Enforce durable D&D evidence ranges

internal/modules/dnd/items/registry/registry_test.go

@@ -87,6 +87,18 @@ func TestResolveRejectsInvalidIdentityAndMalformedInput(t *testing.T) {
 	}
 }
 
+func TestResolveRejectsReversedEvidenceInDirectRegistryReference(t *testing.T) {
+	value := fixture()
+	value.Items[0].SourceRefs[0] = source.SourceRef{SourceID: "session-alpha", StartUnitID: 2, EndUnitID: 1}
+	content, err := itemcodec.New().EncodeCandidate(value)
+	if err != nil {
+		t.Fatalf("EncodeCandidate() error = %v", err)
+	}
+	if _, err := Resolve(referenceSet(contracts.ReferenceItem{MediaType: itemcodec.MediaType, Content: content})); err == nil || !strings.Contains(err.Error(), "invalid approved") {
+		t.Fatalf("Resolve() error = %v, want direct-reference rejection", err)
+	}
+}
+
 func TestResolverKeepsConstructionAndOperationReferencesIndependent(t *testing.T) {
 	resolver, err := NewResolver(contracts.ReferenceSet{})
 	if err != nil || resolver.Seeded().Bound() {