Lower and verify Edict compare-and-set operations with recovery evidence

.ban-nondeterminism-allowlist

@@ -28,6 +28,9 @@ std-fs crates/warp-core/tests/bounded_workspace_patch_tests.rs bounded-patch fil
 std-process crates/warp-core/tests/bounded_workspace_patch_tests.rs bounded-patch filesystem fixture temp directory disambiguation only.
 std-fs crates/warp-core/tests/external_consumer_contract_fixture_tests.rs installed-contract restart WAL fixture I/O only.
 std-fs crates/warp-core/tests/executable_operation_pipeline_tests.rs executable-operation restart WAL fixture I/O only.
+std-env crates/warp-core/tests/edict_projected_cas_tests.rs compare-and-set WAL fixture temp directory selection only; no environment value enters semantic history.
+std-fs crates/warp-core/tests/edict_projected_cas_tests.rs compare-and-set WAL fixture owned directory creation and cleanup only.
+std-process crates/warp-core/tests/edict_projected_cas_tests.rs compare-and-set WAL fixture temp directory disambiguation only; process identity never enters operation bytes.
 std-fs crates/warp-core/tests/provider_contract_admission_tests.rs provider invocation restart WAL fixture I/O only.
 std-fs crates/warp-core/tests/trusted_runtime_host_loop_tests.rs trusted runtime filesystem WAL fixture I/O only.
 std-env crates/warp-core/tests/wsc_store_tests.rs WSC filesystem fixture temp directory selection only.

CHANGELOG.md

@@ -7,6 +7,8 @@
 
 ### Added
 
+- Native projected compare-and-set invocation encoding retains canonical application input and statically binds the expected attachment-value digest. The native lowerer and independent verifier reconstruct CAS-specific profiles and reject rebound digest paths or under-budget configurations. Generated schema, reproducible components and a retained public Edict compiler build establish package production. The retained compiler package now has scheduler execution, pending/committed Action recovery, stale-digest noncommit recovery and typed refusal witnesses.
+
 - Bounded executable-operation host sessions retain immutable observations and
   logical-request bindings in the native WAL. Echo evaluates supplied node/atom
   preconditions inside operation preparation, includes their reads in scheduler
@@ -22,6 +24,10 @@
 
 ### Fixed
 
+- Package admission rejects result projections whose expected-digest binding conflicts with the selected mutation program, before they can occupy an installed operation coordinate.
+
+- Both executable mutation providers refuse transformed effect arguments instead of silently projecting the caller input into a different mutation. Direct application-input arguments remain supported; the independent verifier enforces the same boundary.
+
 - Observation slots preflight their canonical byte bound and charge execution reads before copying Atom payloads.
 
 - Private Edict runtime decoding resolves named integer types through their declared width, matching source-function provider acceptance.

README.md

@@ -292,6 +292,12 @@ result bytes, and domain-separated result identity. A second fresh host must
 recover byte-identical result evidence from the decided-Tick WAL; Echo does not
 invoke a native application callback or reconstruct the result from target
 state.
+An Edict-authored compare-and-set operation also produces an independently
+accepted package. The [compiler-output integration tests](crates/warp-core/tests/edict_projected_cas_tests.rs)
+exercise that exact package through scheduler updates, stale-digest obstructions,
+and fresh-host pending/completed Action recovery. This path uses the trusted-host
+Action API; the CLI runner above still selects create-if-absent.
+
 Canonical projected invocation input is capped at 65,536 bytes, and the
 compiler-declared maximum result size is capped at 65,536 before private
 scheduler evaluation. Produced canonical result bytes are measured against that