feat(projects): persist authorized guide compilation requests

[durutheguru]

Outcome

This PR completes the hidden WS-POL-003-03B persistence boundary. It lets the Projects owner record an authorized guide-compilation request, establish a durable pre-provider dispatch fence, and persist a known accepted result atomically.

The capability remains internal. It exposes no route and starts no external execution.

Design in simple terms

• Migration 0008_guide_compilation_authorized_persistence adds immutable request-operation and authorization-event custody.
• The hidden Projects coordinator reuses the existing AUTH public protocol and the POL-03A attempt model.
• Request, audit, attempt, and receipt changes commit together or roll back together.
• Exact request and authority digests are reconstructed and enforced by PostgreSQL.
• Concurrent retries converge on one result instead of creating duplicate state.
• A first committed dispatch fence returns an explicit one-shot permit. An uncertain replay returns dispatch_permitted=false, reports provider_outcome_unresolved, and never redispatches blindly.
• Dispatch, result recording, and final persistence each lock and revalidate the current draft guide, exact setup/source lineage, and latest setup generation.

Deliberate non-goals

This PR activates no provider call, public route, approval, review, compensation, contribution, reputation, settlement, or other economic behavior. It also adds no worker, Celery dispatch, outbox message, policy projection, live setup cutover, or public Projects API.

Actual provider execution, redelivery, and same-key reconciliation belong to the next dependency, WS-POL-003-04A, which is recorded but not started here.

Verification

• All nine internal reviewer tracks passed at exact final head a1e2aaa3ba7e781d30ca7da09d3775af6659ec48 with zero findings.
• Focused real-PostgreSQL guide-compilation and AUTH tests: 118 passed.
• Focused branch coverage: 96.27%; every materially changed guide-compilation file is above 90%.
• Canonical Docker/Linux semantic lanes at the exact final head: 4,111 of 4,111 nodes completed across seven sequential lanes, with no skips, deselections, duplicates, interruptions, timeouts, cancellations, or retries.
• The independent lane merger and validator passed.
• Combined repository coverage: 91.17% against the 78% floor.
• Combined guide-compilation package coverage: 97.78% against the 90% floor; exact files range from 95.24% to 100%.
• Real services: PostgreSQL 16, Redis 7, and MinIO.
• Eight seeded defects were detected and restored, including the two external-review regressions: uncertain replay permit and current setup-lineage revalidation.
• Docker build, Ruff, migration topology, ownership, authorization boundary, lane inventory, Markdown links, stale-document scanners, and atomic chunk-state synchronization passed.

External review remediation

Three valid P1 findings on the first published head are closed in this update:

1. The dispatch receipt now distinguishes the first one-shot permit from an already-uncertain replay.
2. Execution now revalidates authoritative current setup lineage before dispatch, outcome recording, and persistence.
3. Contract and status wording now state the durable completion outcome while preserving human-only merge and protected-main truth.

Review focus

• Confirm the conservative pre-I/O uncertainty fence is appropriate until WS-POL-003-04A proves provider reconciliation.
• Confirm request and result persistence remain exact, atomic, and hidden.
• Confirm no later-product authority or side effect has been pulled into this change.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: d408b7b0-6ddc-409c-b110-158054e87673

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit:6034e337ac

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Sheys11]

All requested changes have been made. lgtm!