feat(event): score TDT tracks with pair precision and switch rate

CHANGELOG.md

@@ -6,6 +6,7 @@ All notable changes to TEPP are documented here. The format follows Keep a Chang
 
 ### Added
 
+- `event_core` TDT tracking contracts: hypothesized track assignments, fail-closed duplicate mentions, refusal to treat a track as an instance or state transition, and computed pair precision/recall, identity-switch rate, and RMSE against known-truth assignments.
 - `tepp_api` adaptive orchestration router (ADR 0010): versioned `direct`/`verify`/`committee`/`conductor`/`abstain` selection from CPU `f64` risk, ambiguity, evidence, and token-budget inputs; recorded stages, recursion, decomposition, access lists, and role-specific reasoning effort; fail-closed document-controlled policy/access/credentials; LLM plans remain proposals under deterministic statistical authority; comparable-budget ablation requires a direct baseline; credential-free contextual-orchestrator binding. Live NIM HTTP remains accepted-target.
 - `tepp_api` purpose-bound provider-payload minimization: time-bounded `PurposeGrant` evaluation, fail-closed expired/not-yet-valid/inverted/cross-tenant/impossible-calendar denial, semantic UTC calendar validation, refusal to copy identity mappings into model-provider payloads or ordinary logs, preservation of opaque analytical identifiers and membership roles (no blanket PII mask), a separately authorized scientific re-identification path, and an internally bound FIPS 180-4 SHA-256 audit digest appended through `ReidentificationAuditSink` before disclosure.
 - `persistence_postgres` backup/restore integrity: restored snapshots stay unusable until tenant, canonical `SHA-256`, knowledge-cutoff eligibility, temporal window order, and append-only triggers revalidate; SQL probes raise `restore integrity failed` (ADR 0013).

DOCUMENTATION.md

@@ -59,4 +59,4 @@ The documentation graph is **design-sufficient** when a reviewer can reconstruct
 
 It is **protected-main-sufficient** only after the canonical documents are integrated on protected `main`, remain semantically current with live code, and their required exact-head documentation/security/review gates pass. An active documentation PR can therefore be design-sufficient while the protected branch remains documentation-insufficient.
 
-At the time of this review, immutable evidence records/exact spans, the Rust workspace quality foundation, and typed six-clock values/uncertain intervals (PR #8) are implemented-main. PR #9 is the active-PR that replays Task 4 Allen interval algebra and bounded path-consistency reasoner work onto that protected-main temporal foundation. Superseded PRs #5 and #6 remain historical lineage only. Event ontology, PostgreSQL persistence, shared-latent topic estimation, GPU kernels, TDT/CHRONOS intelligence, longitudinal ESEM/DSEM, visual analytics, production HTTP services, and deployment assurance remain later accepted-target or deployment-owned work.
+At the time of this review, immutable evidence records/exact spans, the Rust workspace quality foundation, and typed six-clock values/uncertain intervals (PR #8) are implemented-main. PR #9 is the active-PR that replays Task 4 Allen interval algebra and bounded path-consistency reasoner work onto that protected-main temporal foundation. Superseded PRs #5 and #6 remain historical lineage only. Event ontology mention/instance separation is on protected main; TDT tracking pair precision/recall lives in existing `event_core` on this active PR. PostgreSQL persistence, shared-latent topic estimation, GPU kernels, remaining TDT/CHRONOS intelligence, longitudinal ESEM/DSEM, visual analytics, production HTTP services, and deployment assurance remain later accepted-target or deployment-owned work.

crates/event_core/src/error.rs

@@ -20,6 +20,12 @@ pub enum EventError {
     UnsupportedWireVersion,
     /// An unknown event-role name was supplied.
     UnknownEventRole,
+    /// A TDT track assignment was treated as an event instance.
+    EventTrackIsNotEventInstance,
+    /// A TDT track assignment was treated as a state transition.
+    EventTrackIsNotStateTransition,
+    /// An unknown event-track label was supplied.
+    UnknownEventTrackLabel,
 }
 
 impl fmt::Display for EventError {
@@ -32,6 +38,9 @@ impl fmt::Display for EventError {
             Self::InvalidWirePayload => "invalid event wire payload",
             Self::UnsupportedWireVersion => "unsupported event wire version",
             Self::UnknownEventRole => "unknown event role",
+            Self::EventTrackIsNotEventInstance => "event track is not an event instance",
+            Self::EventTrackIsNotStateTransition => "event track is not a state transition",
+            Self::UnknownEventTrackLabel => "unknown event track label",
         };
         formatter.write_str(message)
     }
@@ -65,6 +74,18 @@ mod tests {
                 "unsupported event wire version",
             ),
             (EventError::UnknownEventRole, "unknown event role"),
+            (
+                EventError::EventTrackIsNotEventInstance,
+                "event track is not an event instance",
+            ),
+            (
+                EventError::EventTrackIsNotStateTransition,
+                "event track is not a state transition",
+            ),
+            (
+                EventError::UnknownEventTrackLabel,
+                "unknown event track label",
+            ),
         ] {
             assert_eq!(error.to_string(), message);
         }

crates/event_core/src/lib.rs

@@ -4,7 +4,8 @@
 //!
 //! TEPP separates **fallible event mentions** grounded in evidence from
 //! **versioned event instances** used for temporal state, multilevel membership,
-//! and scientific estimation. Mentions never silently become instances.
+//! and scientific estimation. Mentions never silently become instances. TDT
+//! track assignments remain measurement evidence and cannot promote an instance.
 
 mod confidence;
 mod error;
@@ -13,6 +14,7 @@ mod instance;
 mod mention;
 mod registry;
 mod role;
+mod track;
 
 /// Finite confidence on the closed unit interval.
 pub use confidence::EventConfidence;
@@ -34,3 +36,21 @@ pub use mention::EventMention;
 pub use registry::EventRegistry;
 /// Typed event role kind.
 pub use role::EventRoleKind;
+/// Assignment of one mention to one hypothesized TDT track.
+pub use track::EventTrackAssignment;
+/// Opaque TDT track identity.
+pub use track::EventTrackId;
+/// TDT continue-versus-switch track label.
+pub use track::EventTrackLabel;
+/// Threshold a same-track probability into a continue/switch label.
+pub use track::decide_track_continue;
+/// Explicit refusal to treat a TDT track as an event instance.
+pub use track::refuse_track_as_instance;
+/// Explicit refusal to treat a TDT track as a state transition.
+pub use track::refuse_track_as_transition;
+/// Identity-switch rate among consecutive same-truth-track mentions.
+pub use track::tracking_identity_switch_rate;
+/// Precision of recovered same-track mention pairs against known truth.
+pub use track::tracking_pair_precision;
+/// Recall of recovered same-track mention pairs against known truth.
+pub use track::tracking_pair_recall;