Add the Audiozentrale v2 object model

[alexdermohr]

Summary

Implements Bureau task AUDIO-CONTROL-PLANE-V1-T019 against the approved Audiozentrale v2 plan.

• adds a versioned product model for setups, typed signal lanes, internal modules, modulation links, scenes and immutable takes
• binds the approved plan, both JSON Schemas and the existing profile catalog by exact path and SHA-256
• maps the shipped five UI areas onto Jetzt, Setups, Bibliothek and System
• keeps the four truth layers orthogonal to the three display depths
• enforces at most one active setup and rejects free graphs, arbitrary ports, scripts, routing cycles, timeline, comping and clip editing
• validates signal types through every module and requires a take to bind to an actual recorder lane
• exposes a read-only CLI for contract checking, workspace validation and model projection

Security and correctness

The validator reads bounded regular files through a symlink-free directory chain. Each bound plan, schema and profile catalog is hashed and parsed from the same single snapshot. Duplicate JSON keys, non-finite numbers, invalid UTF-8, file changes during reads, unknown references and non-canonical product states fail closed.

The model does not add profile-apply, recording, routing, device or live-audio authority.

Revision binding

• base: 25d790ff2fee589f725b8f96a3fd1e9d8ec34dfc
• head: 874f1b21123024428ab2299458d8ec18827490f3
• approved plan SHA-256: 61979e0e4182291b460274153bee4ce2c770225a5d6c7940ee52bdc4785e47ae
• product model SHA-256: 87a36ce5cae399069adae5ad7b7b4fd015e2df5f71ed117dd950286d284e6d6f
• binary diff SHA-256: bd626c8cb950124868ad13aa5a1fe8197df2e04031b51f2428ae36e0daabb8b1

Validation

• focused product-model tests: 13/13 PASS, including 21 generated semantic negative cases
• JSON Schema Draft 2020-12 validation: PASS for model and workspace
• Ruff check and format: PASS
• git diff --check: PASS
• exact-head just check: PASS
• full repository tests: 532/532 PASS
• durable job receipt SHA-256: 9f1450ba4c897350196f37518ac539a017189c47c7df544b5788973b84b07f7c
• durable payload SHA-256: fa5916a534ec9bb88041911ea9815e9cc7cda8ed72bf022268c8656c39886e41

No physical playback, recording, service start, PipeWire routing change or device mutation was performed.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

[alexdermohr]

Superseded by PR #45. The final candidate removes the duplicated workspace fixture and unused helper without rewriting published history. No force-push was used.