Add NodeSlide consumer proof harness

[HomenShum]

Outcome

Adds the audited NodeSlide consumer-boundary proof to NodeRoom with an accurate feature-classified commit. This replacement replays the exact tree from #217 while correcting the noncompliant test: subject.

Final commit: 2cced739 - feat(integrations): add NodeSlide proof across docs, package, scripts, src, and tests.

What changed

• adds a fail-closed adapter from an already verified NodeRoom actor to the structural NodeSlide principal contract
• adds a consumer proof that loads either a sibling NodeSlide build or an immutable npm tarball
• verifies proposal-before-apply, review/accept, v1 -> v2 CAS, stale competing proposals, trace-bound receipts, version history, and idempotent acceptance
• adds the package command, focused adapter tests, and boundary documentation
• preserves NodeRoom runtime, authentication, Convex schema, and product-shell authority

Why

The original #217 commit was labeled as test-only even though it adds runtime source, an executable integration harness, package wiring, tests, and docs. This PR keeps the audited implementation unchanged and gives the change an accurate conventional history.

Validation

• npm run commit:check - PASS: all 5 changed areas covered
• git diff --check origin/main...HEAD - PASS
• npm test -- --run tests/nodeSlideHostPrincipal.test.ts - PASS: 1 file, 3 tests
• npm run nodeslide:consumer:proof -- --root "D:\VSCode Projects\NodeSlide" - PASS: package build and consumer receipt
• commit tree is identical to b7962334
• final-SHA push and pull-request CI - PASS, including production gate and ladder eval

Honest scope

This proves the injectable repository boundary only. It does not add a production backend adapter, mount the React studio, replace NodeRoom auth, add parallel persistence, or weaken certification assets.

Supersedes #217.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
noderoom	Ready	Preview, Comment	Jul 20, 2026 3:56am

[github-actions]

Scaffold Handoff — For Your Coding Agent

Your coding agent (Codex, Claude Code, etc.) should apply the accepted
scaffold proposals below. Do NOT touch any immutable files.

Immutability Check

Mode: advisory

✅ No immutable files were modified in this branch.

Changed Files

• docs/eval/OFFICIAL_BENCHMARK_READINESS.md
• docs/eval/OFFICIAL_BENCHMARK_TASK_COVERAGE.md
• docs/eval/OPENROUTER_CONVEX_BENCHMARK.md
• docs/eval/agent-improvement-loop.md
• docs/eval/agent-improvement-loop.svg
• docs/eval/agent-improvement-loop/20260720T035542Z.json
• docs/eval/agent-improvement-loop/latest.json
• docs/eval/agent-workspace-sandbox-smoke.json
• docs/eval/algorithm-artifact-smoke.json
• docs/eval/bankertoolbench-official-contract.json
• docs/eval/docker-sandbox-probe.json
• docs/eval/eval-runs.jsonl
• docs/eval/halo-convex-context-telemetry.json
• docs/eval/halo-self-improvement-smoke.json
• docs/eval/halo-variant-selection.json
• docs/eval/official-benchmark-readiness.json
• docs/eval/official-benchmark-task-coverage.json
• docs/eval/openrouter-convex-benchmark.json
• docs/eval/professional-catalog-proofs.json
• docs/eval/professional-proof-ledger.json
• docs/eval/spreadsheetbench-chart-visual-probe.json
• docs/eval/traces/credit/20260720T035549542Z-92282fec_dirty.afacbfe904c4c396/cascade-healthy.json
• docs/eval/traces/credit/20260720T035549542Z-92282fec_dirty.afacbfe904c4c396/delta-incomplete.json
• docs/eval/traces/credit/20260720T035549542Z-92282fec_dirty.afacbfe904c4c396/mapping-correct.json
• docs/eval/traces/credit/20260720T035549542Z-92282fec_dirty.afacbfe904c4c396/mapping-misbind.json
• docs/eval/traces/credit/20260720T035549542Z-92282fec_dirty.afacbfe904c4c396/summit-stressed.json
• docs/eval/traces/ladder/20260720T035549155Z-92282fec_dirty.d2c7e0c5aab0a008/ladder_L1_read_scripted.json
• docs/eval/traces/ladder/20260720T035549155Z-92282fec_dirty.d2c7e0c5aab0a008/ladder_L2_edit_scripted.json
• docs/eval/traces/ladder/20260720T035549155Z-92282fec_dirty.d2c7e0c5aab0a008/ladder_L3_conflict_scripted.json
• docs/eval/traces/ladder/20260720T035549155Z-92282fec_dirty.d2c7e0c5aab0a008/ladder_L4_blocked_scripted.json
• docs/eval/traces/ladder/20260720T035549155Z-92282fec_dirty.d2c7e0c5aab0a008/ladder_L5_large_range_scripted.json
• docs/eval/traces/ladder/20260720T035549155Z-92282fec_dirty.d2c7e0c5aab0a008/ladder_L6_long_horizon_scripted.json
• docs/eval/traces/ladder/20260720T035549155Z-92282fec_dirty.d2c7e0c5aab0a008/ladder_L7_resume_scripted.json
• docs/integrations/NODESLIDE_CONSUMER_PROOF.md
• package.json
• scripts/nodeslide-consumer-proof.ts
• src/integrations/nodeslide/hostPrincipal.ts
• tests/nodeSlideHostPrincipal.test.ts

Needs Adversarial Review — Do NOT Apply Yet

These proposals passed the reject check but have not been approved by
an adversarial reviewer. A human or frozen LLM judge must approve them first.

• scaf-001 (AGENTS.md): Add explicit instruction for step spreadsheetbench-runner-fixture: Step spreadsheetbench-runner-fixture failed — scaffold may need explicit instruction or evidence assertion.
• scaf-002 (AGENTS.md): Add explicit instruction for step convex-boundaries: Step convex-boundaries failed — scaffold may need explicit instruction or evidence assertion.

Safety Boundary

Agent may improve the scaffold.
Agent may NOT weaken the proof gate.

Immutable files (never modify):

• scripts/proofloop.mjs
• scripts/agent-improvement-loop.ts
• tests/harnessChangeEval.test.ts
• .github/workflows/
• src/eval/evalTrustPolicy.ts
• src/eval/architectureBudget.ts
• evals/evalStore.ts

Scaffold files (safe to modify):

• AGENTS.md
• CLAUDE.md
• proofloop/scenarios/*.yaml
• proofloop/rubrics/*.yaml
• proofloop/subagents/*.md
• proofloop/adapters/*.js
• .proofloop/memory.jsonl
• src/nodeagent/models/prompts/systemPrompt.ts