W1: Provenance as query semantics (tick directive + proof objects + deterministic cursors) #198

Pulse context: "provenance as query semantics".

Goal

• Treat Wesley queries as deterministic, time-addressed slices through a worldline.
• Make provenance/proof artifacts an explicit (opt-in) part of query semantics so outputs are replayable and explainable.

Scope

• Define a time-addressing directive (e.g. @tick(at: Tick!)) and what it means for compilation targets.
  • Semantics must be HistoryTime-only (ticks/epochs/commit ids). No HostTime semantic deadlines.
• Define proof output conventions:
  • Field-parallel proof objects (e.g. __proof_<field> or a uniform __proof field) that can return tick, digest, and optional lineage steps.
  • Proof modes: brief (tick + final digest), lineage (full chain), cost (plan/row counts for audits).
• Deterministic pagination:
  • Cursor shape includes {tick, digest, stable_order_key} so slices are stable across replays.
  • Prohibit/avoid offset pagination for replay-stability.
• Capability/security gating:
  • Proof emission must be opt-in and capability-gated to avoid leaking sensitive provenance.

Acceptance criteria

• Spec section (or new PROV-* spec) defines:
  • directive syntax
  • proof object shapes
  • cursor determinism requirements
  • security/capability requirements
• At least one end-to-end example query + expected proof payload shape.

Parent

• Child of W1: Wesley as a boundary grammar (hashable view artifacts) #174 (W1).