P2: consolidate prepared boundaries, recovery, and numerics evidence

[wolf75222]

Scope

This draft consolidates prepared numerics history on current master without squashing or rebasing.

Integrated histories:

• ADC-682 qualified generated/native physical-flux provider packs (fix(codegen): bind qualified flux provider packs (ADC-682) #641, ADC-682: bind qualified native flux provider slots #651);
• ADC-749 boundary-authority ratchet (ADC-749: ratchet remaining legacy boundary authorities #656) plus resolve-time executable-authority hardening (b160e6aa, d85aadf4);
• ADC-751 prepared MC/Superbee providers plus convergence/discontinuity qualification ([ADC-751] Qualify MC and Superbee reconstruction #668);
• ADC-753 model-declared recovery admissibility ([ADC-753] Enforce model-declared recovery admissibility #662);
• ADC-754 typed Riemann rejection capability boundary (ADC-754: expose typed rejection versus missing recovery policy #658);
• ADC-755 prepared recovery consumer boundary (ADC-755: expose prepared recovery consumer cutover boundary #660);
• ADC-756 transactional cell/rung accepted-state and restart authority ([ADC-756] Persist cell temporal-partition restart authority #665).

Explicit integration commits preserve history: ADC-751 qualification 7069df8f, gate provenance fix 37e90fb3, and ADC-749 completion slice 4547c129.

Gate progress

The bounded ADC-757 gate selects 35 exact executable proofs and identifies all nine contributing tickets. It supports exact CTest, MPI CTest, and pytest nodes; rejects unknown/skipped/xfail proofs; and covers Python IR/generated-ABI/restart parity, host-workspace concurrency, qualified physical-flux packs, MC/Superbee qualification, typed recovery/admissibility, and temporal-partition authority.

The ADC-749 resolve boundary is now fail-closed: characteristic descriptors without executable eigenstructure, forged representation converters, unsupported analytic inputs, and mixed logical clocks cannot survive numerical resolution as inert metadata and fail only later at compile/bind.

Seven large families remain explicitly deferred: 3D/metric/EB/characteristic coverage, legacy deletion, AMR migration/restart, GPU execution, accelerator stream partitioning, performance, and production LATS/load balancing.

Validation on the combined source head

• ADC-749 + ADC-757 combined source batch: 21 passed;
• ADC-749 isolated qualification reported 46 passed;
• updated ADC-757 architecture/refusal batch: 9 passed;
• ADC-682 provider/compiler source integration: 42 passed;
• exact Python IR/restart nodes: 5 passed;
• Ruff, docs, clang-format for the ADC-751 C++ proof, and git diff --check: passed;
• docs retain one existing freshness warning.

Non-claims

The installed package is older than this combined head. Selected native ADC-682, workspace, MC/Superbee, and boundary execution proofs still require execution on the exact installed head. Characteristic no-inflow execution, post-Riemann policy, 3D/metric/EB, GPU, conservation, and performance are not claimed. ADC-682, ADC-748, ADC-749, and ADC-757 remain open until their remaining executable/deferred requirements are closed.

[wolf75222]

ADC-749 typed boundary-provider law completion integrated with history at 6023ee56.

Evidence on the integrated P2 head:

• ADC-757 manifest: 35 executable proofs, 7 explicitly deferred families
• focused boundary/mesh/fields/codegen batch: 50 passed (the source branch independently ran 121 related and 523 architecture tests)
• Ruff, docs lint and diff check green

Remaining nonclaims stay explicit: post-Riemann execution, characteristic no-inflow, 3D/metric/EB and native performance.

[wolf75222]

P2 integration update (8697657): merged P1 temporal/AMR foundations, ADC-753 recovery method identity, and ADC-749 typed post-Riemann BoundaryFlux. Follow-up audit now fails closed when an unqualified RHS would bypass either a boundary-flux transform or shared-interface scheduler; ADC-757 also rejects runtime skip/xfail and now carries 39 executable proofs with 7 explicitly deferred families. Local source evidence: 565 passed; M3 43/0; ADC-757 39/7; generated catalog, docs lint, Ruff on touched files, clang-format on the boundary header, and git diff check green. Native/GPU/MPI closure remains separate and is not claimed by this source gate.