fix(north-star): bind Foundation commits to causal and evidence reality [skip ci]

[xingxuling]

DWAC RCL North Star · Cycle 3

DWAC re-observed RCL after the RCL-owned 4R governance gate merged and found a commit-integrity bypass inside the new seam: the gate required the causalParents and evidenceRequirements fields structurally, but accepted empty arrays. A bounded candidate could therefore produce a deterministic accepted commit without any causal ancestry or required evidence.

Decision

• selected: causal-parent-commit-binding
• mode: WHOLE_ARTIFACT
• sovereignty gate: AUTONOMOUS
• score: 0.8508
• next ranked candidate remains declared Foundation native lowering (0.7564).

What changed

• causalParents must be non-empty and every parent must expose a usable identity (string, root, beforeRoot, reference or id);
• empty evidenceRequirements now fail closed for commit-grade governance;
• RNCS-style { kind, rule, beforeRoot } parent objects remain valid;
• accepted decision receipts expose the causal-parent count;
• deterministic governance/commit roots remain bound to the causal-parent set;
• focused tests prove parent changes alter accepted identity and that evidence/causal erasure is rejected.

Validation

• focused gate suite: 10/10 PASS in a materialized local candidate;
• candidate gate: node --check PASS;
• broad repository suite: not run;
• GitHub Actions: not triggered.

The focused materialization used the exact candidate gate and exact candidate test file. Its foundation-contract.mjs import was reduced to the current canonical FOUNDATION_CONTRACT_VERSION=0.1.0, because this test slice consumes no other contract export.

Truth boundary

This closes a causality/evidence bypass in the RCL-owned commit gate. It does not claim declared Foundation-domain syntax is native VM syntax and does not claim repository-wide regression coverage.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
rcl-rncs-mcp	Ready	Preview	Sep 15, 2026 7:10pm UTC