fix(core,evaluator): qualified relatesTo/conflictsWith are inert in lint; cross-repo supersession is an error everywhere (#299)

[mbeacom]

Closes #299.

What and why

The schema accepts <log>:<id> references, but the surfaces disagreed about them:

• adr lint failed a qualified relatesTo with exit 1.
• The evaluator, the marker resolver, and MCP treated the same reference as inert.
• In the opposite direction, the evaluator treated a qualified supersedes as inert (or passing, given a snapshot), while lint failed it.

This PR implements the accepted ADR-0059:

• Clause 5. Lint reports a log-qualified relatesTo or conflictsWith as federated-ref-unresolved at info instead of dangling-relatesTo (error) or dangling-conflictsWith (warn). This is the amendment to ADR-0031 clause 5 that ADR-0059 declares, and only the relatesTo case lowers an exit code. Measured on a fixture, adr lint and adr explain go from 1 to 0, while check and queue were already 0. A qualified reference never resolves to a local record that shares its bare id.
• Clause 4. Cross-repository supersedes/supersededBy is a dangling-* error everywhere.
  • Lint already failed it, and its message now says why.
  • adr evaluate now fails it as no-orphan-refs.dangling-supersedes, even when a snapshot lists the id.
  • A reference qualified with the evaluator's own resolution log still counts as local.
• Not changed: unqualified references, and the evaluator's handling of qualified relatesTo, which now agrees with lint.

Checklist

• DCO signed off.
• Recorded decision: ADR-0059 clauses 4–5 (accepted). Action item 2 is ticked, verified in the tree.
• Schema changed: n/a.
• @adrkit/core changed, so packages/ci/dist is regenerated under linux/amd64 Bun 1.4.2. The bundles gain parseAdrRef and this change, and nothing else.
• New tests were observed failing first (ADR-0016). That's 6 in core, 4 CLI fixture tests, and 4 in the evaluator, plus a mutation check on the bare-id rule.
• Full bun test: 4345 pass. typecheck, lint, check:deps, check:stale-refs, check:changelog, and adr lint (59 records, clean) also pass.

Notes for reviewers

• The CHANGELOG entry is marked as a behavior change.
• docs/RELEASING.md names the amendment in its SemVer paragraph.
• specs/005-…/contracts/pass-0-evaluation.md still describes the old evaluator behavior. I left it alone because specs/ records history.

[Copilot]

🟡 Changes recommended

Same-log-qualified supersededBy references remain incorrectly dangling in the evaluator.

1 open finding

• Normalize same-log supersededBy references before validation · New

What changed in this PR

Aligns lint and evaluator handling of qualified ADR references under ADR-0059.

Changes:

• Reports qualified relatesTo/conflictsWith as informational.
• Rejects cross-log supersession in the evaluator.
• Updates tests, documentation, and Action bundles.

Repository ADR MCP context was unavailable, so marker-aware decision compliance could not be verified.

File	Description
CHANGELOG.md	Documents behavior changes.
docs/​RELEASING.md	Records amended compatibility policy.
docs/​adr/​0059-aggregate-decision-corpora-across-an-organization-s-repositories-as-a-pinned-rea.md	Marks implementation action complete.
packages/​core/​src/​validate/​corpus-invariants.ts	Classifies qualified references.
packages/​core/​test/​corpus-invariants.test.ts	Tests core classifications.
packages/​cli/​test/​lint.test.ts	Tests lint output and exits.
packages/​evaluator/​src/​rules/​no-orphan-refs.ts	Rejects cross-log supersession.
packages/​evaluator/​src/​rules/​supersession-consistent.ts	Improves qualified successor diagnostics.
packages/​evaluator/​test/​no-orphan-refs.test.ts	Tests supersession handling.
packages/​evaluator/​test/​supersession-consistent.test.ts	Tests qualified supersededBy.
packages/​ci/​dist/​index.js	Regenerates governing Action bundle.
packages/​ci/​dist/​queue-action.js	Regenerates queue Action bundle.
packages/​ci/​dist/​portal-action.js	Regenerates portal Action bundle.

🧠 Review effort: Balanced

[github-actions]

Decisions governing this change

11 accepted decisions govern this change · 1 historical record

Show all 11 governing decisions and why each applies

• 0001 — Record architecture decisions as versioned markdown in git
  • via path: docs/adr/**
• 0003 — Ship as a Spec Kit extension plus a standalone CLI, not a competing harness
  • via path: packages/cli/**
• 0016 — Require every check to be observed failing before it counts as coverage
  • via path: packages/*/test/**
  • via path: packages/core/src/validate/**
• 0027 — Ratify the deterministic evaluator and bind calibration reporting to the first probabilistic pass
  • via path: packages/evaluator/**
• 0030 — Keep extension surfaces that carry a dependency tree outside this repository
  • via path: packages/ci/**
• 0031 — Publish a narrow consumer SDK as the contract, and document the CLI JSON as its sibling
  • via path: docs/RELEASING.md
• 0032 — Publish one lockstep OCI image after the coordinated release succeeds
  • via path: docs/RELEASING.md
• 0035 — Execute the gates that certify a pull request from the default branch
  • via path: packages/ci/**
• 0036 — Expose the governing-decisions Action through one root Marketplace entry point
  • via path: docs/RELEASING.md
  • via path: packages/ci/dist/index.js
• 0041 — Regenerate committed artifacts on Dependabot pull requests with default-branch scripts behind a maintainer label
  • via path: packages/ci/dist/**
• 0059 — Aggregate decision corpora across an organization's repositories as a pinned, read-only federation
  • via path: packages/core/src/validate/corpus-invariants.ts

Historical records that once covered this change (1)

These no longer bind this change, and are listed for context only:

• 0005 — Gate proposals with a deterministic-first evaluator and declarative escalation (superseded) — superseded by 0027
  • via path: packages/evaluator/**

_{Links point at 28ed61d, this run's GITHUB_SHA. Run adr explain <path> locally to see why a file is governed.}