Summary
Deliver the independently verifiable authorization foundation required by #156 without claiming that all existing generator entry points are gated yet.
Scope
- Pin the exact eCAD commit, contract version, complete v1 schema set, product bundle, and receipt.
- Validate pinned local schemas and all bundled documents without remote schema resolution.
- Recompute exact V0-V4 gate, overall verdict, execution completeness, requirement coverage, evidence bindings, and eligibility.
- Reject dirty sources, moving references, tampering, unsafe paths, mismatched provenance, and every required non-pass result.
- Provide an authorization-before-callback API whose denial path cannot invoke generation or mutate existing output.
- Prove compatibility with a real eCAD product bundle while correctly denying its current non-pass result.
Out of scope
The parent issue remains open for wiring every public generator, canonical BOM/controller role mapping, atomic publication, and downstream generation receipts.
Part of #156.
Summary
Deliver the independently verifiable authorization foundation required by #156 without claiming that all existing generator entry points are gated yet.
Scope
Out of scope
The parent issue remains open for wiring every public generator, canonical BOM/controller role mapping, atomic publication, and downstream generation receipts.
Part of #156.