Add safe repository-continuity reconciliation

[szmyty]

Summary

• add a closed request model and deterministic continuity plan for CONTINUITY.md, AGENTS.md, and selected GitHub Copilot/Claude projections
• render repository-specific checkpoints only from explicit caller facts and pinned Aether template bytes
• preserve existing checkpoints by default, require digest-bound reviewed migration for replacement, and reconcile exactly one canonical managed instruction block without changing surrounding prose
• apply reviewed bytes under a repository-local lock with preimage/source/state binding, fail-closed conflicts, compensation, verification, and checksum-bound rollback
• record complete Aether, Hygiene, and EgoLint provenance without granting credential, network, merge, publish, or fleet authority
• add public Draft 2020-12 request/plan/state/rollback schemas, ADR-010, system/architecture updates, documentation, and adversarial regression coverage

Fixture proof across all repository classes and the reviewed Antidote migration remains isolated in #45. CLI/CI dogfood remains #46.

Validation

• python3 -m compileall -q tools tests
• python3 -m unittest discover --start-directory tests --pattern "test_*.py" (109 passed)
• npm test (18 passed)
• repository-continuity, React/Vite, LaunchKit, repository-presentation, and site-suite contract validators passed
• generated request, plan, state, and rollback artifacts validated with Draft 2020-12 and an offline pinned Aether registry
• pinned Aether b7597301c4d22a9bcd580967b5753138bb368111 integration passed create → apply → verify → no-op → rollback with all four surfaces
• exact unified-diff application passed LF, CRLF, bare-CR, mixed-ending, Unicode-separator, and missing-final-newline probes
• malformed-leaf fuzzing returned domain errors across request, plan, state, and rollback boundaries
• git diff --check

The three unchanged clean-consumer package-install scripts were not rerun locally because this workspace exposes pnpm 11.19.0 rather than the CI-pinned 11.24.0; PR CI runs those proofs.

Decision impact

ADR-010 records the bounded exception to ADR-005: the continuity adapter owns only one canonical block inside repository-owned instruction files, while whole-file checkpoint replacement requires an explicit reviewed compare-and-swap migration. It also records provider-deselection and manual hard-crash recovery tradeoffs.

Refs #42
Closes #44

[devactivity-app]

Pull Request Summary by devActivity

Metrics

Achievements

• @szmyty
  Earned XP: 15⭐
  Check Your Progress