-definition-examples validate-agent-system-vocabulary validate-genesis-inception-examples validate-measurement validate-world-model-examples validate-eval-item-examples validate-ingestion-pipeline-examples validate-data-acquisition-examples validate-glossary-alignment-examples validate-data-class-examples validate-table-keys validate-dag-loop validate-vocab-currency-loop vocab-currency-dogfood validate-glossary-promotion validate-agreement validate-stopword-analysis stopword-analysis-live validate-kgram-differential validate-learned-dictionary train-dataclass-classifiers validate-assay-fleet-examples validate-image-trust-examples validate-consent-plane-examples validate-schema-references validate-fingerprint-stack validate-multiverseal-twin-examples validate-multiverseal-twin-reference-impl
+.PHONY: validate validate-resource-contract validate-measurement validate-value-type validate-source-locator validate-sourceos-repo-manifest validate-mesh-action-registry validate-control-plane-examples validate-nlboot-examples validate-lattice-data-governai-examples validate-ops-history-examples validate-runtime-observability-examples validate-interpretability-examples validate-lifecycle-boundary-examples validate-svf-contracts validate-sync-cycle-receipts validate-onboarding-examples validate-runtime-causality-examples validate-agentic-os-examples validate-triparty-examples validate-labor-market-examples validate-supply-chain-risk-examples validate-reasoning-examples validate-mpcc-event-examples validate-knowledge-nugget-examples validate-semantic-action-examples validate-epistemic-kernel-examples validate-ab-update-examples validate-device-service-examples validate-duplicate-schema-ids validate-lawful-dispatch-receipt validate-architectural-building-block validate-agent-passport-examples validate-seam-definition-examples validate-agent-system-vocabulary validate-genesis-inception-examples validate-measurement validate-world-model-examples validate-eval-item-examples validate-ingestion-pipeline-examples validate-data-acquisition-examples validate-glossary-alignment-examples validate-data-class-examples validate-table-keys validate-dag-loop validate-vocab-currency-loop vocab-currency-dogfood validate-glossary-promotion validate-agreement validate-stopword-analysis stopword-analysis-live validate-kgram-differential validate-learned-dictionary train-dataclass-classifiers validate-assay-fleet-examples validate-image-trust-examples validate-consent-plane-examples validate-schema-references validate-fingerprint-stack validate-multiverseal-twin-examples validate-multiverseal-twin-reference-impl validate-rld-examples
 
-validate: validate-data-class-examples validate-glossary-alignment-examples validate-data-acquisition-examples validate-ingestion-pipeline-examples validate-control-plane-examples validate-nlboot-examples validate-lattice-data-governai-examples validate-ops-history-examples validate-runtime-observability-examples validate-interpretability-examples validate-lifecycle-boundary-examples validate-svf-contracts validate-sync-cycle-receipts validate-onboarding-examples validate-runtime-causality-examples validate-agentic-os-examples validate-triparty-examples validate-labor-market-examples validate-supply-chain-risk-examples validate-reasoning-examples validate-mpcc-event-examples validate-knowledge-nugget-examples validate-semantic-action-examples validate-epistemic-kernel-examples validate-ab-update-examples validate-device-service-examples validate-duplicate-schema-ids validate-value-type validate-source-locator validate-sourceos-repo-manifest validate-mesh-action-registry validate-lawful-dispatch-receipt validate-architectural-building-block validate-agent-passport-examples validate-seam-definition-examples validate-agent-system-vocabulary validate-genesis-inception-examples validate-measurement validate-world-model-examples validate-eval-item-examples validate-resource-contract validate-table-keys validate-dag-loop validate-vocab-currency-loop validate-glossary-promotion validate-agreement validate-stopword-analysis validate-kgram-differential validate-learned-dictionary validate-trained-classifiers validate-multiverseal-twin-examples validate-multiverseal-twin-reference-impl validate-assay-fleet-examples validate-image-trust-examples validate-consent-plane-examples validate-schema-references validate-fingerprint-stack
+validate: validate-data-class-examples validate-glossary-alignment-examples validate-data-acquisition-examples validate-ingestion-pipeline-examples validate-control-plane-examples validate-nlboot-examples validate-lattice-data-governai-examples validate-ops-history-examples validate-runtime-observability-examples validate-interpretability-examples validate-lifecycle-boundary-examples validate-svf-contracts validate-sync-cycle-receipts validate-onboarding-examples validate-runtime-causality-examples validate-agentic-os-examples validate-triparty-examples validate-labor-market-examples validate-supply-chain-risk-examples validate-reasoning-examples validate-mpcc-event-examples validate-knowledge-nugget-examples validate-semantic-action-examples validate-epistemic-kernel-examples validate-ab-update-examples validate-device-service-examples validate-duplicate-schema-ids validate-value-type validate-source-locator validate-sourceos-repo-manifest validate-mesh-action-registry validate-lawful-dispatch-receipt validate-architectural-building-block validate-agent-passport-examples validate-seam-definition-examples validate-agent-system-vocabulary validate-genesis-inception-examples validate-measurement validate-world-model-examples validate-eval-item-examples validate-resource-contract validate-table-keys validate-dag-loop validate-vocab-currency-loop validate-glossary-promotion validate-agreement validate-stopword-analysis validate-kgram-differential validate-learned-dictionary validate-trained-classifiers validate-multiverseal-twin-examples validate-multiverseal-twin-reference-impl validate-assay-fleet-examples validate-image-trust-examples validate-consent-plane-examples validate-schema-references validate-fingerprint-stack validate-rld-examples
 	@echo "OK: validate"
 
