fix(autoresearch): split contract audit provenance

Retain the contract's original Definition Auditor dependency under a dedicated provenance role so a fresh typed audit can coexist without breaking the certified artifact DAG.

Co-authored-by: Cursor <[email protected]>

Author: 2 people

scripts/agent_gan_repl.py

@@ -16,7 +16,7 @@
 import threading
 import time
 import uuid
-from dataclasses import asdict, dataclass, field
+from dataclasses import asdict, dataclass, field, replace
 from datetime import datetime
 from enum import Enum
 from pathlib import Path
@@ -5200,11 +5200,25 @@ def retain_contract_provenance_after_artifact_failure(
     checkpoint: OrchestrationCheckpoint,
 ) -> None:
     """Invalidate executable role artifacts without erasing accepted strategy."""
-    checkpoint.validated_artifacts = {
+    prior = checkpoint.validated_artifacts
+    preserved = {
         role: reference
-        for role, reference in checkpoint.validated_artifacts.items()
+        for role, reference in prior.items()
         if role in {"strategy_tournament", "research_contract"}
     }
+    definition = prior.get("definition_auditor")
+    tournament = prior.get("strategy_tournament")
+    if (
+        definition is not None
+        and tournament is not None
+        and definition.sha256 in tournament.dependencies
+    ):
+        preserved["contract_definition_auditor"] = replace(
+            definition,
+            role="contract_definition_auditor",
+            strategy_plan_hash=checkpoint.target_strategy_plan_hash,
+        )
+    checkpoint.validated_artifacts = preserved
 
 
 def run_certified_decomposition(

tests/inference_engine/bridge/test_agent_gan_repl.py

@@ -15,6 +15,7 @@
     validate_lean_proof,
 )
 from autoresearch.prefill.orchestration_state import (
+    ArtifactRef,
     OrchestrationCheckpoint,
     ProofState,
     load_checkpoint as load_orchestration_checkpoint,
@@ -3640,18 +3641,43 @@ def test_artifact_migration_failure_preserves_contract_provenance():
         research_contract_hash="contract-hash",
         selected_strategy_plan_id="SP-root",
         selected_strategy_plan_hash="plan-hash",
+        target_strategy_plan_hash="plan-hash",
     )
+    def ref(role, sha, dependencies=()):
+        return ArtifactRef(
+            role=role,
+            sha256=sha,
+            schema_version=1,
+            dependencies=list(dependencies),
+            path=f"/tmp/{sha}.json",
+            source_run_id="host:test",
+            validated_at=1.0,
+        )
     checkpoint.validated_artifacts = {
-        "definition_auditor": object(),
-        "counterexample_worker": object(),
-        "strategy_tournament": object(),
-        "research_contract": object(),
+        "definition_auditor": ref("definition_auditor", "definition"),
+        "counterexample_worker": ref("counterexample_worker", "worker"),
+        "strategy_tournament": ref(
+            "strategy_tournament",
+            "tournament",
+            ["definition"],
+        ),
+        "research_contract": ref(
+            "research_contract",
+            "contract",
+            ["tournament"],
+        ),
     }
     retain_contract_provenance_after_artifact_failure(checkpoint)
     assert set(checkpoint.validated_artifacts) == {
+        "contract_definition_auditor",
         "strategy_tournament",
         "research_contract",
     }
+    contract_definition = checkpoint.validated_artifacts[
+        "contract_definition_auditor"
+    ]
+    assert contract_definition.sha256 == "definition"
+    assert contract_definition.strategy_plan_hash == "plan-hash"
     assert checkpoint.research_contract_id == "RC-root"
     assert checkpoint.research_contract_hash == "contract-hash"
     assert checkpoint.selected_strategy_plan_id == "SP-root"