fix(account): preserve bounded historical authority

[skakri]

Hardens the C1 authority seam after #641.

• preserves exact historical roster and owner citations under typed Open/Cut/Closed boundaries
• exposes per-stream content cuts and independent device + owner-incarnation control/secrets boundaries
• projects control cuts from the fold final joined registers, including retained pre-enrollment control registers
• removes the legacy unbounded queries and mutable role metadata from the curated C2 seam
• adds forward V065 storage with atomic populated-V064 backfill, full-u64 encoding, and fail-closed tuple/epoch validation
• adds defensive coverage for unlisted streams, corruption, final CutExtend joins, and independent register extension

Validation:

• cargo +nightly fmt --all
• cargo nextest run -p rag-rat-core account --no-fail-fast (155 passed)
• cargo nextest run -p rag-rat-core migration_065
• cargo clippy --workspace --all-targets -- -D warnings
• three final adversarial reviews: no blockers

[github-actions]

SCIP oracle — resolution report

Heuristic→compiler edge resolution per corpus. Δ compares resolved-after to the main baseline (only when the corpus profile + tool version match).

corpus	tool	edges	resolved (heuristic → compiler)	precision	recall	monikers	Δ vs main
c-libuv	scip-clang	12283	37.8% → 47.8%	89.3%	48.7%	679	+0.0pp
cpp-yaml	scip-clang	9223	43.2% → 73.1%	83.0%	40.2%	1037	+0.0pp
py-django	scip-python	12937	29.8% → 73.5%	93.7%	84.1%	3036	+0.0pp
py-rich	scip-python	8383	27.6% → 92.3%	95.0%	81.3%	1098	+0.0pp
rust-time	rust-analyzer	11040	37.5% → 58.7%	68.7%	83.6%	510	+0.0pp
ts-rxjs	scip-typescript	7875	39.6% → 94.9%	87.3%	77.4%	626	+0.0pp

_{resolved = Exact/Syntactic + compiler upgrades + resolved-external, over edge candidates with a callee range. precision/recall are the oracle eval metrics.}

[codecov]

Codecov Report

❌ Patch coverage is 83.52745% with 99 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
crates/rag-rat-core/src/oplog/account/fold.rs	48.00%	78 Missing ⚠️
crates/rag-rat-core/src/oplog/account/storage.rs	95.22%	19 Missing ⚠️
crates/rag-rat-core/src/index/schema/migrations.rs	93.75%	2 Missing ⚠️

📢 Thoughts on this report? Let us know!

[github-actions]

Bencher Report

Branch	feat/604-c1-1-boundaries
Testbed	ubuntu-latest

⚠️ WARNING: No Threshold found!

Without a Threshold, no Alerts will ever be generated.

• L1 Hits (hits)
• Estimated Cycles (cycles)
• LL Hits (hits)
• RAM Hits (hits)
• Total read+write (reads/writes)
• Instructions (instructions)

Click here to create a new Threshold
For more information, see the Threshold documentation.
To only post results if a Threshold exists, set the --ci-only-thresholds flag.

Click to view all benchmark results

Benchmark	Estimated Cycles	cycles x 1e6	Instructions	instructions x 1e6	L1 Hits	hits x 1e6	LL Hits	hits x 1e6	RAM Hits	hits x 1e3	Total read+write	reads/writes x 1e6
rag_pipeline::pipeline::index cargo_resolver:resolver_config()	📈 view plot ⚠️ NO THRESHOLD	2,463.94 x 1e6	📈 view plot ⚠️ NO THRESHOLD	1,614.84 x 1e6	📈 view plot ⚠️ NO THRESHOLD	2,201.59 x 1e6	📈 view plot ⚠️ NO THRESHOLD	43.30 x 1e6	📈 view plot ⚠️ NO THRESHOLD	1,309.65 x 1e3	📈 view plot ⚠️ NO THRESHOLD	2,246.20 x 1e6
rag_pipeline::pipeline::query_cold cargo_resolver:resolver_built_config()	📈 view plot ⚠️ NO THRESHOLD	350.58 x 1e6	📈 view plot ⚠️ NO THRESHOLD	233.00 x 1e6	📈 view plot ⚠️ NO THRESHOLD	334.71 x 1e6	📈 view plot ⚠️ NO THRESHOLD	2.99 x 1e6	📈 view plot ⚠️ NO THRESHOLD	26.36 x 1e3	📈 view plot ⚠️ NO THRESHOLD	337.72 x 1e6
rag_pipeline::pipeline::query_warm cargo_resolver:resolver_index()	📈 view plot ⚠️ NO THRESHOLD	336.53 x 1e6	📈 view plot ⚠️ NO THRESHOLD	223.68 x 1e6	📈 view plot ⚠️ NO THRESHOLD	321.54 x 1e6	📈 view plot ⚠️ NO THRESHOLD	2.82 x 1e6	📈 view plot ⚠️ NO THRESHOLD	25.90 x 1e3	📈 view plot ⚠️ NO THRESHOLD	324.39 x 1e6

🐰 View full continuous benchmarking report in Bencher

[github-actions]

Bencher Report

Branch	feat/604-c1-1-boundaries
Testbed	ubuntu-latest

Click to view all benchmark results

Benchmark	Latency	Benchmark Result seconds (s) (Result Δ%)	Upper Boundary seconds (s) (Limit %)
index_time/full_rebuild_cargo	📈 view plot 🚷 view threshold	4.98 s (-13.91%) Baseline: 5.78 s	7.64 s (65.15%)

🐰 View full continuous benchmarking report in Bencher