 validate-assay-fleet-examples:
@@ -258,3 +258,7 @@ validate-multiverseal-twin-examples:
 validate-multiverseal-twin-reference-impl:
 	python3 -m pip install --user numpy >/dev/null
 	cd reference/multiverseal-twin && python3 test_mvtwin.py
+
+validate-rld-examples:
+	python3 -m pip install --user jsonschema referencing >/dev/null
+	python3 tools/validate_rld_examples.py

docs/adr/0018-rld-loader-diagnostics-contracts.md

@@ -0,0 +1,43 @@
+# ADR-0018: RLD loader & diagnostics contracts (LoaderFault / ResilientDiagnosticRecord)
+
+Status: Accepted
+Date: 2026-08-03
+Part of: Epoch E13 (Reference-Gated Sovereign Stack), workstream WS-A
+
+## Context
+
+The Resilient Loader & Diagnostics (RLD) design ships as a Rust workspace + a Lean
+launch-completeness proof. What the fabric lacked was the *contracts* — so the loader's
+faults and crash records could be carried, deduped, and projected like every other typed
+value in the estate. This lands them, making RLD the L1 fail-closed substrate the rest of
+Epoch E13 (identity twin, capture receipts) stands on.
+
+## Decisions
+
+1. **Every fatal stop is a typed value first (I5 / R2).** `LoaderFault` is an algebraic sum
+   with **stable codes** (`LDR-DEP-MISSING`, `LDR-ABI-MISMATCH`, …). A bare string abort is a
+   spec violation. Non-fatal `FEATURE`/`LAZY` misses are recorded too, at `degraded`/`handled`
+   — the "what quietly turned off" trail the reference format could not express.
+
+2. **Severity is a table, not a heuristic.** The failing edge's binding class fixes severity:
+   `REQUIRED→fatal`, `FEATURE→degraded`, `WEAK→info`, `LAZY→handled|fatal`. Machine-checked.
+
+3. **Root-cause-first, diffable, coalescing.** `ResilientDiagnosticRecord` puts the typed
+   fault as field #1; `reproKey = H(code ‖ import.name ‖ chain ‖ image_hash)` excludes
+   timestamps/PIDs so N occurrences of a defect collapse to one bucket.
+
+4. **Privacy by projection (I8), not redaction.** The telemetry tier is an *allowlist*
+   projection of the local record; path-like fields are represented symbolically (store names,
+   content hashes), so there is no user path to leak — enforced by the validator. This is the
+   same discipline as the reasoning-evidence receipts and the twin's reference-gated projection
+   (ADR-0014): **what leaves is a projection, never a scrub.**
+
+## Consequences
+
+- New conformant contracts `LoaderFault` + `ResilientDiagnosticRecord`, canonical examples
+  (the reference `CoreSimulator` abort re-encoded, plus its correct `FEATURE`-degraded form),
+  and an invariant validator wired into `make validate`.
+- RDR `$ref`s `LoaderFault` by `$id`; validators resolve it via a `referencing` registry.
+- The Rust workspace + Lean proof remain the reference implementation; these contracts are the
+  wire/record form the fabric carries.
+- Ties WS-A into the E13 through-line: bind-at-capture, fail-closed, projection-not-redaction.

