refactor(storage): extract raw revision/membership governance from archive.py

docs/architecture-hotspots.md

@@ -23,7 +23,7 @@ won't hurt."
 
 | # | Control center | Path | Size | Public contract | Layer |
 | - | --- | --- | --- | --- | --- |
-| 1 | Storage read tier | `storage/sqlite/archive_tiers/archive.py` | 11,382 lines | `ArchiveStore` — every SELECT-shaped query surface (sessions, messages, blocks, insights reads, search) | `storage/` |
+| 1 | Storage read tier | `storage/sqlite/archive_tiers/archive.py` | 11,382 → **11,324** lines (raw-revision/membership governance extracted to `archive_tiers/revision_governance.py`, 2,841 lines, polylogue-1r9c) | `ArchiveStore` — every SELECT-shaped query surface (sessions, messages, blocks, insights reads, search) | `storage/` |
 | 2 | API facade | `api/archive.py` | 5,881 lines | `Polylogue.repository`/`.backend` verb surface consumed by CLI/MCP/daemon | `api/` (surface) |
 | 3 | Storage repair | `storage/repair.py` | 5,558 lines | `repair_*`/`preview_*`/`run_safe_repairs`/`collect_archive_debt_statuses_sync` — every integrity-repair entrypoint the CLI `check`/`repair` commands and daemon convergence call | `storage/` (maintenance-adjacent, see note below) |
 | 4 | Daemon HTTP | `daemon/http.py` | 4,609 lines | the daemon's REST/web-shell route table | `daemon/` (surface) |

docs/plans/hash-boundary-registry.yaml

@@ -1076,12 +1076,12 @@ entries:
   occurrence: 0
   classification: identifier
   note: 'synthetic block-id fallback; 2026-07-09 hash-boundary census (docs/audits/2026-07-09-hash-boundary-census.md) Table 3.'
-- path: polylogue/storage/sqlite/archive_tiers/archive.py
+- path: polylogue/storage/sqlite/archive_tiers/revision_governance.py
   function: '<module>._raw_revision_payload_digest_and_size'
   call: hashlib.sha256
   occurrence: 0
   classification: content-hash
-  note: 'raw revision content digest consumed by raw-authority/repair reconciliation.'
+  note: 'raw revision content digest consumed by raw-authority/repair reconciliation (moved from archive_tiers/archive.py, polylogue-1r9c governance extraction).'
 - path: polylogue/storage/sqlite/archive_tiers/pricing_seed.py
   function: '<module>._catalog_hash'
   call: hashlib.sha256

docs/plans/layering.yaml

@@ -22,6 +22,12 @@ writer_modules:
   mutation_roots: [polylogue/storage/sqlite/archive_tiers]
   modules:
     - path: polylogue/storage/sqlite/archive_tiers/archive.py
+      surfaces:
+        - tier: index
+          durability: rebuildable
+          interruption: replayable
+      entrypoints: [delete_sessions]
+    - path: polylogue/storage/sqlite/archive_tiers/revision_governance.py
       surfaces:
         - tier: index
           durability: rebuildable
@@ -31,7 +37,7 @@ writer_modules:
           interruption: atomic
       entrypoints:
         [apply_raw_membership_classification, apply_raw_revision_replay, classify_raw_revision_cohort,
-        delete_sessions, release_provisional_full_revisions, replace_raw_membership_census,
+        release_provisional_full_revisions, replace_raw_membership_census,
         write_parsed_for_retained_raw, write_parsed_for_retained_raw_result, write_raw_and_parsed,
         write_raw_and_parsed_result, write_raw_blob_and_parsed, write_raw_blob_and_parsed_result]
       twin_write_contract: raw-membership-classification
@@ -132,7 +138,7 @@ writer_modules:
       entrypoints: [apply_index_fast_forward]
   twin_write_contracts:
     - name: raw-membership-classification
-      module: polylogue/storage/sqlite/archive_tiers/archive.py
+      module: polylogue/storage/sqlite/archive_tiers/revision_governance.py
       surfaces: [index, source]
       entrypoints: [apply_raw_membership_classification]
       reason: "Applying a semantic member-head decision persists the derived session row (index) and the per-raw membership/authority decision (source) together so a partial write can never leave one raw id's authority state inconsistent with the session it was or was not accepted into."