feat(r0): add state registry and governance index rebuild

[Kucell]

M-042 — State Class Registry + Governance Index Rebuild · Reconciled

Stacked on the reconciled M-041 branch. This PR contains only the M-042 delta.

Delivered

• State Class Registry v1 + schema
• State Sync and pre-commit hook consume one Registry source of truth
• explicit tracked/local/derived/evidence/legacy/ignored policies
• deterministic Decision/Waitpoint index projection
• read-only governance-index verify
• fail-closed projection-only governance-index rebuild
• malformed/legacy source reporting without semantic guessing
• Waitpoint writer projection contract fixed to prevent new drift

Latest-main reconciliation — 2026-09-30

• branch head: fd645174f4526d408fc4dfa5362d223a351c1d6a
• base M-041 head: 597d104a001655f4dc956269c8a1f8a8d9355343
• compared with M-041: ahead 29 / behind 0
• M-042 State Registry and Index run feat(cli): add user-gated PR merge #10 36701142119: SUCCESS
• stacked M-041 Runtime Safety run feat(briefing): add module progress to project status reports #21 36701142094: SUCCESS
• M-040 Final Product Validation run 36701142115: SUCCESS
• PR remains mergeable: true

Historical governance records

This PR intentionally does not normalize old Decision/Waitpoint authoritative records. verify reports legacy/malformed sources and rebuild fails closed until a separately approved migration defines their semantic mapping.

Existing Team Pack signal

The known Node 14 support-policy debt remains outside M-042 scope.

Safety

• no main merge yet
• no release/publish
• no historical source-record normalization
• governance carrier: Kucell/cortex-agent-agent:mission/M-042-state-registry-index-rebuild

A separate merge authorization is still required.