fix(tooling): audit public contracts from current SDK-owned inputs #41

Verified on branch / awaiting merge

Production implementation: dd5979c613b0fe8ebd9f7026f25001ceee9f8cee. Delivered head: dbae93e8f211d45a69cdffdb6afa3a33a0af0fa5; the subsequent diff contains documentation/acceptance evidence only. Exact-head CI: Engine CI and NuGet dependency graph passed; all six checks on this exact head are successful. All applicable acceptance conditions for this issue are verified; unavailable physical/manual device checks are explicitly scoped, not reported passed.

Owner: Tooling consumes current SDK-evaluated source/compiled output. Implementation commits: 14338d61, e053be5b, a38437f7.

Evidence: complete report, exact-head delivery attachment, portable test-case/raw-measurement/requirement indexes linked by the report. Specific proof: Contracts: public API graph default/independent/stale output cases; Final real complete architecture/XML/Wiki validation.

Commands: official tests/Invoke-EditorUiAcceptance.ps1 Contracts/Workflows/Visual/Lifecycle/Products with SDK-selected independent outputs; complete source/entry preparation; formal InnoEngine.Build scripts --ide for the three companions; tests/Invoke-WikiChecks.ps1; controlled public performance fixtures where applicable. The report records original command owners, TRX/binlogs, negative tests, failures, skips, input hashes and device limits.

Profiles overlap; do not sum their pass counts into a distinct-test claim. Windows-only sharing fixtures and Unix-only filesystem fixtures are scoped to the executing host. Real native contexts/simulated display metrics and hidden product feature journeys are not a claim of physical display, OS IME or manual Mac testing. No BGCS/vendor/package/generated-binding modification, parallel Core system, test hook, IVT or private reflection was used.

Keep this issue Open. PR #26 includes an individual Fixes #41 and will close it only when the user merges to master. No automatic merge or premature master-resolution claim.

Original defect, ownership and accepted work

The following baseline observations describe the issue as opened. The verification above supersedes intermediate pending checkpoints; original failed/negative logs remain preserved. Acceptance checkboxes are checked only after the exact delivery-head verification completes.

Parent and plan mapping

Parent #27; E12 (#39), with the SDK/input ownership acceptance in #16 and #19. This is required validation work discovered before changing the validator.

Confirmed facts

PublicApiBoundaryValidator currently constructs bin/<configuration>/<TFM>/<assembly>.dll paths from project XML. An SDK build using a separate ArtifactsPath therefore leaves it auditing a different, stale default output. During E03 validation it classified the current public AssetBrowserStyle(EditorStyleMetrics) constructor dependency as implementation-only because the inspected default assembly predates that constructor. The current source and D: SDK-owned build have the public dependency.

DocumentationSourceModels also has a default-output path path when SDK reference capture is not selected. The existing SDK-backed WikiProjectReferences path does not currently accept the caller's artifact owner. These are confirmed path/identity weaknesses; no BGCS defect is involved.

Owner and dependency direction

Inno.Tooling.Architecture owns public-contract and documentation analysis. Reuse the existing public SDK evaluation and source-compilation machinery. Do not introduce a second resolver, copy stale assemblies into expected paths, weaken public-reference rules, or add platform-specific validation branches.

Implementation scope

• Resolve source, compilation options, framework/package/project references and actual output paths from one explicitly selected SDK/configuration/artifact owner.
• Make public boundary validation inspect the current candidate source/contract, never silently choose a different default output.
• Reuse the same input authority for API documentation, public dependency classification and project graph validation.
• Remove replaced path guesses and duplicated resolution logic; retain explicit foreign-product limits and diagnostics.
• If an explicit artifact-owner option is needed for validation, map it once to the SDK inputs and document it; do not require reference-pack paths or platform lists.
• Preserve read-only/design-time behavior: no native preparation during inspection.

Failure, cancellation and lifetime

Missing current inputs, unresolved public signatures, invalid owners and SDK failures must fail with actionable diagnostics. Cancellation must drain owned SDK processes. Do not repair inputs, select stale defaults, publish partial reports as successful, or retain collectible extension objects.

Acceptance

• Default-output and independent-ArtifactsPath candidate builds produce identical public dependency classifications.
• A stale or missing default bin cannot override an independent current owner.
• Adding/removing a public constructor or member changes the classification from actual current source.
• A real public dependency requires a public reference; an implementation dependency still requires PrivateAssets=compile.
• Foreign-product and missing-reference cases remain accurately diagnosed without requiring an unavailable native platform SDK.
• Architecture, XML, Wiki and relevant public SDK fixtures pass through the standard entry.
• Record commit, commands, actual inputs and evidence. Keep this issue open until verification and merge through PR refactor(editor): unify UI ownership and editing workflows #26.

Evidence: D:/InnoEngine-Verification/editor-ui-closure-2026-10-27/e03-architecture-debug.log (28 violations: 27 new XML layout violations being corrected separately, plus this stale-output classification).