Implement RuntimeInstallReceipt emission for runtime install/update flows

[Copilot]

Closes the runtime-install observability gap: agent-machine had no structured receipt type for runtime installation lifecycle transitions. This adds RuntimeInstallReceipt emission covering all 10 install states with artifact verification, policy decision linkage, rollback tracking, and compact log references.

Schema

• contracts/runtime-install-receipt.schema.json — copied verbatim from SourceOS-Linux/sourceos-spec (commit 5e3ba19d); no local fork, no drift risk
• src/agent_machine/contracts.py — registers RuntimeInstallReceipt in schema_by_kind(); extends validate_by_kind() to accept type as fallback to kind (upstream spec uses type, local schemas use kind)

Emission module

src/agent_machine/runtime_install_receipt.py:

receipt = build_receipt(
    receipt_id="urn:srcos:receipt:runtime-install:...",
    install_state="installed",       # or: failed, rolled_back, partial, denied, deferred, …
    failure_reason=None,             # required for failed/partial/denied/deferred
    rollback_ref=None,               # required when rolled_back
    log_mode="compact_receipt_ref",  # default; full manifests go to evidence bundles
    evidence_refs=["urn:srcos:evidence:..."],
    ...
)
validate_receipt(receipt)            # schema + cross-field semantics
log.info(emit_compact_log(receipt))  # single-line: id, state, evidence[0]

Semantic invariants enforced beyond JSON Schema:

• failed | partial | denied | deferred → failureReason required
• rolled_back → rollbackRef required
• installed → failureReason must be absent
• evidenceRefs must be non-empty

Examples

Six canonical fixtures in examples/runtime-install-receipt.*.json:

File	installState	Scenario
installed	installed	Success path
failed	failed	Artifact digest verification failure
denied	denied	Policy-denied install
partial	partial	Core installed, extension artifact failed
rolled_back	rolled_back	Post-install health check failed, rollback executed
deferred	deferred	Install window not open

Validation

• scripts/validate-runtime-install-receipts.py — validates all six examples, compact log output, and semantic rejection cases
• Makefile — validate-runtime-install-receipts added to top-level validate target

[mdheller]

Review: WIP PR is not yet implementable

This PR is still draft/WIP and currently reports zero changed files. It should not be marked ready or merged yet.

Required next implementation steps:

1. Add a RuntimeInstallReceipt emitter aligned to upstream SourceOS-Linux/sourceos-spec PR #101: schemas/RuntimeInstallReceipt.json and examples/runtimeinstallreceipt.json.
2. Emit receipts for install states: requested, manifest_resolved, artifact_verified, installing, installed, failed, rolled_back, partial, denied, and deferred.
3. Include upstream-required fields: sessionRef, capabilityLedgerRef, runtimeRef, targetRef, platform, installState, manifest, artifacts, logMode, policyDecisionRef, non-empty evidenceRefs, startedAt, and capturedAt.
4. Use logMode = compact_receipt_ref for default operational output.
5. Add examples for success, failed verification, denied install, partial install, rollback, and deferred install.
6. Add validation that consumes the upstream schema or a copied schema with a clear sync path from sourceos-spec.

This PR should remain draft until it has changed files, tests, and validation evidence.

[mdheller]

Closing after complete capture/replay.

This PR is fully captured by:

• Replay RuntimeInstallReceipt core #47 / commit b51f699750eac7c41f26059bc7031ac023689bba — RuntimeInstallReceipt core schema, examples, emission/validation module, focused validator, and repo-validator support.
• Complete RuntimeInstallReceipt validation wiring #49 / commit d1362d8a2d8dc051eec9f412be65892b30025ed6 — residual Makefile and canonical contracts.py wiring.

Residual issue #48 is closed as completed.

Content intentionally omitted: none. The original branch was unmergeable, so content was replayed and completed through current-main PRs.