Complete ontology authority activation

[witbrock]

What

• Prevent adaptive turns from presenting cited ontology relationship success when the durable effect did not succeed or exact canonical relation read-back disagrees.
• Make governed identity-consolidation plans work with live-shaped derived metadata while preserving survivor-owned fields, invalidating derived salience, resolving string/ObjectId text references, and removing only structural self-edges introduced by identity collapse.
• Correct the 23-person candidature fixture, receipt UTC projection, and activate the ontology-publication authority reference with live evidence.

Why

Tier-3 activation of JVNAUTOSCI-2632 exposed two release blockers after the core authority deployment: the replay final answer overclaimed one stopped stale-ID mutation, and a real-shaped merge preview either rejected derived metadata or would have introduced target self-loops. These changes make the result evidence-honest and the governed merge plan executable without weakening fail-closed handling of unfamiliar canonical metadata.

Impact and safety

• No generic authority expansion.
• No live identity merge was executed.
• Live Atlas preflight ran under repository write tripwires and produced plan 367e997ab34186fc29bbbde16f90fb45dce68e30e86d110a9b690b544af6a267: seven affected concepts, five incoming rewrites, four text relations, zero residual source references, and zero structural target self-edges.
• The motivating ontology outcomes are canonically complete: Graduate Student hierarchy repair and 23/23 blocked candidature classifications, with forward/inverse read-back and terminal receipts.

Root cause

The ordinary-turn finaliser preserved a model-written per-item table for mixed no-change failures without reconciling cited claims against effect finality. The identity merge planner treated derived index/cache fields as canonical conflicts, read alias TextValues through an ID-shape-sensitive path, and did not distinguish a pre-existing target self-edge from one created by source-to-target collapse.

Checks

• 138 passed across authority, merge, workflow, gateway, scope, stdio, HTTP provenance, and route suites.
• 4 passed focused adaptive finaliser regressions, including the live ev_* citation shape and case-sensitive exact identity matching.
• Ruff selected checks, py_compile, and git diff --check pass.
• Independent diff review found no remaining candidate-caused stop-ship issue.

Jira: JVNAUTOSCI-2632