Harden workflow reliability contracts

[jamil2018]

Summary

• make immutable validation-node publications and decision receipts authoritative across review, runtime capsules, baseline, implementation, and completion
• cut coordinator, MCP, CLI, and UI errors over to the validated appraise.error/v1 envelope with scrubbed failure receipts
• add database-backed operation receipts, exact replay/ownership fencing, typed reconciliation state, response budgets, and deterministic qualification targets
• synchronize the root implementation, scaffold template, migrations, docs, and Graphify artifacts

Why

This is the coordinated breaking-change reliability release. It prevents ambiguous evidence reconstruction, premature lifecycle failure, duplicate execution after interruption, and uncorrelatable public errors while keeping target-product failures as managed evidence.

Validation

• root Vitest: 1032/1032
• packages/appraisejs: 125/125
• Playwright: 43/43
• migration suite: 10/10, including fail-closed rollback for ambiguous historical publications
• coordinator boundary/receipt/implementation focused suite: 31/31, followed by boundary 9/9 after final refactors
• complete MCP lifecycle E2E: 105 tools, 14 resources, 3 resource templates
• qualification targets: 4/4
• production build, package/artifact release checks, harness checks, scaffold sync, and Graphify
• Fallow commit gate: zero introduced findings
• React Doctor commit gate: 100/100
• independent final review: approved

Scope notes

The unrelated local E2E Auth identifier edit and transient appraise/ artifacts are not included. Writor source was not modified; its historical ambiguous publication provenance is now diagnosed fail-closed by the migration.