feat(scroll): P6.6 agent driving loop + lifecycle + milestone e2e (guard enforce live)

[cordialApple]

Land the native attention-anchored agent's driving loop + lifecycle and the milestone e2e that PROVE the spatial guard enforces LIVE — first test with a live proposer AND a live camera, so it de-latents everything P6.2–6.5 built (before this, no test published a camera → the guard guarded nothing).

What

• runAttentionAgent(peer, {intervalMs, actor?, config?, now?, onTick?}) — drive tick() on a cadence until stop(). Each tick fully settles before the next is scheduled (setTimeout AFTER the await, not setInterval) so slow propose round-trips can't pile up; tick()'s single-flight guard is the backstop.
• Single-flight + fail-closed tick() — state is read/written across the await, so an overlapping tick would last-write-wins clobber the observer fold (P6.5 carry-forward: agent non-laundering camera resolution (gating) + ObserverState + awarenessKnown producer #66 F-06). A racing tick() gets an idle no-op. Any throw from the pre-propose section fail-closes to an idle result — tick() never rejects, and the error stays observable via onTick.
• Milestone e2e (real server + ws + Postgres): human publishes a camera, agent reorganizes cold regions. Proves BELT (agent NEVER proposes into the band), SUSPENDERS (a band write is refused op-grain — both a static in-band write AND the check-then-act race where a reader enters a block cold at read-time before the commit lands), and durability (the band survives byte-for-byte in Postgres; a cold agent edit lands).

Gate

simplifier → 4 parallel inspectors (one lens each) → adjudicator PASS. First pass BLOCKED on B1 (belt untested — the e2e proved only suspenders): fixed by tracking PROPOSED apart from COMMITTED and driving the WHOLE cold set, so a reader-blind belt is forced to propose band blocks and the assertion catches it. Teeth-proven: sabotage resolveCameras → [] fails the milestone at the belt assertion (agentMilestone.test.ts:144); revert → green. Also landed FN1–5 (runner leak net, deferred-fake reschedule-guard test, fail-closed tick(), cold-tied durability, F-06 skip pin) + C1 (race test) + C2 (P6.5 cold-target teeth).

• 258 pass / 3 skip, tsc -b --noEmit = 0. The 3 skips are honest P6 guard hardening (P6.3 carry-forward): awareness observer, reconnect-gap fail-closed, self-guard #63 pins — P6.3/P6.4 server awareness (F-04/F-05) + the new F-06 proposer self-exclusion.

Carry-forward (non-blocking, no caller hits them)

• CF1 — stop() can't abort an in-flight propose; a commit that lands after stop() mutates but fires no onTick.
• CF2 — the runner doesn't auto-stop against a destroyed peer.

Both are lifecycle-ownership decisions.

Closes #70.

🤖 Generated with Claude Code

https://claude.ai/code/session_01X7WHDHurYHVibsjwvevzFr