Fix runtime drift guards and write-path audit bridging

[lisihao]

摘要

• 修复 terminal sprint 在 autopilot / graph projection / runtime status 多写入器之间被回写成非终态的漂移问题
• 将 tools/graph_scheduler.py 收口为 canonical wrapper，避免 tools/lib 双实现分叉
• 给 runtime_doctor 增加 state_surface_drift 检查，并清理 runtime_write_path_audit 的剩余 warn/error
• 为 evolution_engine 增加 sprint-scoped legacy event -> session-log v2 桥接

变更边界

in-scope

• runtime_status terminal sticky guard
• graph_scheduler closeout / projection runtime bridge
• solar-autopilot-monitor terminal child downgrade guard
• runtime_doctor.state_surface_drift
• runtime_write_path_audit 分类规则与回归
• evolution_engine sprint-scoped event bridge
• tools/graph_scheduler.py -> canonical wrapper

out-of-scope

• 不改 planner / builder / evaluator 的产品逻辑
• 不改 quota / routing / scoring / lease 规则
• 不处理仓库里其他并行 feature 的脏改动
• 不做历史全量 sprint 的语义重写，只修 runtime/drift/write-path 主链

关键改动文件

• harness/lib/runtime_status.py
• harness/lib/graph_scheduler.py
• harness/tools/solar-autopilot-monitor.py
• harness/lib/runtime_doctor.py
• harness/lib/runtime_write_path_audit.py
• harness/tools/runtime_write_path_audit.py
• harness/lib/evolution_engine.py
• harness/tools/evolution_engine.py
• harness/tools/graph_scheduler.py
• drift / wrapper / audit 回归测试

验证矩阵

检查	结果
python3 harness/lib/runtime_write_path_audit.py --root harness --json	warn=0, error=0
python3 /Users/lisihao/.solar/harness/lib/runtime_write_path_audit.py --root /Users/lisihao/.solar/harness --json	warn=0, error=0
bash harness/tests/runtime/test-runtime-write-path-audit.sh	PASS runtime write-path audit classifies ok/warn/error
python3 -m pytest -q harness/tests/test_runtime_doctor_state_surface_drift.py harness/tests/graph/test_graph_scheduler_tool_wrapper.py harness/tests/graph/test_runtime_status.py harness/tests/graph/test_graph_status_sync.py harness/tests/control_plane/test-autopilot-pane-gate-reconcile.py	35 passed
python3 -m py_compile ...	通过

Reviewer Guide

1. 先看 runtime_status.py，确认 terminal -> non-terminal 默认不可降级。
2. 再看 graph_scheduler.py，确认 graph closeout/projection 全部桥到中心 writer。
3. 再看 solar-autopilot-monitor.py，确认 terminal child 不会再被 dependency_blocked 打回 queued。
4. 最后看 runtime_write_path_audit.py 与测试，确认 source/live 审计都已经 warn=0 error=0。

风险

• 这条 PR 主要修 runtime 守卫与审计口径，未覆盖其他并行 feature 分支。
• tools/graph_scheduler.py 由独立实现收口成 wrapper，虽然回归已覆盖 CLI 可用性，但如果外部有人依赖旧内部实现细节，需在合并后再观察一轮。

[lisihao]

Merge note:

• This PR is intentionally based on codex/capsule-proof-adapter-runtime, not main.
• Verified in an isolated worktree so the original /Users/lisihao/Solar dirty workspace was not touched.
• Scope is runtime/drift/write-path guards only; other parallel changes remain out of scope.
• After merge, monitor one cycle of autopilot + graph closeout to confirm no terminal sprint regresses to queued.