fix(p07): classify Python API surfaces by evidence

[ndrorchestration]

Purpose

Address issue #659 narrowly: stop treating every api/*.py target as a HIGH deprecated-stub candidate solely because it is Python, while preserving actionable HIGH detection for an actual same-purpose Python/Pages API collision.

TDD evidence

RED test-only head: bf2e8747cf2e27e227fa09ff8389a3389a99f1ee.

At that exact head, UI Command Center Validation run 35115525212 failed at Run UI semantic and contract tests; the production application build was skipped. That is the preserved intended RED checkpoint before the detection module existed.

A separate PR Issue-State Keyword Guard failure on the RED head came from closure-keyword syntax in the PR description, not product code; the description was corrected before GREEN.

GREEN implementation head: 19f9682f435cfb5279acc94c284455600379385f.

Fresh exact-head verification on GREEN returned 19 workflow families, all terminal SUCCESS:

• PPTL CI
• Claim Hygiene Audit
• Validate Control-State HEAD Binding
• Critical PR Lane Custody
• Propagation Consistency (Advisory)
• PR Issue-State Keyword Guard
• Truth Layer Validation
• Epistemic Evidence Validation
• DGAF Regression Suite
• PDMAL Harness Validation
• Control-State Consistency
• UI Command Center Validation
• Python Tests & Quality Checks
• Truth Layer Tests
• Full Repository Coverage Audit
• Vocabulary Translation Matrix
• IP Hygiene Sweep
• PDMAL Pre-Freeze Runner Validation
• Governance CI

UI Command Center Validation run 35115803504 passed both the semantic/contract tests and the production application build on the exact GREEN head.

Implementation

• extracts P-07 target classification into the testable app/lib/sweep-detection.ts module;
• keeps api/ahg_herald.py visible but INFO rather than falsely HIGH solely because it is Python;
• explicitly states that recognition of the intentional source surface does not establish deployment correctness or production validation;
• classifies an exact same-purpose api/<name>.py + pages/api/<name>.ts pair HIGH;
• preserves existing App Router and requirements.txt findings;
• adds INFO accounting to the narrative;
• keeps the endpoint non-mutating and preserves harmonic_score: null / NOT_COMPUTED semantics;
• relies on accepted fix(ui): correct current P-07 default sweep targets #739 coverage for retired paths remaining absent from UI defaults.

Runtime-architecture adjudication

Issue #640 now records the source-architecture disposition that api/ahg_herald.py remains an intentional P-01 Python runtime surface unless explicitly superseded. That source classification does not establish current production validation; #729 separately owns exact-current production-runtime reconciliation.

Non-effects

Detection-quality/UI-tool correctness only. No materialization, authorization, efficacy, independent-validation, High-Assurance, or scientific-N transition is created by this PR.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
dynamicgovernanceagenticformation	Ready	Preview	Sep 16, 2026 3:31pm UTC

[ndrorchestration]

Validation checkpoint on exact GREEN head 19f9682f435cfb5279acc94c284455600379385f:

• intended RED is preserved at test-only head bf2e8747cf2e27e227fa09ff8389a3389a99f1ee (UI semantic/contract test step failed before implementation);
• UI Command Center Validation run 35115803504 is now GREEN: semantic/contract tests PASS and production application build PASS;
• PR Issue-State Keyword Guard is GREEN after removing accidental closure syntax from the PR description;
• PPTL, regression, control-state, truth-layer, custody, claim/IP hygiene, epistemic validation, coverage audit, PDMAL harness, propagation, vocabulary, and HEAD-binding families are GREEN on the same head;
• Governance CI, Python Tests & Quality Checks, and PDMAL Pre-Freeze Runner Validation are still in progress at this checkpoint, with no reported failure yet.

Sequencing dependency is also reconciled: #679 is closed/completed, and #640 now records a source-architecture adjudication retaining api/ahg_herald.py as an intentional supported surface while explicitly withholding current production-validation claims.

Disposition remains DRAFT / WAIT FOR EXACT-HEAD MATRIX COMPLETION. No scientific, authorization, efficacy, independent-validation, High-Assurance, or N transition follows.