Add durable validation provenance

internal/framework/pipeline/producer_attempts_test.go

@@ -280,6 +280,62 @@ func TestRunProducerAttemptsRejectionWinsOverValidatorFailure(t *testing.T) {
 	}
 }
 
+func TestValidationSummaryIsBoundedAndCorrectedSuccessIsQuiet(t *testing.T) {
+	terminal, err := runProducerAttempts(context.Background(), producerAttemptConfig{Retries: 1, Policy: DefaultValidationPolicy()}, func(_ context.Context, request producerAttemptRequest) (producerAttemptOutput, error) {
+		if request.Number == 1 {
+			return producerAttemptOutput{Value: "first", Candidate: attemptCandidate(t, "sensitive defective response")}, nil
+		}
+		return producerAttemptOutput{Value: "corrected", Candidate: attemptCandidate(t, "sensitive corrected response")}, nil
+	}, func(_ context.Context, output producerAttemptOutput) (validationReport, error) {
+		if output.Value == "first" {
+			return validationReport{records: []validationRecord{{validatorName: "first", outcome: validationRejected, reasonCode: "needs_fix", message: "sensitive diagnostic", correctionGuidance: "sensitive guidance"}}}, nil
+		}
+		return validationReport{}, nil
+	})
+	if err != nil {
+		t.Fatalf("runProducerAttempts() error = %v", err)
+	}
+	summary := validationSummary(terminal, StageExtract, "step", "lane", "module", "chunk", 3)
+	if summary.Status != "complete" || summary.ProducerAttemptCount != 2 || summary.TerminalAction != string(producerTerminalAccepted) {
+		t.Fatalf("summary = %#v", summary)
+	}
+	if len(summary.ReasonCodes) != 0 || len(summary.RejectingValidators) != 0 || len(summary.IncompleteValidators) != 0 {
+		t.Fatalf("corrected success summary retained prior findings: %#v", summary)
+	}
+	if len(terminal.Warnings) != 0 {
+		t.Fatalf("corrected success warnings = %#v, want none", terminal.Warnings)
+	}
+}
+
+func TestWarnContinueRecordsOneWarningForEachExhaustedValidator(t *testing.T) {
+	report := validationReport{records: []validationRecord{
+		{validatorName: "first", outcome: validationFailed, attemptCount: 2, failure: errors.New("provider error with sensitive details")},
+		{validatorName: "second", outcome: validationSkipped, attemptCount: 1, reasonCode: "missing_prerequisite", message: "sensitive skipped detail"},
+		{validatorName: "third", outcome: validationFailed, attemptCount: 1, failure: errors.New("other provider error")},
+	}}
+	terminal, err := runProducerAttempts(context.Background(), producerAttemptConfig{Policy: DefaultValidationPolicy()}, func(context.Context, producerAttemptRequest) (producerAttemptOutput, error) {
+		return producerAttemptOutput{Value: "candidate"}, nil
+	}, func(context.Context, producerAttemptOutput) (validationReport, error) {
+		return report, nil
+	})
+	if err != nil {
+		t.Fatalf("runProducerAttempts() error = %v", err)
+	}
+	if terminal.Action != producerTerminalIncompleteAccepted {
+		t.Fatalf("terminal action = %q", terminal.Action)
+	}
+	if got, want := terminal.Warnings, []contracts.Warning{
+		{Scope: "first", ReasonCode: "validator_execution_incomplete", Message: "Validator execution did not complete within its configured budget."},
+		{Scope: "third", ReasonCode: "validator_execution_incomplete", Message: "Validator execution did not complete within its configured budget."},
+	}; !reflect.DeepEqual(got, want) {
+		t.Fatalf("warnings = %#v, want %#v", got, want)
+	}
+	summary := validationSummary(terminal, StageNormalize, "step", "lane", "module", "", 0)
+	if summary.Status != "incomplete" || !reflect.DeepEqual(summary.IncompleteValidators, []string{"first", "second", "third"}) || !reflect.DeepEqual(summary.ReasonCodes, []string{"missing_prerequisite"}) {
+		t.Fatalf("summary = %#v", summary)
+	}
+}
+
 func TestRunProducerAttemptsStopsForCancellationAndDebugFailure(t *testing.T) {
 	tests := []struct {
 		name    string