validation: reject mutable authority locator aliases in Rubin activation receipts

[seonghobae]

Finding

Draft #506 documents that Git branch names, PR numbers, check URLs, comments, and latest-release aliases are mutable locators and cannot substitute for digest-bound Rubin activation authority. The current is_mutable_authority_locator implementation is narrower than that contract: it rejects exact lowercase latest/main/master, refs/, and HTTP(S) prefixes, but analysis_engine::valid_identifier otherwise accepts non-control strings up to the identifier bound.

As a result, mutable aliases such as PR-504, pull/504, #504, github.com/ContextualWisdomLab/TEPP/pull/504, git://..., Latest, and release-latest can currently be serialized as generator/analysis/evidence/design authority identifiers. The production Rubin approval registry is intentionally empty, so this is not a current positive-authorization bypass. It is a pre-promotion contract defect: once a production pairing is introduced, the owner path must not be able to register a mutable locator while the checked-in contract claims such locators are inadmissible.

Required RED

Through the public bounded RubinProjectionActivationReceiptV1::from_json path, mutate an otherwise canonical receipt so an immutable-authority field contains representative branch/PR/release/URI aliases. Each payload must fail closed as InvalidEvidence, while ordinary immutable version/evidence identifiers remain accepted.

At minimum cover:

• mixed-case/default-branch or latest aliases;
• PR/pull/issue numeric aliases rather than only refs/pull/...;
• GitHub host/path locators lacking an explicit HTTP scheme;
• git:///ssh:// repository locators;
• latest-release/release-latest aliases.

Minimal causal repair

Harden the activation-specific immutable-authority predicate, not the repository-wide generic identifier validator. Normalize only for locator classification, preserve the original identifier bytes for digest identity, and reject the bounded mutable patterns above. Do not broaden this into heuristic rejection of arbitrary scientific names containing words such as main or latest in the middle.

Keep the production approved-pairing registry empty. This repair must not add a positive Rubin projection state, change psychometric_core arithmetic, or weaken the existing evidence digest/snapshot/cutoff/owner-controlled AvailableTime/design/indicator checks.

Relationship

• Parent scientific/projection gap: scientific: bind Rubin variance activation to draw-generation provenance #505
• Temporal authority repair: validation: bind authoritative Validation Evidence availability in Rubin activation registry #507
• Implementation lane: Draft fix(validation): fail closed Rubin projection without draw provenance #506
• Candidate scientific evidence: test(science): add Rubin loading recovery and coverage acceptance evidence #504 / scientific: establish Rubin loading-uncertainty recovery and coverage evidence #503
• Surviving Analysis Run fold: feat(analysis): bind template-copy identity refusals to an analysis-run profile #416

ADR 0034 remains Proposed / not implemented-main. The surviving vehicle must inherit the regression and causal repair before any predecessor is closed.

[seonghobae]

RED→repair is now on Draft #506 ordinary forward history. RED 3cb07a51b65c3aba4b59c3ac1602070d23b02946 adds the public-wire regression for mixed-case/latest aliases, PR/pull/issue numeric aliases, bare github.com/... paths, git:///ssh:// locators, and latest-release aliases. Causal repair aebf54b2331bc2fb0c2d87554b0645f64a7f4312 hardens only is_mutable_authority_locator; generic repository identifiers and Rubin arithmetic are unchanged, and PRODUCTION_APPROVED_PAIRINGS remains empty. Keep this issue open until exact-head hosted verification on aebf54b... is terminal and the surviving #416 vehicle inherits both regression and repair.

[seonghobae]

Follow-up edge proof 40a1495131dc83727703b1ab3af009ec5764da16 now bounds the refusal against overbroad keyword heuristics: immutable scientific IDs such as validation-evidence-latest-model-v1, main-effect-loading-model-v1, pr-model-v1, and nonnumeric pr- remain admissible, while the locator-shaped cases from RED 3cb07a51... stay rejected. #506 current exact head is 40a14951..., ahead 23 / behind 0 from #504. Hosted Rust Foundation and Documentation Quality are freshly queued for this head, so #508 remains open and is not claimed GREEN.