fix(architecture): close adapter verification gaps

[yshyn-iohk]

Summary

• establish the canonical language-adapter registry and deterministic human rendering from the reviewed feat(architecture): define language adapter mappings #509 baseline;
• separate Cargo package, exact Rust API path, and stable public error identity;
• reject traversal, symlink components, outside-root, non-regular, oversized, malformed, ambiguous, or weakened canonical-bound evidence;
• enforce mapping/field direction compatibility and explicit structured losses;
• restrict schema-v1 language compatibility to the pinned patch interval;
• resolve mapping vectors exactly once against the canonical cross-language catalog while allowing shared evidence; and
• make mutation fixtures discover every declared bound source and prove an additive fifth-language mapping.

This is the clean replacement for draft #509. It changes no Rust runtime API, generated binding, language SDK, consumer repository, release, or publication behavior.

Issue and decision record

• Issue: architecture(bindings): close adapter registry verification gaps #510
• Parent: architecture(bindings): specify canonical language adapter and error mappings #505
• ADR: ADR 0170
• OpenSpec change: archived as 2026-09-30-close-language-adapter-verification-gaps
• Base SHA: 644993c859b87e2da16612fcdf7cf1868cfe5981

Local review

• Local review: completed; independent implementation review against c6f52020abe4be9504d46dbcbaf218c7f631706f found no blocking findings
• Final exact-head delta: test assertion strengthening and OpenSpec archival only; locally reviewed against 224c1d4a3416a755f783a9f7a822131a565cfbb3
• Findings resolved: all six post-remediation feat(architecture): define language adapter mappings #509 findings plus the three subsequent independent-review rounds
• Deferred provenance hardening: research(bindings): bind adapter revisions to offline source provenance #512 (non-blocking for metadata closure; required before adapter generation)

Constraints and limitations

• Constraint impact: material
• Affected constraint IDs: SDK-ARCH-001, SDK-ARCH-002, SDK-SEC-003, SDK-DELIVERY-001, SDK-LIM-005, SDK-LIM-006
• Limitations: metadata and verification only; no adapter is generated or executed by this change
• Decision authority: issue architecture(bindings): close adapter registry verification gaps #510 and the accepted preimplementation receipt

Evidence

• focused validator: 4 canonical mappings passed
• mutation suite: 2 positive and 90 negative cases passed
• factory after archival: 104 passed, 0 failed
• local Nix: all 38 compatible aarch64-darwin checks passed
• git diff --check: passed
• exact-diff review: no unresolved blocker
• signed commits and DCO trailers: verified

The OpenSpec change is archived and synchronized into the canonical specification. Exact-head hosted CI is the remaining merge gate.

Closes #510
Closes #505
Supersedes #509

[yshyn-iohk]

Factory metrics

• Exact head: 224c1d4a3416a755f783a9f7a822131a565cfbb3
• Profile/outcome: production-ready / merged
• Duration (total/planning/implementation/review/validation/hosted CI/blocked): unknown (incomplete-events) / unknown (incomplete-events) / unknown (incomplete-events) / unknown (incomplete-events) / unknown (incomplete-events) / 505s / unknown (incomplete-events)
• CI (queue/execution/failed/canceled/retries/post-CI pushes): 5s / 498s / 1 / 0 / 2 / 0
• Runtime (sessions/turns/tools): unknown (incomplete-usage) / unknown (incomplete-usage) / unknown (incomplete-events)
• Tokens (input/output/cache read/cache write): unknown (incomplete-usage) / unknown (incomplete-usage) / unknown (incomplete-usage) / unknown (incomplete-usage)
• Coverage: unknown (not-measured)
• Peaks (worktree/target/cache/process RSS): unknown (not-measured) / unknown (not-measured) / unknown (not-measured) / unknown (not-measured)