Add TrustOps Fabric contracts

[mdheller]

Summary

Adds the first TrustOps Fabric contract layer for turning responsible-AI provider libraries into SocioProphet-native governance receipts and policy gates.

This is intentionally standards-first and provider-neutral. AIF360, ART, AIX360, UQ-style libraries, and future providers are treated as isolated runner backends and regression oracles. SocioProphet owns the contracts, receipts, policy interpretation, local-first execution semantics, runtime enforcement, and agent-authority effects.

Added

• schemas/trustops-receipt.schema.json
  • Canonical receipt for fairness, robustness, explanation, uncertainty, RAG, ranking, dataset, and agent-trust evaluations.
• schemas/trust-gate-policy.schema.json
  • Maps TrustOps receipts into allow, warn, review, quarantine, block, rollback, and revocation decisions.
• schemas/dataset-risk-manifest.schema.json
  • Captures dataset lineage, label semantics, protected/sensitive attributes, data boundary, consent, and risk controls.
• Example fixtures for each new schema.
• docs/TRUSTOPS_FABRIC.md
  • Explains the build-vs-integrate strategy and ART-first vertical slice.
• README contract inventory and doctrine updates.
• Makefile validation wiring for all new JSON schemas/examples.

First implementation lane

ART-first robustness gate:

1. Implement trustops-art-runner in SocioProphet/prophet-platform.
2. Emit trustops-receipt.v1 robustness receipts.
3. Store receipts in SocioProphet/model-governance-ledger.
4. Map results to runtime controls in SocioProphet/guardrail-fabric.
5. Apply authority impacts in SocioProphet/agent-registry.

Validation

The existing repo validator uses Draft 2020-12 JSON Schema. The Makefile now validates all new schemas and fixtures via make validate.