registry: mirror covers declarations (spec 1.1.1) and enforce them in the gate

[DrunkOnJava]

Mirrors rvt-rs #234: SPEC.md 1.1.1 (refreshed §6 worked examples, §5.3.1
coverage row now implemented), registry with on every adopted
reader (authors deliberately excluded), and the registry schema's
allOf/if/then conditionals — jsonschema_mini gains allOf, if/then/else
and not, keeping the fail-loudly contract. check-registry.py enforces
the three rules: adopted readers must declare covers, authors must not,
and every committed observation's semantic_surface_covered must be a
subset of its witness's declaration. Negative checks exercised for all
three.

---

Note

Low Risk
Documentation and registry validation only; no changes to diff logic, schemas for observations/verdicts, or CI witness execution.

Overview
Bumps OctetProof to 1.1.1 as a non-semantic patch: protocol behavior is unchanged, but the spec and umbrella registry now match what the reference gate already enforces.

Registry coverage (covers). Adopted readers must declare §9.4 semantic-surface classes in registry/witnesses.json; authors must not. The witness registry schema adds covers plus allOf/if/then/not rules, and jsonschema_mini grows support for those keywords so validation stays stdlib-only. check-registry.py enforces the three invariants: adopted readers have covers, authors lack it, and each corpus observation’s semantic_surface_covered is a subset of its witness’s covers.

SPEC.md. §5.3.1 and §9.4 document coverage as implemented (not umbrella scope). §6.2/§6.3 worked examples are regenerated from magnetar-2024-core-interior-slim (three witnesses, relations/storeys, thirteen-field verdict). Section 20a records the release; closes rvt-rs #224 and #229.

^{Reviewed by Cursor Bugbot for commit f0f2a3b. Configure here.}

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_ebc5ccbf-c4c5-4cb4-97a2-ef12d2f1c54a)