feat(operations): centralize governed execution

[yaacovcorcos]

User effect

Scient now routes governed agent-gateway operations through one host-neutral executor instead of allowing each transport path to assemble authority, lifecycle, and outcome handling independently. Reads are released only after current authority is rechecked; writes preserve their transactional or revocation-fenced execution contract; irreversible external effects remain disabled until durable intent exists.

Why this layer

This is the smallest independently reviewable execution layer above draft PR #172's operation registry and authority model. It establishes the owned seam required before adapting Synara's external MCP, automation, browser, or annotation concepts. It does not expose a new external endpoint or enable any additional capability.

Provenance and disposition

• Donor evidence: Synara external MCP and agent-gateway concepts, especially the need for one policy-owning operation boundary.
• Disposition: reimplemented on Scient-owned seams; no donor commit was cherry-picked and no donor source was copied.
• License: no new third-party source or notice obligation.

Protected boundaries

• Registry definitions remain the immutable owner of capability, actor-kind, effect-class, and canonicalization policy.
• Adapters cannot override operation metadata or manufacture successful outcomes.
• Irreversible external effects fail closed until durable pre-effect intent is provided by the next layer.
• No identity, credential, persistence, migration, updater, release, browser, or live-data authority is introduced here.

Exact scope

• Base: 82ecc2de13fd0a1d5a7c3b186afbda06dcf98d67 (feature/scient-operation-authority-final, draft feat: establish Scient operation authority #172)
• Head: 83b60c3725b74684759fe58450c334b391120f45
• Files: 8; +717/-155
• Production: executor service/layer, gateway transport delegation, and inert/live wiring.
• Tests: executor lifecycle/policy regressions plus gateway delegation coverage.

Verification

• Exact-head focused suite: 3 files, 83 tests passed.
• apps/server typecheck passed.
• git diff --check passed; publication worktree clean.
• Earlier broader focused certification: 157 tests passed with format/static checks.
• No computer use, browser automation, screenshots, geometry checks, visual tests, or manual UI acceptance were performed or required for this nonvisual layer.

Independent review

Exactly three non-author reviews certified this exact head:

1. Correctness/reliability/concurrency/lifecycle/performance/regressions: clean.
2. Security/privacy/data loss/migrations/credentials/sessions/permissions/release safety: clean.
3. Architecture/maintainability/Scient identity/ownership/provenance/test sufficiency: clean.

All scoped findings were resolved in the append-only repair commit before recertification; no unresolved P0, P1, or P2 remains.

Rollback and limitations

Rollback is the removal of this isolated executor layer and restoration of the prior transport-local orchestration; it changes no schema or stored data. This draft depends on #172 and must not be accepted first. Durable receipts/idempotent restart reconciliation are intentionally delivered in the next independent draft; external MCP, automation, browser control, and scientific records remain disabled/unimplemented here.

Final alignment certification — 2026-08-01

This section supersedes any earlier publication-boundary wording.

• Exact current base: 82ecc2d
• Exact current head: 83b60c3
• Alignment: normal merge only; no rebase or force-push.
• Hosted exact-head CI: fully green.
• Final review: exactly three independent reviewers examined the combined aligned operation stack. Correctness explicitly cleared feat: establish Scient operation authority #172 through feat(operations): persist durable execution receipts #179; security reported P0–P3 = 0; architecture cleared the foundation chain after this evidence refresh. The two blocking findings are confined to dependent feat(automations): bind operations to active runs #182 and feat(browser-evidence): add governed evidence authority #184 and do not affect this PR.
• Conflict-free alignment; focused executor/gateway checks 83/83 and server typecheck passed.

[yaacovcorcos]

Final alignment evidence: normally merged updated #172 with no conflicts; exact head 83b60c3. Focused executor/gateway checks 83/83, server typecheck and diff check passed. Hosted exact-head CI is fully green. Combined stack final-head review is in progress.