Add the evidence-intake contract: external suppliers behind profile authority

[joshft]

Opens the probe-supplier surface. An adversarial pre-implementation design review reshaped the draft contract; its five critical findings became the design: invoker-owned profile authority (the external Runner.MaxTier), an outcome enum where only a counterexample refutes, exact subject identity (head SHA + input digest), required-supplier gate blocking with visible per-row rejections, and supplier-attested binding markers on every acting row. Probe ids namespaced by construction; strict decoding; out-of-tree regular files only; audit pin via document digest. Receipt.GateBlocked becomes the single gate definition. Schema 0.0.12. Live-verified: all three gate legs behaved to spec on first run.

🤖 Generated with Claude Code

https://claude.ai/code/session_015GeUG1gboWiZSnFyzQghyp

[github-actions]

correctful receipt

30 claims — ✅ 30 verified · ❌ 0 refuted · ⚠️ 0 unverified

Change: origin/master...HEAD (a92d6b2..1e80bcc · input:b8a6ac70a393) — 11 files

⚠️ Unverified remainder (0) — what nothing checked

Empty — every harvested claim reached a probe.

✅ Verified (30)

Tier	Claim	Statement
T1-assertion	TestConfigValidatesLoudly	Config Validates Loudly
T1-assertion	TestInTreePathsRejected	In Tree Paths Rejected
T1-assertion	TestAdmissionGates	Admission Gates
T1-assertion	TestAuthorityComesFromTheProfile	Authority Comes From The Profile
T1-assertion	TestOutcomeVocabulary	Outcome Vocabulary
T1-assertion	TestRowRejections	Row Rejections
T1-assertion	TestLoadValidatesAndDigests	Load Validates And Digests
T1-assertion	TestPatternMatching	Pattern Matching
T1-assertion	TestEvaluateFloors	Evaluate Floors
T1-assertion	TestEvaluateScopeFloorAndLLMGate	Evaluate Scope Floor And LLMGate
T1-assertion	INV-001	Remainder Contains Every Unverified Claim
T1-assertion	INV-002	Refuted Claim Never Enters Remainder
T1-assertion	TestVerifiedClaimCarriesProbeTier	Verified Claim Carries Probe Tier
T1-assertion	INV-007	Refutation Dominates Verification
T1-assertion	TestT0PassConfersNoVerification	T0 Pass Confers No Verification
T1-assertion	TestScopeExclusionsAndInputDigestAreDisclosed	Scope Exclusions And Input Digest Are Disclosed
T1-assertion	TestSuppressedMentionsAreDisclosed	Suppressed Mentions Are Disclosed
T1-assertion	TestRemainderSectionAlwaysRenders	Remainder Section Always Renders
T1-assertion	TestCoverageDisclosesUnreadFiles	Coverage Discloses Unread Files
T1-assertion	TestUnreadCausesRenderSeparately	Unread Causes Render Separately
T1-assertion	TestAnchoringSummaryAndMarkers	Anchoring Summary And Markers
T1-assertion	TestLLMProposedMarker	LLMProposed Marker
T1-assertion	TestRefutedDetailComesFromFailingProbe	Refuted Detail Comes From Failing Probe
T1-assertion	TestReceiptSanitizesPathsAndPinsSHAs	Receipt Sanitizes Paths And Pins SHAs
T1-assertion	TestDetailSanitizationIsCategorical	Detail Sanitization Is Categorical
T1-assertion	TestLLMPassCountsOnlyWithConfirmedEdge	LLMPass Counts Only With Confirmed Edge
T1-assertion	TestLLMVerifiedRowKeepsProvenance	LLMVerified Row Keeps Provenance
T1-assertion	TestReceiptCarriesToolVersion	Receipt Carries Tool Version
T1-assertion	TestPolicySectionRenders	Policy Section Renders
T1-assertion	TestIntakeRendersAndExternalMarks	Intake Renders And External Marks

Harvest coverage: 11 files — 4 claimed · 7 scanned · 0 unread
_{2 spec-id mention(s) not minted as claims — the repo defines no spec-id corpus, so a reference has no possible referent}

_{schema 0.0.12 · correctful v0.0.0-20260818010406-1e80bcc64651 1e80bcc · exit gate: refuted claims block; the remainder informs, never fails}