Add workspace-operations agent registry records: capability, delegation, revocation, operation scope, and session binding

[Copilot]

Agents acting in the Workspace Operation Plane had no registered identity, declared capabilities, or revocation posture — ambient authority was possible. This adds the full set of registry records required to enforce that authority must be registered, delegated, scoped, budgeted, and revocable before any agent touches WorkspaceOperation, OperationTask, Artifact, DecisionCard, PolicyGateRecord, ToolGrant, Memory namespace, or local agent-machine execution.

New record kinds (9)

Kind	Purpose
AgentRegistration	Root identity — owner, policy profile, revocation anchor
AgentCapabilityDeclaration	Declares allowedOperationTypes, allowedTools, allowedArtifactTypes
AgentOperationScope	Constrains operation + artifact types for a given scope
AgentDelegationGrant	Scoped, expiring, revocable delegation between agents (delegatedBy, expiresAt)
AgentToolGrant	Tool-level grant with scope, constraints (mandatory evidence-required), and expiry
AgentBudgetPolicy	Token/operation/artifact budgets + maxConcurrency
AgentAuditProfile	Audit level (none/summary/standard/full) per agent
AgentRevocationRecord	Revocation state including revokedOperationTypes and revokedTools
AgentOperationSessionBinding	Binds active session to scope, delegation grant, tool grants, budget, and audit profile

Files

• examples/workspace-operations/ — 9 cross-referenced example files (16 records total) for ws-ops-executor and ws-ops-reviewer agents
• contracts/workspace-operations/records.v0.1.schema.json — JSON Schema for all 9 kinds with full field constraints
• tools/validate_workspace_operation_records.py — standalone validator enforcing field invariants and cross-ref integrity (session bindings → registered agents, scopes, tool grants; revocation refs → existing records)
• tools/tests/test_workspace_operation_records.py — 12 targeted tests covering all kinds and cross-refs
• Makefile — make validate now runs both validators; make validate-workspace-ops added as a focused target
• docs/workspace-operations-registry.md — invariants, field table, non-goals, and references

Key enforcement invariants

• Every AgentRegistration.revocationRef must resolve to an existing AgentRevocationRecord
• Every AgentToolGrant must carry the evidence-required constraint
• Every AgentDelegationGrant must have delegatedBy, expiresAt, and revocationState
• Every AgentOperationSessionBinding must reference a registered agent, a valid scope, and at least one valid tool grant