Rectify: Shell-Capture Snapshot Authority

[Trecek]

Summary

• Makes a descriptor-verified, factory-only snapshot the sole authority for a FINAL shell capture.
• Separates capture, snapshot, reference, delivery, and retention state, with every transition routed through one locked, revision-checked lifecycle core.
• Makes reference publication and stdout delivery transactional while retaining the producer lease through delivery.
• Hardens framed-ledger migration, restart reconciliation, descriptor rebinding defenses, and cleanup/reader handoff.
• Adds the planned fault, race, migration, import-order, durability, integration, architecture, and documentation coverage.

Closes #4322

Validation

• task test-check — PASS (34,009 passed, 630 skipped, 27 xfailed)
• pre-commit run --all-files — PASS
• Exact-commit implementation audit — GO (22/22 requirements covered; no missing, odd, or conflicting findings)
• Dry-walkthrough — verified against the rectification plan

Implementation

The work is organized as the four planned implementation packages—verified snapshot
authority, reader leases, transactional delivery, and documentation/integration
ratchets—followed by one audit-remediation commit that closes every finding from the
first audit pass.

🤖 Generated with Claude Code via AutoSkillit

[Trecek]

AutoSkillit PR Review — Verdict: changes_requested

[Trecek]

AutoSkillit review: blocking findings detected. See inline comments; reconciliation must not treat readable-but-unsynced ledger frames as durable authority.

[Trecek]

AutoSkillit PR Review — Verdict: changes_requested (self-authored PR; GitHub does not permit REQUEST_CHANGES)

[Trecek]

AutoSkillit review: blocking findings detected. See inline comments; changes are requested. GitHub does not permit REQUEST_CHANGES on a self-authored PR.

[Trecek]

AutoSkillit PR Review — Verdict: approved_with_comments

[Trecek]

AutoSkillit review: warning-only findings detected. See inline comments — no blocking changes required.