R3 — Estate Lawful-Learning conformance gate (fail-closed) in CI

[mdheller]

Source: Estate Lawful-Learning (Rev B) conformance audit, 2026-08-02 — remediation R3. Report: https://github.com/SocioProphet/socioprophet-seed-deck/blob/feat/assumption-reconciliation/LAWFUL-LEARNING-CONFORMANCE.md

Gap

Conformance to the Rev-B invariants is asserted, not checkable. The estate already requires a gate/check in 6/7 repos (git-ops-standards is the canonical home). There is no shared, fail-closed Lawful-Learning conformance gate.

Work order — a reusable CI gate (fail-closed)

Each participating repo must:

1. Import the canonical kernel (R1) — not hand-roll epistemic types.
2. Pass a shared conformance suite for the invariants it claims (minimum: INV1 meet+⊥, INV2 epistemic level, INV6 DAG-not-chain, INV8 supersession).
3. Declare which invariants it is legitimately N/A for (e.g. agent-machine is a deploy plane — it should declare INV7/9/10/12 N/A, not silently lack them). Undeclared absence = fail.

Mirrors the project_sourceos_gate_gap_audit finding: contracts present, gates missing.

Acceptance

• Reusable workflow published in git-ops-standards; wired into >=1 consumer repo.
• Gate is fail-closed: a repo with an undeclared missing invariant goes red.
• Conformance matrix (repo x invariant, present/declared-N/A) emitted as an artifact.