feat(reconciliation): add C01 recovery evidence contract

[SuPuHe]

Summary

• add the C01 provider-neutral index-view-v1 recovery evidence contract
• validate deployment-pinned Subgraph MCP responses, _meta freshness, intent bindings, and bounded candidate data
• add deterministic fail-closed scenarios and known-identity Privy/Arc evidence validation
• document the Graph removal/value gate and the current safe fallback decision
• integrate @oneshot/reconciliation into the root pnpm/TypeScript workspace

B01/B02 alignment

B01/B02 select direct USDC ERC-20 transfer settlement. C01 therefore queries by sender/token/recipient/amount plus a bounded block window. memo_id is not used by the v1 settlement path.

Current Graph decision

FALLBACK_DIRECT_RECOVERY remains active because the repository has no immutable OneShot/Arc Subgraph deployment, configured Subgraph MCP/model access, or deployment credentials. The Graph qualification remains NOT VERIFIED until the documented live gate passes.

Safety

• Subgraph/MCP output is non-authoritative
• empty, stale, malformed, injected, ambiguous, or contradictory evidence preserves UNKNOWN
• every normalized view has settlementPermission: NEVER
• this package exposes no settlement or retry capability

Verification

• Prettier check passed
• strict TypeScript build passed after rebasing onto current develop
• 24 Vitest cases passed before workspace integration
• the post-rebase Vitest retry was blocked by the local Windows/WSL UNC runner limitation, not by a test failure

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	oneshot	f1e971b	Sep 07 2026, 02:43 PM