3e6f609dda
Source governance schema: append-only source_approval table enforcing approval before ingestion. Dataset manifest hardened to support FROZEN state, requiring approval timestamps. Boundaries tested (6/6 passing). Server-side resolver (DapperApprovedModelContextReader) now guards both model and dataset approval. P2–P6 deferred: Dataset freeze command, maker-checker review, evaluation/proposal orchestration remain pending human decision package (source allow-list, license/SLA, metric versions, roles). No source/model seeded per CLAUDE.md governance. Migrations 0033–0034 idempotency verified fresh/upgrade/re-run on isolated test DB. AGENTS.md: Maturity (contract-first); Necessity (governance prerequisite). Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
Versioned contracts
This directory is the machine-readable contract surface for policy, event and outcome-metric definitions.
policies/sell-policy-contract.v1.json: approved research-candidate implementation values; SHA-256a269a0331b83c0f6ec108e7587de1d20c798036ff8d0c03d726cd854e73d8480.events/signal-decision-created.v2.schema.json: immutable outbox payload contract.metrics/outcome-metrics.v1.json: proposed metric definitions; Quant/Risk approval is still required.
The C# constants are intentionally checked against the policy JSON by scripts/validate_v123.py. A changed value without a Model Change record, Golden vectors and OOS impact evidence blocks G2.