feat(schemas): Model Plane inference-provenance contracts (T7-1/T7-3/T7-4)

[mdheller]

Tranche 7 — Model Plane, first schema drop

Implements T7-1, T7-3, T7-4 from the Model Plane spec v0.1 (§XIV). Authored against the current repo, not the spec's 2026-06-09 snapshot, so it reuses the existing Agent Machine / Model Carry family (InferenceProvider, ModelResidency, SourceOSModelCarryRef, ExternalModelProviderProfile, AgentMachineReceipt) rather than forking it.

Added

• schemas/InferenceReceipt.json (T7-1) — per-completion provenance primitive.
• schemas/EscalationDecision.json (T7-3) — governed tier / data-residency boundary crossing.
• schemas/AdapterPromotionDecision.json (T7-4) — human-governed LoRA-adapter promotion.
• Canonical examples, schemas/README.md family rows + recent-additions block, CHANGELOG.md entry, docs/adr/0015-model-plane-inference-provenance.md.

Governance is schema if/then teeth — verified to fire both ways

• Off-device InferenceReceipt (sovereign_cluster/external_permitted) cannot validate without an authorizing capabilityLeaseRef + non-empty escalationChain (SEAM-015).
• EscalationDecisioncannot be permitted without a grantRefandsensitivityCheck.result: pass; prompt-unanswered is the fail-closed resolution for non-interactive workloads (SEAM-015).
• AdapterPromotionDecisioncannot be promoted without verified signature + per-event consent + all eval gates (incl. adversarialProbePassed) + named promotedBy + mandatory rollbackTargetDigest (SEAM-016/017).

Negative tests confirm each gate rejects the bad case and admits the good case.

Review hardening (optional, additive)

• ledgerPrevHash on all three (append-only-ledger hash-chaining).
• confidenceMethod on the receipt (the escalation trigger is self-reported).

Deferred to tracked issues (design decisions, not rammed through)

• T7-2ModelManifest/AdapterManifest — overlaps SourceOSModelCarryRef; "AdapterManifest" collides with AdapterDescriptor.
• T7-5 add inference_provider to AgentPassport.agent_class — the estate already models providers as the separate InferenceProvider object (apparent deliberate choice); a 6th host-process class is a core-ontology change (breaks EXPECTED_CLASSES, touches ADR-0014).

Validation run

• ajv compile of all three (with sibling refs) — pass.
• Examples validate against their schemas — pass.
• scripts/check_duplicate_schema_ids.py — 338 unique $id, pass.
• Negative/positive teeth tests — 8/8 pass.

Grant refs use the estate's urn:srcos:lease:, not the spec's illustrative urn:srcos:grant: (which does not exist).

⚠️ Do not auto-merge — awaiting Copilot review.

[Copilot]

Pull request overview

Adds the first Model Plane inference-provenance schema tranche to sourceos-spec, introducing normative, validation-enforced contracts for per-completion receipts, governed escalation across residency/tier boundaries, and human-governed LoRA adapter promotion. This fits the repo’s role as the canonical contract/schema source by extending the existing Agent Machine / Model Carry vocabulary rather than forking it.

Changes:

• Introduces three new Draft 2020-12 schemas: InferenceReceipt, EscalationDecision, and AdapterPromotionDecision.
• Adds canonical JSON examples for each new schema.
• Documents the design reconciliation and rollout via ADR-0015, plus catalog + changelog updates.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
schemas/README.md	Adds a “Recent additions” section for Tranche 7 Model Plane provenance types.
schemas/InferenceReceipt.json	New per-completion provenance receipt schema with SEAM-015 if/then gating.
schemas/EscalationDecision.json	New governed tier/residency boundary decision schema with fail-closed if/then rules.
schemas/AdapterPromotionDecision.json	New human-governed LoRA adapter promotion decision schema with promotion “teeth”.
examples/inference-receipt.json	Canonical example instance for InferenceReceipt.
examples/escalation-decision.json	Canonical example instance for EscalationDecision.
examples/adapter-promotion-decision.json	Canonical example instance for AdapterPromotionDecision.
docs/adr/0015-model-plane-inference-provenance.md	ADR capturing reuse vs. deferrals for T7 and schema-level governance constraints.
CHANGELOG.md	Adds an Unreleased entry describing the new Model Plane provenance contracts and examples.

[mdheller]

Fixed in 03ad41e — renamed grantRef → capabilityLeaseRef across schema + example + ADR + CHANGELOG so both EscalationDecision and InferenceReceipt use one consistent name for the urn:srcos:lease: reference.

[mdheller]

Fixed in 03ad41e — the off-device then now lists escalationChain in required (so minItems:1 actually fires) and tightens escalatedFrom to a non-null tier enum [T0,T1,T2,T3]. Added negative tests: an off-device receipt with a missing/empty escalationChain or escalatedFrom:null now rejects. Good catch — my original negative test only covered the missing-lease case.