fix: verify corrected Proofable receipts and require comparison fields

[dinakarjs]

The shared runner in agentrust-io/integrations agentrust-io#288 pins the historical October 6 Proofable packet, reports portable signature material absent, and accepts reports missing required comparison fields. This follow-up pins the frozen October 8 packet, performs offline qHash/EIP-191 verification with DID/chain binding and exact trace/manifest/envelope qHash-set agreement, and rejects omissions of every field listed by comparison-contract.json.

validate_report() no longer inserts defaults or mutates the input. Proofable and MintID explicitly disclose unavailable context in their adapter output. Five new regression tests cover 56 single-field omissions across four cases, combined authority/decision omission, empty fields, explicit unavailable states, and complete measured fields. The existing author-evidence provenance guard test uses a complete report so it still exercises that guard.

Historical October 6 checksum FAIL remains separately preserved. The verifier is vendored unchanged from probityai/agent-evidence-observer agentrust-io#88 at 2b54ee47491f0d1a86c7d9f47d434f8f02622043, with Apache-2.0 attribution/license and hash-locked dependencies. The shared-runner lint issues are also fixed.

Validation at head 74fc43c863709e9e5fb768741a38b35c4c2cdbd8: all eight triggered GitHub workflows succeeded, including Lint and Alakris authority comparison evidence checks. python check_package.py --fetch fetched 20 immutable artifacts, ran the full unittest suite, validated 20 reference shapes and reported package checks PASS, MintID author bytes PASS, corrected October 8 Proofable bytes/envelopes PASS, and known historical Proofable failure preserved. Evidence run: https://github.com/dinakarjs/integrations/actions/runs/38020496964. Locally, all six focused regression/provenance tests and the exact repository Ruff 0.16.9 gate passed; both new published file blobs matched the tested files. Local full raw-fetch stalled; the successful end-to-end result is from GitHub Actions.

Base: exact agentrust-io#288 head 084571bd337ab605219a74ac183604a74f0c3eb5; review diff: 12 files. This contributor-fork PR is ready for the shared-runner author to integrate into wlad232/integrations:codex/aaif-authority-comparison. Direct PR creation there returned HTTP 403. No upstream branch was changed and no merge has occurred.

Scope remains historical receipt integrity and author-operated SELF custody. No current freshness, independent live execution, target-side effect custody, conformance or measured revocation latency claim.

Maintainer request: agentrust-io#288 (comment)

[github-actions]

🟡 Contributor Check: MEDIUM

Check	Result
Profile	MEDIUM
Credential	LOW
Overall	MEDIUM

Automated check by AgenTrust Contributor Check.