examples/loader_fault.json

@@ -0,0 +1,17 @@
+{
+  "type": "LoaderFault",
+  "kind": "InterfaceMismatch",
+  "code": "LDR-ABI-MISMATCH",
+  "severity": "fatal",
+  "import": {
+    "name": "libfoo",
+    "versionReq": ">=1.0",
+    "binding": "REQUIRED",
+    "requestedBy": "app",
+    "chain": [
+      "app"
+    ]
+  },
+  "want": "b3:abi-1",
+  "got": "b3:abi-2"
+}

examples/resilient_diagnostic_record.json

@@ -0,0 +1,59 @@
+{
+  "id": "urn:srcos:rdr:claude-ios-sim:2026-08-03",
+  "type": "ResilientDiagnosticRecord",
+  "specVersion": "2.0.0",
+  "schema": "rdr/1",
+  "process": {
+    "id": "pid:claude-ios-sim",
+    "imageHash": "b3:img-abc",
+    "entry": "_main",
+    "profile": "prod"
+  },
+  "fault": {
+    "type": "LoaderFault",
+    "kind": "MissingProvider",
+    "code": "LDR-DEP-MISSING",
+    "severity": "fatal",
+    "import": {
+      "name": "com.apple.CoreSimulator",
+      "versionReq": ">=0",
+      "binding": "REQUIRED",
+      "requestedBy": "com.facebook.FBSimulatorControl",
+      "chain": [
+        "com.anthropic.claude.ios-sim",
+        "com.facebook.FBSimulatorControl"
+      ]
+    },
+    "searched": [
+      {
+        "store": "system",
+        "result": "absent"
+      },
+      {
+        "store": "cryptex",
+        "result": "absent"
+      }
+    ]
+  },
+  "phase": "seal-verify",
+  "closure": {
+    "coreSize": 3,
+    "sealedManifestHash": "b3:scm-xyz"
+  },
+  "chain": [
+    "com.anthropic.claude.ios-sim",
+    "com.facebook.FBSimulatorControl"
+  ],
+  "env": {
+    "osBuild": "25A1",
+    "model": "iPhone",
+    "abiLevel": 210,
+    "bootId": "boot-1"
+  },
+  "redaction": {
+    "tier": "telemetry",
+    "saltId": "salt-1"
+  },
+  "reproKey": "b3:repro-abc",
+  "capturedAt": "2026-08-03T00:00:00Z"
+}

examples/resilient_diagnostic_record_degraded.json

@@ -0,0 +1,56 @@
+{
+  "id": "urn:srcos:rdr:claude-desktop:2026-08-03",
+  "type": "ResilientDiagnosticRecord",
+  "specVersion": "2.0.0",
+  "schema": "rdr/1",
+  "process": {
+    "id": "pid:claude-desktop",
+    "imageHash": "b3:img-def",
+    "entry": "_main",
+    "profile": "prod"
+  },
+  "fault": {
+    "type": "LoaderFault",
+    "kind": "MissingProvider",
+    "code": "LDR-DEP-MISSING",
+    "severity": "degraded",
+    "import": {
+      "name": "com.apple.CoreSimulator",
+      "versionReq": ">=0",
+      "binding": "FEATURE",
+      "capability": "simulator-control",
+      "requestedBy": "com.facebook.FBSimulatorControl",
+      "chain": [
+        "com.anthropic.claude.desktop",
+        "com.facebook.FBSimulatorControl"
+      ]
+    },
+    "searched": [
+      {
+        "store": "system",
+        "result": "absent"
+      }
+    ]
+  },
+  "phase": "running-lazy",
+  "closure": {
+    "coreSize": 3,
+    "sealedManifestHash": "b3:scm-desktop"
+  },
+  "chain": [
+    "com.anthropic.claude.desktop",
+    "com.facebook.FBSimulatorControl"
+  ],
+  "env": {
+    "osBuild": "25A1",
+    "model": "Mac",
+    "abiLevel": 210,
+    "bootId": "boot-2"
+  },
+  "redaction": {
+    "tier": "local",
+    "saltId": "salt-2"
+  },
+  "reproKey": "b3:repro-def",
+  "capturedAt": "2026-08-03T00:00:00Z"
+}

