[FLO-3.2a] Freeze stdio process framing and transcript validation

[szmyty]

Summary

• freeze a deterministic JSON Lines process profile over the existing invocation, event, and result contracts
• add process-mode preflight, bounded transcript/completion validation, and typed protocol/output/termination failures
• route decoded process evidence through the existing authoritative EventSink and Flow-owned result acceptance gate
• add a hermetic process-transcript example, adversarial conformance coverage, ADR-0006, and aligned architecture/roadmap documentation

Scope boundary

This is the focused framing/transcript slice split from #25. It does not launch a child process, bind or verify filesystem artifacts, hash executable/package bytes, authenticate publishers, enforce authority or sandbox profiles, or add a real holon adapter.

Raw stdout/stderr remain caller-owned sensitive evidence. Process errors do not copy those byte streams or reproduce provider-controlled content in display text.

Validation

Passed in CI run 35133684960:

• Rust 1.85.0 and stable: formatting, Clippy with warnings denied, all-target tests, doctests, both hermetic examples, and packaging
• contract, architecture-specification, skill, and agent validators

Also passed locally:

• python3 tools/validate_contracts.py
• python3 .agents/specs/validate-specs.py
• python3 .agents/skills/validate-skills.py
• python3 .agents/agents/validate-agents.py
• git diff --check

Closes #26
Parent: #25
Roadmap-Step: FLO-Q02

[devactivity-app]

Pull Request Summary by devActivity

Metrics

Achievements

• @szmyty
  Earned XP: 15⭐
  Check Your Progress