Preserve semantic time in source mapping

[eamirian]

What changed

• correct Observation time validation so semantic as_of may precede, but never follow, ingestion availability
• map source state time deterministically as event_effective_at, then source_published_at, then observed_at
• preserve actual ingestion/projection time as availability and carry both coordinates through exact Entity lineage
• align canonical citation time with the same semantic precedence
• enforce activation admissibility using projection and detection availability while retaining strict semantic state ordering
• repin the intentionally changed mapped Observation and Entity identities in evidence
• prove two recorded snapshots admitted in one transaction retain distinct real-world times and pass the unchanged numeric detector

Why

Recorded materials admitted together previously gave every mapped Entity Snapshot the batch ingestion time as as_of. Baseline and current snapshots therefore appeared simultaneous even when the source carried distinct effective times, and the strict numeric/categorical detectors correctly rejected them. This correction preserves the bitemporal distinction instead of weakening detector ordering or fabricating timestamps.

Historical source state may legitimately predate activation. The detector and routing follow-up therefore rejects pre-activation projection/detection, not historical as_of; exact activation revision binding and current processing-time gates remain unchanged.

Identity and compatibility impact

The canonical source snapshot and its ingestion availability contract are unchanged. Mapped Observation and Entity Snapshot identities intentionally change whenever semantic state time differs from ingestion because as_of is content-addressed material. PREPARED and LIVE mapping use the same corrected interpreter; LIVE ingress and projection coverage remains green. There is no fallback to legacy mapped identities.

Verification

• focused source mapping, resource contracts, and recorded admission: 54 passed
• LIVE ingestion/resource projection, both detector families, Pack detection, synthesis, resource projection/plane, contract boundary, and kernel boundary: 160 passed
• expanded source-to-synthesis and activation-time boundary gate: 225 passed, 2 skipped
• Ruff check and format: passed
• clean diff check: passed
• full supported gate: 7,976 passed, 50 skipped, 262 deselected; one unrelated persistent-store failed-transaction in test_forget_by_hash_erases_all_duplicates, which passed immediately when rerun in isolation

No authority, UI, domain-pack, MCP, provider, or release surface changes are included.