feat: add governed workflow execution port

[HomenShum]

Summary

• add the shared, versioned workflow execution port for native, RocketRide, or LangChain candidate execution
• add NodeRoom candidate admission for governed patch bundles and Compare-Reason-Swap proposals
• keep all durable writes behind existing RoomTools, version, CAS, trace, and review boundaries
• add canonical study fixtures, integration documentation, and trace-spine coverage

The execution port is HTTPS-only outside local development, bounds response size and deadlines, validates request/result identity, and never grants a remote runtime backend mutation authority.

The publication head preserves scored adapter commit 353ddcce5b4ee791c4a0d70713a47ab302a643b9 as its second parent and has the identical tree f59acfda87d979bbc29fc6b1460c08144baac966. The merge-only publication commit satisfies this repository's first-parent commit metadata gate without rewriting benchmark provenance.

Verification

• npm run nodeagent:frame:smoke
• npm run omnigent:nodeagent:smoke
• npm test -- --run tests/nodeWorkflowExecutionPort.test.ts
• npm test -- --run tests/nodeagentTraceSpine.test.ts
• npm run floor (331 files, 2,243 tests)
• npm run commit:check:range -- ca25e347dc467bc37f06918e1a18656f7336ee28..HEAD

The associated benchmark study is evidence-complete but not promotion-ready: RocketRide exceeded its fixed 10-second deadline in all 30 study envelopes. This PR exposes a governed compatibility seam; it is not an adoption or official-score claim.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
noderoom	Ready	Preview, Comment	Jul 15, 2026 3:58pm

[github-actions]

Scaffold Handoff — For Your Coding Agent

Your coding agent (Codex, Claude Code, etc.) should apply the accepted
scaffold proposals below. Do NOT touch any immutable files.

Immutability Check

Mode: advisory

✅ No immutable files were modified in this branch.

Changed Files

• docs/ROCKETRIDE_EXECUTION_PORT.md
• docs/eval/OFFICIAL_BENCHMARK_READINESS.md
• docs/eval/OFFICIAL_BENCHMARK_TASK_COVERAGE.md
• docs/eval/OPENROUTER_CONVEX_BENCHMARK.md
• docs/eval/agent-improvement-loop.md
• docs/eval/agent-improvement-loop.svg
• docs/eval/agent-improvement-loop/20260715T155806Z.json
• docs/eval/agent-improvement-loop/latest.json
• docs/eval/agent-workspace-sandbox-smoke.json
• docs/eval/algorithm-artifact-smoke.json
• docs/eval/bankertoolbench-official-contract.json
• docs/eval/docker-sandbox-probe.json
• docs/eval/eval-runs.jsonl
• docs/eval/halo-convex-context-telemetry.json
• docs/eval/halo-self-improvement-smoke.json
• docs/eval/halo-variant-selection.json
• docs/eval/official-benchmark-readiness.json
• docs/eval/official-benchmark-task-coverage.json
• docs/eval/openrouter-convex-benchmark.json
• docs/eval/professional-catalog-proofs.json
• docs/eval/professional-proof-ledger.json
• docs/eval/spreadsheetbench-chart-visual-probe.json
• docs/eval/traces/credit/20260715T155815430Z-2954911b_dirty.9d14ca54d4cede68/cascade-healthy.json
• docs/eval/traces/credit/20260715T155815430Z-2954911b_dirty.9d14ca54d4cede68/delta-incomplete.json
• docs/eval/traces/credit/20260715T155815430Z-2954911b_dirty.9d14ca54d4cede68/mapping-correct.json
• docs/eval/traces/credit/20260715T155815430Z-2954911b_dirty.9d14ca54d4cede68/mapping-misbind.json
• docs/eval/traces/credit/20260715T155815430Z-2954911b_dirty.9d14ca54d4cede68/summit-stressed.json
• docs/eval/traces/ladder/20260715T155814951Z-2954911b_dirty.44f27aac1fed6f50/ladder_L1_read_scripted.json
• docs/eval/traces/ladder/20260715T155814951Z-2954911b_dirty.44f27aac1fed6f50/ladder_L2_edit_scripted.json
• docs/eval/traces/ladder/20260715T155814951Z-2954911b_dirty.44f27aac1fed6f50/ladder_L3_conflict_scripted.json
• docs/eval/traces/ladder/20260715T155814951Z-2954911b_dirty.44f27aac1fed6f50/ladder_L4_blocked_scripted.json
• docs/eval/traces/ladder/20260715T155814951Z-2954911b_dirty.44f27aac1fed6f50/ladder_L5_large_range_scripted.json
• docs/eval/traces/ladder/20260715T155814951Z-2954911b_dirty.44f27aac1fed6f50/ladder_L6_long_horizon_scripted.json
• docs/eval/traces/ladder/20260715T155814951Z-2954911b_dirty.44f27aac1fed6f50/ladder_L7_resume_scripted.json
• src/nodeagent/integrations/index.ts
• src/nodeagent/integrations/roomWorkflowCandidate.ts
• src/nodeagent/integrations/workflowExecutionPort.ts
• tests/fixtures/rocketride-noderoom-conflict-proposal.json
• tests/fixtures/rocketride-noderoom-independent-writes.json
• tests/nodeWorkflowExecutionPort.test.ts
• tests/nodeagentTraceSpine.test.ts

Needs Adversarial Review — Do NOT Apply Yet

These proposals passed the reject check but have not been approved by
an adversarial reviewer. A human or frozen LLM judge must approve them first.

• scaf-001 (AGENTS.md): Add explicit instruction for step spreadsheetbench-runner-fixture: Step spreadsheetbench-runner-fixture failed — scaffold may need explicit instruction or evidence assertion.
• scaf-002 (AGENTS.md): Add explicit instruction for step convex-boundaries: Step convex-boundaries failed — scaffold may need explicit instruction or evidence assertion.

Safety Boundary

Agent may improve the scaffold.
Agent may NOT weaken the proof gate.

Immutable files (never modify):

• scripts/proofloop.mjs
• scripts/agent-improvement-loop.ts
• tests/harnessChangeEval.test.ts
• .github/workflows/
• src/eval/evalTrustPolicy.ts
• src/eval/architectureBudget.ts
• evals/evalStore.ts

Scaffold files (safe to modify):

• AGENTS.md
• CLAUDE.md
• proofloop/scenarios/*.yaml
• proofloop/rubrics/*.yaml
• proofloop/subagents/*.md
• proofloop/adapters/*.js
• .proofloop/memory.jsonl
• src/nodeagent/models/prompts/systemPrompt.ts