[shipmill-romamo]

Summary

agent investigate --replay <recording> saved the decisions the model proposed into --decisions like live ones, and nothing in the decision record said their check output was played back, so an operator could approve one as if its check had run on the host. With --replay decisions and the default --decisions decisions, the replay also wrote new records into the recording it was playing. This implements D-2:

• a decision proposed during a replay carries a new optional replay field naming the recording. The value is the path as --replay gave it (POSIX form, relative to the repository when given relative), the same value the investigation record already keeps under replay. Older records have no field and read as live
• decisions list shows the field (it is part of the record); cloudfall why adds a sentence after the check: the output was played back from the recording, not run on the hosts, so it cannot be approved
• decisions approve refuses such a record with PRECONDITION (context code decision_replayed), before the person is asked for the decision id and before anything runs or the record changes. decision.approve itself refuses it too (first check), so any other caller of the library is covered. operator approve works on operator proposals, not decision records, and decisions approve is not an MCP tool (mcp=False, requires_person), so there is no other approve path
• agent investigate --replay refuses with ARG_ERROR, before any model call or record, a --decisions directory that resolves (resolved paths, so recorded, ./recorded and the absolute path match) to the recording directory
• operation-decision.schema.json: optional replay string, additive

#26 (PR #53) changes the same schema and decision.py; whichever merges second needs a rebase. On that rebase, decisions approve should call both refusals before the attestation, replay first.

Test notes

• sdk/tests/test_investigation.py: a replayed decision names the recording, the live recording record does not, decisions list and why show it; approving it at a terminal, typing its id, is refused with PRECONDITION / decision_replayed and leaves the record byte-for-byte unchanged with no run log; --decisions equal to the recording (recorded, ./recorded, absolute) is refused with ARG_ERROR before the model is asked, leaving no investigation and nothing in the recording
• sdk/tests/test_decision.py: approve() refuses a replayed decision without running anything; a record without replay reads as live
• uv run ruff check ., uv run mypy, uv run pytest (full suite), uv run cloudfall config validate --project config/examples pass locally. The Ansible syntax-check and ansible-lint CI steps were not run locally (the session could not run them); this change touches no playbook

Fixes #36

🤖 Generated with Claude Code