Phase 10: deviation reconciliation — the repairs, three gates and the as-built ledger

[Wahbeh-Mohammad]

Part of #34. First PR of phase 10's three-PR stack — the code — built off main at b242de6 (phases 0 through 9). The last phase of the v1 roadmap: it repairs what phase 9 and the earlier reviews found, re-derives design §10's nineteen entries from as-built source, and publishes nothing — every gem stays at 0.0.0.

What lands

378 files, +1,856 / −165 (307 of them are the one-line SPDX header on every shipped .rbs).

• Three blocking gates, twenty-one → twenty-four, every body in tools/ and every path joined to gate_root (phase 9's P9-27 lesson): gates:ledger_audit (register row N ↔ §10 entry N — subject, ID-set equality, and a verdict row that cites a real gems/… path and only defined Dexpace:: constants), gates:spdx_rbs (line 1 of every shipped .rbs is the header; every signature declares something) and gates:sole_parse (AstScan.parse is the one RubyVM::AbstractSyntaxTree.parse_file caller). Each is in DEFAULT_GATES and CI's gates job; each exits 1 on its fixture workspace.
• The probe's ninth check, chapters — clause-scoped chapter attribution; it found two live true positives in the phase-8 segmentation design, fixed in place on the docs branch.
• NFR-13 — the SPDX header on all 307 .rbs files; phase 9's PackagingSuite pin flips from :failed to :passed.
• Core repairs, each test-first (the failing test on main is the audit, P10-1):
  • the proxy warning belt no longer prints a password to Kernel#warn or the config sink for any malformed proxy spelling (phase 5b's R3-1, live on main and on no list until this phase's cross-check);
  • Status.of is total over every Integer (HTTP-10 — "never throw"), with #standard? for the protocol range;
  • Protocol admits HTTP/1.0 in WIRE_FORMS and ALIASES, with Protocol::HTTP_1_0 (HTTP-33; the plan said HTTP-24/43 and lib/dexpace/protocol.rb);
  • URL.parse! wraps every URI::Error as InvalidArgumentError naming the input and refuses a host-less http(s) URL (HTTP-47);
  • Model.own on a default_proc Hash, HeaderSyntax predicates total over non-Strings, Body.stream over a closed stream, NaN/Complex duration guards in Async.delay and Clock, the CFG-13 property-seam depth, the async instrumentation step's duration, Registry#resolve's termination pinned.
• Both transports map an HTTP/1.0 or vendor-status head (the mappers now see the widened Protocol and Status).
• dexpace-conformance — TransportSuite.run folded onto Runner without widening it; PackagingCase's gem-name rule covers the port's four segment exceptions.
• tools/require_allowlist.rb refuses dexpace/../json-style dot segments; rake rubocop passes --ignore-parent-exclusion.
• docs/deviations.md — all nineteen rows flipped to as-built verdicts (confirmed / confirmed-with-a-narrowing, none contradicted) with the amendment set C1–C19. It rides this branch because gates:ledger_audit reads it.

Decisions taken in the open, against the plan's text

Ledger rows P10-21–P10-38. Task 8 (SingleUseError) was not carried out: 7c already ships PageStateError < StandardError, so the defect is absent (P10-22). Task 9 is a verification, not a repair — the deadlock it was meant to fix does not happen (P10-21). Task 4 (Clients cap) was shipped by 8c and is a verification row (P10-23). The design's R1 file list was widened by a dated addendum (sdk-documentation, README, net_http YARD only, rbs_collection.yaml's comment, the conformance gem). Existing test files a code change invalidated ride this branch whole.

Layering

Green under all twenty-four gates on its own tree, the SimpleCov floor included (99.76 %) — the tolerated red was not needed. 3.2.11 matrix set green at 96.05 %.