Merge Orchestration · live BatonEmitter actuation backend (:manifest|:baton|:both)

[hyperpolymath]

Finishes the live bag-of-actions wiring for the merge-orchestration runtime (the BoA follow-on tracked in .machine_readable/merge-orchestration/LEDGER.a2ml).

What

• Loop.run/1 gains :actuation — :manifest (default) | :baton | :both. :baton submits one Baton per armed entry via BatonEmitter.emit/2, late-bound to Bag.Mesh.submit_planned(spec, budget) so a :manifest-only run never references Bag.* (compile-decoupled; no new dep).
• Threaded through Scheduler.cycle and mix hypatia.merge_orchestrate --actuation.
• Two interop fixes in the as-merged BatonEmitter (Merge Orchestration · BatonEmitter (bag-of-actions mesh actuation backend) #500), verified against bag-of-actions' real source — each would otherwise make every merge Baton fail:
  • required_cap "secret-access" → "secret_access" (the Zig bridge / Bag.Planner tag; a hyphenated tag is unprovable → routes to no node).
  • to_spec now carries a :verifier, so a mutating merge passes the planner's mutation gate instead of {:rejected, :mutation_requires_verifier}.

Token-free brain

The brain only emits/reads. required_cap "secret_access" is held only by the mesh-github-runner node in bag-of-actions' estate, so every merge Baton migrates off the brain to the runner — the token-free-brain invariant as capability routing.

Tests

• +4 Loop/Scheduler :actuation tests; baton_emitter_test updated.
• mix test test/merge_orchestration/ → 81 tests, 0 failures.
• Full suite: the ~14 failures are pre-existing and unrelated (workflow-audit count drift, missing :proof_model_retrain_count metric, watcher :already_started isolation) — identical with this branch reverted.

Cross-repo counterpart: hyperpolymath/bag-of-actions claude/peaceful-pascal-IRlgq (brain node + end-to-end test). BatonEmitter.to_spec output matches that PR's routed spec byte-for-byte.

Core-tier → draft for owner review (not auto-armed).

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 42 issues detected

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	42

View findings

[
  {
    "reason": "Repository has 5 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "src/ui/gossamer/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "scripts/ci-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "scripts/bench-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "ffi/zig/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/reports/audit/audit-2026-04-15-post.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/a2ml-k9.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/architecture/system-integration.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence