Maintenance: pin Contract C authority root regression

[camerontjs-dot]

Classification

Maintenance / regression-only hardening. No Decision policy semantics, Contract C/D contract behavior, Authorization, execution, release, or production default change.

Exact base

main@a4425f8eb47449ff6c683222921bbea9483742e2

Evidence basis

Draft research PR #51 mutation-audited ten load-bearing Decision Engine faults. Existing maintained integrations killed 9/10. The survivor removed exact Contract C authority-root verification from src/contractCIngress.js; all maintained CAL Decision integrations still passed, while a research wrong-authority control killed the mutant.

Smallest change

One maintained integration test only: tests/decisionEvaluateCli.integration.mjs.

The CLI helper permits an explicit Contract C authority root for negative controls. The new control deliberately supplies the exact released Contract D checkout as the Contract C authority root. That checkout is from the same apparatus repository and still contains compatible Contract C validation machinery, but it is not the exact released Contract C authority identity. Correct ingress rejects it with authority_identity_mismatch and emits no Decision bytes.

Verification

Exact candidate head: ff4783aa55e63f3ca098d2f54884b43b96fee31f.

• CI & Repository Hygiene Verification run 34430551382: SUCCESS.
• Contract-first Decision evaluate CLI conformance run 34430551350: SUCCESS.

The targeted conformance reran both maintained policies, the shared runtime/CLI integration, exact Contract D independent consumption, and tracked-mutation checks.

Disposition

SUPPORTED FOR REGRESSION-ONLY MAINTENANCE.

This promotes only the cheap falsifier demonstrated by PR #51. It does not promote any research policy or ingress architecture.

Non-claims

• does not implement PR Research: require exact Contract B index at Decision ingress #50 Contract B index ingress;
• does not resolve Policy A assessment semantics;
• does not select a producer semantic authority policy;
• does not generalize the Decision primitive;
• no Authorization or execution behavior changes.