feat(audit): classify scripted gameplay telemetry

[zoeyrose]

Summary

• add an exact AST occurrence inventory for every directly authored Python gameplay metric and audit-like logging site
• classify all 26 metric calls across 21 unique identities and all 21 current logging/print/dynamic-execution/sink sites under the gameplay-journal noise and privacy policy
• bind each review to its exact AST location, lexical scope, and normalized surrounding-source fingerprint, while prohibiting reserved reflection, dynamic execution, and callable aliases
• keep free-form operational text out of proposed structured records and keep the review-only contract out of Classic runtime artifacts
• align the quest rows with the released QuestManager lifecycle producers from feat(quests): journal lifecycle milestones #223 and the authoritative reason taxonomy from feat(server): audit meaningful quest, progression, and survival milestones classic#161
• document the remaining unsafe pre-commit economy metric boundaries without claiming transaction safety

This draft will add the remaining executable integrations after the server-owned recovery contracts stabilize.

Tracks #160. The closing reference will be restored only after the executable draft gates below are complete.

Dependencies and branch disposition

• The stable quest/progression contract landed in feat(server): journal progression milestones classic#319 and is consumed on main by feat(quests): journal lifecycle milestones #223.
• Crash-safe idempotent replay and disposition lookup for scripted quest transitions is tracked by feat(server): reconcile scripted quest transitions classic#321.
• The missing multi-step scripted economy correlation and idempotency contract remains open at feat(server): correlate scripted economy transactions classic#313.
• main is the sole authored source. No 1.x branch, artifact, release, or retained evidence is changed. The final Classic target will be derived from this exact main revision through the existing target publisher.

Coordinates

• Base: main@02f30929ca1e9514127986133c0658a513654eef
• Head branch: feat/160-scripted-audit-events
• Current head: a94358f4534041db51e8c2c0b29d08abdbc22431
• Worktree: /workspaces/atrinik/workspace/worktrees/content/issue-160-scripted-audit
• Current-base alignment: a891847d5 and 2dba16002 merge main; afb95d1ce aligns the quest inventory; af8c3b2dc aligns the Jail inventory after status publishing
• Audit implementation commits: 89efbb2a2, aa691bcbd, 0b993dfbb, a571e83b3, f6e10c22e, df1aa8479, 0e43b814e, 7f7e8eab6
• Latest recovery/review fixes: 88b7442b5, 42c73945a, 2d7cf68b3, a0e14034d, f62650086, cba4601a2, 23ebacd93, 4783dd365, 82f013fd3, fee21a733, efe55177f, bcf0387f1, a94358f45

Validation

• python3 -m unittest tools.tests.test_scripted_gameplay_audit -v — 59 passed
• python3 tools/validate.py — 226 tests plus release-line parity, 1,355-archetype/3,651-map lossless audit, lighting, schema, catalog, contracts, syntax, isolated generic/Classic runtime collection, licensing, and provenance gates passed
• python3 -m compileall -q tools maps/python/QuestManager.py maps/python/tests/QuestManager.py — passed
• git diff main..HEAD --check — passed

Review fixes

• replaced grouped call counts with exact occurrence and surrounding-context review
• expanded discovery from maps/python to every authored maps/**/*.py script outside fixtures
• made audit-like logging a discovered, exact inventory instead of unenforced prose
• bounded proposed identifiers to the server's 255-character ASCII contract
• corrected unique metric identity reporting and classified unsafe legacy economy commit boundaries explicitly
• moved the governance contract out of the runtime map tree and added an aggregate absence gate
• inventoried all five direct Python print producers routed to the operational log
• rejected metric/log/print aliases and reflective access while preserving innocent strings and unrelated methods
• bound the Guild.log_add persistence sink, qualified/module aliases, factory-derived guild receivers, and reserved-name shadow/rebinding rules
• prohibited raw audit facilities from claiming gameplay-journal disposition without a typed producer contract
• re-reviewed and rebound the quest metric sites after the released lifecycle integration changed their authoritative context
• inventoried privileged eval/exec/interactive-console boundaries, module-qualified prints, built-in/operator reflection, namespace lookup, and ambiguous telemetry-receiver rebinding
• rejected a content-local quest retry approach after review proved partial multi-stack cleanup and mixed terminal outcomes require the server-owned atomic disposition contract; feat(server): reconcile scripted quest transitions classic#321 now includes objective progress and metric projection

Draft gates

• consume the stable quest idempotency/disposition contract from feat(server): reconcile scripted quest transitions classic#321 and add restart/uncertain-commit replay coverage
• compose post, auction, merchant, housing, bounty, guild, jail, and selected service operations through one idempotent transaction identity from feat(server): correlate scripted economy transactions classic#313
• add success, rejection, exception, replay, and every multi-step failure-boundary test
• validate against exact compatible Classic/content heads, complete iterative whole-diff review, and pass latest-head hosted checks

The clean content aggregate validation and all latest-head hosted checks pass. Exact Classic server/runtime verification remains pending the two server recovery contracts above; the current isolated wrapper retry also encountered the unrelated incomplete shared source-generation bug tracked by atrinik/atrinik#427. Replacement runtime adapters remain unavailable under atrinik/atrinik#266, atrinik/atrinik#269, and atrinik/atrinik#270; Classic is the declared target of this shared authored source.