feat: add PoCI organizational-independence gate

[safal207]

What changed

Adds the tenth PoCI slice: a fail-closed governance gate that distinguishes technical federation from organizational independence.

The current ProofPath + Ibex federation has separate repositories, commits, workflows, runners, artifacts, recomputation paths, and Sigstore identities, but both repositories are controlled by the same GitHub owner. This PR therefore intentionally evaluates the live configuration as HOLD, not ACCEPT.

The implementation adds:

• a pinned organizational-independence policy;
• a factual current-domain manifest for ProofPath and Ibex;
• a dependency-free governance verifier;
• separate counts for repositories, workflows, owners, and external owners;
• exact six-graph consensus enforcement;
• CHALLENGE > BLOCK > HOLD > ACCEPT decision precedence;
• detection of false same-owner independence claims;
• a deterministic external-operator challenge bundle;
• 12 focused mutation, admission, and determinism tests;
• a dedicated workflow that attests the readiness report and challenge bundle.

Live expected result

decision: HOLD
technical domains: 2
repositories: 2
workflows: 2
controlling owners: 1
external owners: 0
next transition: AWAIT_EXTERNAL_OPERATOR

The workflow succeeds only when the live evidence remains an honest HOLD with all missing-independence reason codes preserved.

Admission rule

ACCEPT requires:

• at least 3 admitted domains;
• at least 2 distinct repository owners or organizations;
• at least 1 owner different from safal207;
• at least 3 distinct signer workflows;
• verified keyless attestations for every domain;
• exact agreement on source, envelope, graph set, six graph roots, transition-cell root, consensus root, and multi-graph root.

External operator handoff

A HOLD emits proofpath.poci.external-operator-challenge.v0.1, containing the pinned consensus, admission thresholds, required response fields, and independent recomputation steps. The challenge grants no repository, merge, or execution authority.

Stacked PR

Base: agent/poci-cross-repo-federation-v0.1 / #201

No merge is performed by this PR.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9d56269a-5232-405f-b38f-a5210aa2380a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[safal207]

Validation complete

Final head: 646f5c63795fc7338c3206db1d40aceec4c8a1de

Passed:

• PoCI Organizational Independence run Implement minimal Rust verifier #2 (30627389031)
  • verifier compilation;
  • 12 focused mutation, admission, and determinism tests;
  • live governance evaluation;
  • honest HOLD for the current same-owner ProofPath + Ibex federation;
  • all four missing-independence reason codes preserved;
  • deterministic external-operator challenge emitted;
  • readiness report keyless-attested;
  • challenge bundle keyless-attested;
  • evidence artifact uploaded.
• PoCI run Community experiment L2: Run real model agent demo #16 — Python/Rust conformance, six-graph transition space, witness quorum, parity, and reviewer evidence succeeded.
• Rust run #283 — formatting, clippy, workspace tests, Compute Witness, metrics, reusable action, Personal Agent Guard, and Agent Payment Guard succeeded.

Live governance result:

• decision: HOLD
• technical domains: 2
• distinct repositories: 2
• distinct workflows: 2
• distinct owners: 1
• external owners: 0
• permitted next transition: AWAIT_EXTERNAL_OPERATOR

Evidence artifact:

• name: poci-organizational-independence-30627389031
• artifact id: 8791910896
• size: 2833 bytes
• SHA-256: 2f42a6fd684d4174ac99bf0f62faa7fb4b68c6392d69d3787779174865eb9a7f
• expires: 2026-08-14T11:32:46Z

This is an intentionally successful readiness evaluation, not an organizational-independence claim. ACCEPT remains impossible until a verified domain owned by another GitHub user or organization is admitted.

[safal207]

Exact-head validation refresh

The branch head moved to 25c2431d20915dd933e2d4a04be8d424df97554c because an accidental placeholder was added and immediately deleted in two net-zero commits. The final tree remains unchanged.

Exact-head checks all passed again:

• PoCI Organizational Independence run Build Axum-based ProofPath Gateway MVP #4 — success;
• PoCI run Community experiment L4: Build a ProofPath integration #18 — success;
• Rust run #285 — success.

The live governance result remains the intentional HOLD awaiting an owner-diverse external operator. No merge has been performed.