ci: integration batch B (29 reviewed prove-* PRs with follow-up fixes)

crates/tracedecay-application/src/advisory/host_delivery_consume_tests.rs

@@ -17,8 +17,8 @@ use tracedecay_contracts::feedback::{
     feedback_surface_operation,
 };
 use tracedecay_contracts::{
-    ApplicationOperation, CancellationContext, CapabilityGrantId, CapabilityGrantSnapshot,
-    Deadline, DiagnosticProviderDescriptor, DiagnosticProviderIdentity,
+    ApplicationOperation, ApplicationOutcome, CancellationContext, CapabilityGrantId,
+    CapabilityGrantSnapshot, Deadline, DiagnosticProviderDescriptor, DiagnosticProviderIdentity,
     DiagnosticProviderIdentityParts, DiagnosticProviderResult, DiagnosticProviderState,
     DisclosureClass, PolicyDecisionRef, ProviderCoverage, ProviderDocumentIdentity,
     ProviderFreshness, ProviderOrigin, ProviderProvenance, ProviderSourceIdentity, RequestContext,
@@ -39,7 +39,7 @@ use tracedecay_domain::feedback::{
 use tracedecay_domain::{
     ActorId, CodeGenerationId, CommitId, ComponentVersion, ContentDigest, FileOccurrenceId,
     LanguageDescriptorRevision, LanguageId, LocatorDigest, ManifestDigest, ProjectId, ProviderId,
-    RefId, RepositoryId, RetrievalAnchorId, SourceSpan, UtcMicros, WorktreeId,
+    RefId, RepositoryId, RetrievalAnchorId, SourceSpan, SymbolOccurrenceId, UtcMicros, WorktreeId,
 };
 use tracedecay_hooks::{HookFeedbackDeliveryOutcomeV1, HookFeedbackRollbackSwitchV1};
 use tracedecay_lsp::{
@@ -485,7 +485,9 @@ async fn consume_fixture() -> ConsumeFixture {
         target: request.input.target.clone(),
         affected_files: vec![request.input.target.file.clone()],
         affected_callers: Vec::new(),
-        affected_tests: Vec::new(),
+        affected_tests: vec![
+            SymbolOccurrenceId::new("symbol.feedback-entry-test").expect("affected test symbol"),
+        ],
         evidence_anchors: Vec::new(),
         state: FeedbackImpactStateV1::Complete,
         affected_tests_state: FeedbackImpactStateV1::Complete,
@@ -620,10 +622,21 @@ async fn completed_publication_is_consumed_into_exactly_one_hook_notice() {
         )
         .await
         .expect("project published affected tests");
-    assert!(matches!(
-        affected_tests,
-        crate::feedback::owner::FeedbackReadInvocationResultV1::AffectedTests(Ok(_))
-    ));
+    let crate::feedback::owner::FeedbackReadInvocationResultV1::AffectedTests(Ok(envelope)) =
+        affected_tests
+    else {
+        panic!("published affected-tests read must return the projection");
+    };
+    let ApplicationOutcome::Evidence(evidence) = envelope.outcome else {
+        panic!("affected-tests projection must be evidence, not a problem or effect");
+    };
+    let payload = evidence.payload.expect("affected-tests payload");
+    assert_eq!(
+        payload.affected_tests,
+        vec![SymbolOccurrenceId::new("symbol.feedback-entry-test").expect("affected test symbol")]
+    );
+    assert_eq!(payload.state, Some(FeedbackImpactStateV1::Complete));
+    assert!(payload.evidence_anchors.is_empty());
     let listed = fixture
         .registration
         .feedback_owner

crates/tracedecay-automation-runtime/src/automation/run_ledger.rs

@@ -553,7 +553,12 @@ pub fn canonical_record_completion_micros(record: &AutomationRunLedgerRecord) ->
     .map(|(_, completed_at_micros)| completed_at_micros)
 }
 
-pub(super) fn canonical_record_started_at_seconds(
+/// Schema-aware start instant in Unix seconds.
+///
+/// Schema v1 rows store RFC3339. Schema v2 rows store nonnegative Unix
+/// seconds. Callers that window the ledger, including analytics, must use
+/// this instead of assuming one textual form.
+pub fn canonical_record_started_at_seconds(
     record: &AutomationRunLedgerRecord,
     label: &str,
 ) -> Result<i64> {

crates/tracedecay-mcp/src/handlers/analytics.rs

@@ -23,13 +23,14 @@ use tracedecay_domain::{FactOwnerV1, ObservationScopeV1, ProjectId};
 use tracedecay_session_memory::memory::MemoryApplication;
 use tracedecay_store::{FactReadControl, StoreShardScopeV1};
 
-use tracedecay_automation_runtime::automation::run_ledger::load_run_records;
+use tracedecay_automation_runtime::automation::run_ledger::{
+    canonical_record_started_at_seconds, load_run_records,
+};
 use tracedecay_daemon_service::retained_owner::open_project_retained_memory_target;
 use tracedecay_domain::errors::{Result, TraceDecayError};
 use tracedecay_global_db::{AnalyticsToolCounts, RegisteredGlobalDb};
 use tracedecay_project::project::TraceDecay;
 use tracedecay_project::project::current_timestamp;
-use tracedecay_runtime_core::timeutil::parse_rfc3339_timestamp;
 use tracedecay_session_memory::fact_store::DatabaseFactStore;
 use tracedecay_store_runtime::retained_memory::MemoryTargetAccessV1;
 
@@ -793,7 +794,7 @@ async fn automation_section(project_root: &Path, since: i64) -> Value {
     let mut in_window = 0usize;
     let mut by_job: BTreeMap<String, BTreeMap<&'static str, i64>> = BTreeMap::new();
     for record in &records {
-        if let Some(started_at) = parse_rfc3339_timestamp(&record.started_at)
+        if let Ok(started_at) = canonical_record_started_at_seconds(record, "analytics window")
             && started_at < since
         {
             continue;

crates/tracedecay-session-memory/src/fact_store/crud/commands.rs

@@ -714,8 +714,21 @@ async fn update_project_memory_fact_with_cas_tx(
         .patch()
         .source_label()
         .unwrap_or_else(|| previous_payload.source_label());
-    let Some(sanitized) =
-        sanitize_payload(content, category, tags, entities, metadata, source_label)?
+    // The operation digest above keeps the caller's label order so a retry is
+    // the same update. Stored payloads hash labels in canonical order; the
+    // sanitizer receipt must see that order or the write is rejected.
+    let mut canonical_tags = tags.to_vec();
+    let mut canonical_entities = entities.to_vec();
+    canonical_tags.sort_unstable();
+    canonical_entities.sort_unstable();
+    let Some(sanitized) = sanitize_payload(
+        content,
+        category,
+        &canonical_tags,
+        &canonical_entities,
+        metadata,
+        source_label,
+    )?
     else {
         return Err(storage_message(
             PROJECT_MEMORY_WRITE_OPERATION,

crates/tracedecay/src/daemon/tests.rs

@@ -31,6 +31,7 @@ use super::{
 
 mod bootstrap;
 mod code_index_hydration;
+mod feedback_impact;
 mod handshake;
 mod invocation_ownership;
 mod lifecycle;