DEN-3600: require verified Contract IR before any client code generation

Make Zed client generation fail closed unless a current TJSV consumer-verification receipt approves the exact Contract IR and checked source lanes.

Acceptance:

generator entrypoint requires status=passed, admissible=true, exact irId and receipt run id;
bind irId, run id, validator revision and declaration digests into generated manifests/provenance;
reject stale/missing/tombstoned receipts and mismatched source closure;
no direct generation from only TypeSpec or only JSON Schema;
generated artifacts remain read-only downstream evidence;
regeneration is deterministic and clean-tree checked;
package/release workflows reject generated output without matching admission evidence.

Linear parent: DEN-3600. Related: DEN-3828, DEN-3959.

Navigation Menu