docs: define IFC profile variability and publication rules

[Brad-Edwards]

Summary

The general IFC algebra can distinguish independent owners, but the published security vocabulary cannot directly represent their selective releases. Define governed finite profile publication, requirement-relative support, execution weakening and historical migration, with explicit limits on current contract and runtime support.

Requirement UIDs

• SEM-233
• SEM-235

Related Issues

Refs #1354

ADR Impact

• ADR-114
• ADR-101 (amended)
• ADR-108 (amended)

Changes

• Publish IFC-01–IFC-07 and ADR-114 with owner-qualified confidentiality/integrity cases and migration obligations.
• Amend SEM-233/SEM-235 and ADR-101/108 while preserving current profile bytes and implementation evidence.
• Add bounded behavioral witnesses and exact-path governance coverage; refresh required ADR and historical-index pins.
• Integrate the execution-architecture decision from dev as ADR-113 and assign the IFC decision ADR-114, with recorded amendments.

Test Plan

• Unit tests pass
• Integration tests pass if applicable
• Full completion suite required in CI before merge
• No coverage regression

113 targeted tests passed. ADR pins, changed-path requirement governance, file-local policy, lint and Markdown links passed. Required publish hooks passed; pre-push review returned ship with no findings. Tests are bounded semantic/contract evidence, not owner-aware runtime adoption.

Ground Control Checks

• Repository policy checks required in CI before merge
• Pre-push Codex review completed; all findings fixed or dispositioned

Traceability

• IMPLEMENTS: SEM-233, SEM-235 ← specs/formal/participant-semantics/ifc-profile-variability.md; ADR-114; docs/migration/ifc-profile-variability.md
• TESTS: SEM-233, SEM-235 ← test_issue_1354_ifc_profile_variability.py and test_issue_1354_governance.py (bounded design and real parser/governance evidence)

Checklist

• Code follows the project's coding standards
• Changelog: owned by Release Please (generated from the Conventional Commit PR title; no per-PR fragment)
• Architectural docs updated if stack, package structure, or key behaviors changed

Documentation

Updated: see diff.

[Brad-Edwards]

Ground Control delivery — this pull request delivers issue #1354; Phase E runs on merge.

[Brad-Edwards]

Ground Control delivery — this pull request delivers issue #1354; Phase E runs on merge.