feat(data-quality): add W65 lifecycle persistence contracts

[ammarheidari]

Authority

W65 / #214 is ACTIVE. Slice 3 runtime evaluator plus corrective #251 are protected-main admitted on parent 28df067746159c8a35da300cf0e0376fef0a4c3f.

Slice 4A scope

• bounded lifecycle states for data-quality policies;
• optimistic revision contract for durable lifecycle writes;
• bounded policy listing by cluster/state;
• bounded aggregate evidence/progress history query;
• lifecycle store contract for later SQLite/PostgreSQL implementation;
• explicit no-raw-payload durability surface.

Safety

• no Kafka reads or consumer-group membership in this slice;
• no offset commits;
• no raw key/value/header/payload persistence;
• evidence range capped at 31 days and 2,000 points;
• policy listing capped at 500 entries;
• lifecycle mutations require revision semantics;
• no worker/API/UI activation yet.

Final corrective exact head: ce6e7060f44d82e9523c1193b2aaf8fb5ca44312.

Corrections included:

• evidence/progress persistence now accepts only a validated DataQualityEvaluationResult pair;
• durable evidence accepts only the closed server-derived bounded evaluator source;
• create and revision-guarded replace semantics are split explicitly;
• policy listing has bounded cursor/truncation semantics.

Refs #214 #209.

• continuation cursors now use the same exact-ID validation as request cursors.

[ammarheidari]

@codex review

Please review exact head 4123eb3a495529cb4e5f251f3ed83268af16623a only. Focus on bounded lifecycle/query semantics, optimistic revision authority, evidence/progress consistency, and proving the persistence contract cannot durably carry raw Kafka key/value/header/payload material.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-04T18:48:40.867307Z	ce6e706	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4123eb3a49

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[ammarheidari]

@codex review

Please review corrective exact head b8ce3936cf8b0c17c51ae91279bd742c74e7fb2a only. Verify all four prior findings are fully closed: validated evidence/progress binding, explicit create vs revision-guarded replace, closed server-derived durable evidence source, and bounded policy-list pagination/truncation.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b8ce3936cf

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[ammarheidari]

@codex review

Please review final corrective exact head ce6e7060f44d82e9523c1193b2aaf8fb5ca44312 only. Prior four findings remain addressed; additionally verify truncated policy pages only expose continuation IDs that satisfy the same exact bounded policy-ID grammar as afterPolicyId.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Bravo.

Reviewed commit: ce6e7060f4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".