feat(contracts): add evidence freshness conformance vectors

[saagpatel]

What

Add EvidenceFreshnessConformanceV1 as an immutable, language-neutral fixture with a deterministic reference evaluator, manifest, generator, and producer tests.

Why

Personal Ops, Portfolio Command Center, and Portfolio Index independently calculate evidence age. The shared contract locks the edge semantics that must not drift while leaving product thresholds, labels, and alert policy consumer-owned.

Review Of What Was Built

• 15 deterministic vectors covering exact aging/stale boundaries, timezone requirements, clock skew, unavailable reads, and non-applicable policy
• canonical state and reason codes with three explicit consumer mappings
• digest-bound manifest and reproducible generator
• fail-closed producer tests and additive compatibility canary

Cleanup Review

No runtime library or shared UI policy was introduced. Threshold values, UI language, alert policy, and build-versus-reader behavior remain intentionally outside this contract.

Verification Summary

• uv run ruff check .
• deterministic artifact check passes
• full test suite: 3,464 passed, 2 skipped
• branch includes current main at 7e52e7b

Shipped Summary

The branch provides one public-safe fixture that independent Python, TypeScript, and Rust consumers can replay without importing a shared runtime.

Next Phase

Merge the producer, read back its immutable main SHA, then repin and publish Personal Ops, Portfolio Command Center, and Portfolio Index consumers in that order. No deployment or runtime activation is part of this phase.

Remaining Roadmap

SPP-02 web release readback follows consumer delivery; conditional and reroute lanes remain evidence-gated.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.