test(conformance): bind aligned frozen consumer Cave authority

[BunsDev]

Summary

Bind merged Chat c15936296d0bba8bc36601c8dc20d6884754c0c3 from OpenCoven/chat#171. This fixes the stale packed-consumer Cave pin that rejected all platforms in run 34342544626.

Identity-only producer/tree/signer/source update and documentation. Executable workflow/harness and compressed fixture bytes are unchanged and authenticated against merged Git objects. Historical harness remains 4b35a864; SDK package candidate and all artifact digests are unchanged.

Evidence

124 targeted conformance tests passed, one existing skip; typecheck, lint and contract verification passed. Exact merged producer tree and package/harness/workflow bytes verified; canary and Phase 1 source revisions agree. Hosted CI required on final head.

Coordination

Sole SDK rebind and protected dispatch lane. After merge, align both Chat validator variables, confirm exact Chat main and no active run, then dispatch/approve once. Do not merge unrelated Chat changes during the cycle. Publication remains disabled; progresses #38.

[BunsDev]

Chat main advanced to 523b49f4e7e512c467483fc4373844dea6c2d077 when Chat #160 landed after its refreshed CI passed. This PR currently binds c15936296d0bba8bc36601c8dc20d6884754c0c3. Before rotating validator variables or dispatching from main, refresh the exact producer/tree/package-manifest and associated signer/source expectations to the current head and verify them. The protected workflow checks out github.sha and sets OPENCOVEN_CHAT_SHA to that value. The Vitest update changes package.json and pnpm-lock.yaml; the frozen SDK candidate and canary Cave repair remain unchanged. No further Chat main changes are planned from the consolidation lane during this rebind cycle.

[Copilot]

🟢 Approval recommended

The changes are a consistent, fully-propagated update of frozen producer identifiers across lock/tests/docs with no behavioral code changes and no remaining references to the prior pinned commit.

Pull request overview

This PR updates the frozen cross-repository conformance bindings to point at the merged Chat evidence-producer revision, aligning the lock, contract tests, and docs so the SDK validator recognizes the correct pinned producer commit.

Changes:

• Update the frozen Chat evidence producer commit, tree, and related digests from 79eab7… to c15936… in the conformance lock and its validating tests.
• Refresh contract expectations that assert the workflow documentation contains the new pinned producer commit.
• Update release and workflow documentation to reflect the new compatible producer revision and related notes.

File summaries

File	Description
tests/conformance-gaps.spec.ts	Updates the expected frozen evidenceProducer commit/tree and signer/source digests to the new Chat revision.
tests/conformance-contract.spec.ts	Updates the documentation contract assertion to require the new pinned producer commit hash.
RELEASING.md	Updates release documentation to reference the new compatible schema-v2 producer commit.
docs/workflows/client-v1-cross-repository-conformance.md	Updates the pinned producer commit reference and adds clarifying notes about unchanged digests/locks.
conformance/client-v1-cross-repository-lock.json	Updates the machine-readable frozen lock’s Chat evidence producer commit/tree and signer/source digests.

Review details

• Files reviewed: 5/5 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[BunsDev]

Dispatch preflight correctly STOPPED: no workflow was dispatched against stale c1593629 after concurrent Chat #160 advanced main to 523b49f4. Both variables currently name merged SDK 5e6c5f1, but dispatch is blocked until its producer binding is updated. I will perform one final rebind including exact package manifest metadata. Please freeze ALL Chat main merges, including dependency/doc cleanup, until the protected run finishes; these otherwise invalidate the strict producer commit even when behavior is unrelated.

[BunsDev]

Replacement SDK #172 is now the sole rebind lane for current Chat 523b49f4. Exact updated package manifest digest is included; governed executable workflow/harness bytes are unchanged. Prior preflight prevented dispatch. Awaiting hosted CI, then merge/rotate/dispatch. No further Chat main merges during the cycle, please.