registry/contract-registry.json

@@ -811,6 +811,11 @@
       "path": "schemas/LivenessProfile.json",
       "sha256": "sha256:2ba5665d3322c3861f70c7b8e25b0c13b306c65103a53cabf190f137d3a47578"
     },
+    "LoaderFault": {
+      "$id": "https://schemas.srcos.ai/v2/LoaderFault.json",
+      "path": "schemas/LoaderFault.json",
+      "sha256": "sha256:f1ca80e3aeec7402ad46d6682ff35d96cd7227ae745b9e96441c6b91fd9a2684"
+    },
     "LocalArtifactRef": {
       "$id": "https://schemas.srcos.ai/v2/LocalArtifactRef.json",
       "path": "schemas/LocalArtifactRef.json",
@@ -1251,6 +1256,11 @@
       "path": "schemas/ReserveScenarioReport.json",
       "sha256": "sha256:e4a878579aae3d3795d8d8a4fb2eb24e1159877ed6306a5fdbf6fadf3f6b4545"
     },
+    "ResilientDiagnosticRecord": {
+      "$id": "https://schemas.srcos.ai/v2/ResilientDiagnosticRecord.json",
+      "path": "schemas/ResilientDiagnosticRecord.json",
+      "sha256": "sha256:4de57a2346de5316b7b501b27b339729742f8252105e446846d707751791ec2b"
+    },
     "ResourceContract": {
       "$id": "https://schemas.srcos.ai/v2/ResourceContract.json",
       "path": "schemas/ResourceContract.json",
@@ -1837,5 +1847,5 @@
       "sha256": "sha256:eadc32085987ffda647b090e3eba3726edd102a66d4736e239457bb74867004b"
     }
   },
-  "count": 367
+  "count": 369
 }

schemas/LoaderFault.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.srcos.ai/v2/LoaderFault.json",
+  "title": "LoaderFault",
+  "description": "A typed, stable-coded fault the resilient loader (rld) constructs BEFORE any degradation or halt (invariant I5 / rule R2: no bare abort). The class of the failing import edge deterministically fixes severity (REQUIRED->fatal, FEATURE->degraded, LAZY->handled-or-fatal, WEAK->info) — the classifier is a table, not a heuristic. Degradations (non-fatal FEATURE/LAZY misses) are recorded here too, giving a full 'what quietly turned off' trail. Embedded in a ResilientDiagnosticRecord.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["type", "kind", "code", "severity"],
+  "properties": {
+    "type": { "const": "LoaderFault", "description": "Type discriminator; always 'LoaderFault'." },
+    "kind": {
+      "type": "string",
+      "enum": ["MissingProvider", "VersionUnsatisfied", "InterfaceMismatch", "SignatureInvalid", "CorruptImage", "SandboxDenied", "ResourceExhausted"],
+      "description": "The fault variant."
+    },
+    "code": {
+      "type": "string",
+      "enum": ["LDR-DEP-MISSING", "LDR-DEP-VERSION", "LDR-ABI-MISMATCH", "LDR-SIG-INVALID", "LDR-IMG-CORRUPT", "LDR-SBX-DENY", "LDR-RES-EXHAUST"],
+      "description": "Stable machine code; the root-cause line is a pure lookup on this (no free-text parsing)."
+    },
+    "severity": {
+      "type": "string",
+      "enum": ["fatal", "degraded", "handled", "info"],
+      "description": "Determined by the failing edge's binding class, not by heuristics."
+    },
+    "import": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "The import reference that failed (present for dependency/ABI faults).",
+      "properties": {
+        "name": { "type": "string", "description": "Required interface name." },
+        "versionReq": { "type": "string", "description": "Requested version range." },
+        "binding": { "type": "string", "enum": ["REQUIRED", "FEATURE", "LAZY", "WEAK"], "description": "Binding class of the failing edge (drives severity). The reference incident's defect: this was REQUIRED where it should have been FEATURE." },
+        "capability": { "type": "string", "description": "Feature capability token kappa, when binding=FEATURE." },
+        "requestedBy": { "type": "string", "description": "The module that requested the import." },
+        "chain": { "type": "array", "items": { "type": "string" }, "description": "Causal requester chain root -> ... -> requester." }
+      }
+    },
+    "searched": { "type": "array", "items": { "type": "object", "additionalProperties": true }, "description": "Symbolic store queries attempted (named stores, not filesystem paths) — PII-free by construction." },
+    "want": { "type": "string", "description": "Expected interface/ABI digest (InterfaceMismatch)." },
+    "got": { "type": "string", "description": "Actual digest found (InterfaceMismatch)." },
+    "hash": { "type": "string", "description": "Content hash of the offending image (SignatureInvalid/CorruptImage)." },
+    "reason": { "type": "string", "description": "Signature-failure reason (SignatureInvalid)." },
+    "candidate": { "type": "string", "description": "Symbolic store candidate rejected by policy (SandboxDenied)." },
+    "rule": { "type": "string", "description": "Policy rule id that denied the load (SandboxDenied)." },
+    "resourceKind": { "type": "string", "enum": ["VMEM", "FD", "MAPSLOTS"], "description": "Exhausted resource (ResourceExhausted)." },
+    "limit": { "type": "integer", "description": "Resource limit hit (ResourceExhausted)." }
+  }
+}