refactor(layering): fold the four cutover policies into one parametrized gate

ADR 0019 §8: the per-command cutover gates consolidate into one parametrized
runtime-command-cutover gate driven by a table of migrated commands. Adding a
migrated command adds a row; the mechanism carries one planted-red proof instead
of one per command.

Part of #1739 (wave 0)

Author: thymikee

scripts/layering/check.ts

@@ -33,10 +33,10 @@
 //     owner" shape as R7's SessionState ownership, applied to bin.ts's `--help` fast path.
 //   - Over PLATFORM PACKAGE COMPOSITION: six private metadata façades meet at the exact root
 //     composition file; premature implementation loading and forbidden cross-boundary edges fail (R13).
-//   - Over the DEVICES COMMAND CUTOVER: the handler calls the neutral inventory gateway and no
-//     superseded inventory module, import, or identifier remains in production (R13).
-//   - Over COMMAND-ATOMIC RUNTIME CUTOVERS: retired logs, network, and record routes/admission cannot
-//     coexist with their operation-fact-derived descriptor and handler paths (R14-R16).
+//   - Over COMMAND-ATOMIC RUNTIME CUTOVERS: one parametrized gate reads the migrated-command
+//     table (devices R17, logs R14, network R15, record R16) and proves each command keeps
+//     exactly one platform-execution path — retired routes, admission, modules, and widened
+//     runtime access cannot coexist with its operation-fact-derived descriptor and handler.
 // Only `(root)` is unranked among src/ zones (see `UNRANKED_ZONES` in model.ts):
 // it holds entrypoints and composition roots. Extracted workspace package zones
 // are classified separately and held behind R11 instead of the src folder spine.
@@ -87,33 +87,16 @@ import {
   platformPackagePolicySummary,
 } from './platform-package-policy.ts';
 import {
-  checkDeviceInventoryCutover,
-  deviceInventoryCutoverSummary,
-} from './device-inventory-cutover-policy.ts';
+  checkRuntimeCommandCutover,
+  runtimeCommandCutoverSummary,
+} from './runtime-command-cutover-policy.ts';
 import {
   listUntrackedProductionTypeScriptFiles,
   readTrackedPlatformPackageDeclarations,
 } from './platform-package-repository.ts';
 import { policyLead, policyViolation, ZONE_POLICIES } from './zone-policy.ts';
-import {
-  logsLegacyRouteViolations,
-  logsRuntimeNarrowingViolations,
-  logsSessionStateOwnershipViolations,
-  sourceExecutedUsingDeclarationViolations,
-} from './logs-runtime-cutover-policy.ts';
 import { contractsImplementationAuthorityViolations } from './contracts-implementation-policy.ts';
 import { selectorPipelineOwnershipViolations } from './selector-pipeline-ownership.ts';
-import {
-  networkLegacyRouteViolations,
-  networkRuntimeNarrowingViolations,
-  networkRuntimeRouteViolations,
-} from './network-runtime-cutover-policy.ts';
-import {
-  recordLegacyRouteViolations,
-  recordRuntimeNarrowingViolations,
-  recordRuntimeRouteViolations,
-} from './record-runtime-cutover-policy.ts';
-import { recordRuntimeDaemonMechanicsViolations } from './record-runtime-mechanics-policy.ts';
 import { recordRuntimeRegistryJoinViolations } from './record-runtime-registry-policy.ts';
 
 const repoRoot = execFileSync('git', ['rev-parse', '--show-toplevel'], {
@@ -192,16 +175,6 @@ function checkCycles(edges: readonly ResolvedImportEdge[]): LayeringViolation[]
   }));
 }
 
-function checkLogsRuntimeCutover(sources: ReadonlyMap<string, string>): LayeringViolation[] {
-  const production = [...sources].map(([file, source]) => ({ path: file, source }));
-  return [
-    ...logsLegacyRouteViolations(production),
-    ...logsRuntimeNarrowingViolations(production),
-    ...logsSessionStateOwnershipViolations(production),
-    ...sourceExecutedUsingDeclarationViolations(production),
-  ];
-}
-
 function checkContractsImplementationAuthority(
   sources: ReadonlyMap<string, string>,
 ): LayeringViolation[] {
@@ -210,32 +183,14 @@ function checkContractsImplementationAuthority(
   );
 }
 
-function checkNetworkRuntimeCutover(sources: ReadonlyMap<string, string>): LayeringViolation[] {
-  const production = [...sources].map(([file, source]) => ({ path: file, source }));
-  return [
-    ...networkLegacyRouteViolations(production),
-    ...networkRuntimeNarrowingViolations(production),
-    ...networkRuntimeRouteViolations(production),
-  ].map((violation) => {
-    const separator = violation.indexOf(': ');
-    return {
-      rule: 'R15 network-runtime-cutover',
-      file: separator < 0 ? '(network runtime)' : violation.slice(0, separator),
-      line: 1,
-      message: separator < 0 ? violation : violation.slice(separator + 2),
-    };
-  });
-}
-
-function checkRecordRuntimeCutover(sources: ReadonlyMap<string, string>): LayeringViolation[] {
+/**
+ * The record registry-join scan is a descriptor-shape check, not a cutover claim, so it
+ * stays its own module. Record's daemon-mechanics scan is the row's lifecycle proof and
+ * runs from the cutover table. Both report under R16.
+ */
+function checkRecordRuntimeRegistryJoin(sources: ReadonlyMap<string, string>): LayeringViolation[] {
   const production = [...sources].map(([file, source]) => ({ path: file, source }));
-  return [
-    ...recordLegacyRouteViolations(production),
-    ...recordRuntimeDaemonMechanicsViolations(production),
-    ...recordRuntimeNarrowingViolations(production),
-    ...recordRuntimeRegistryJoinViolations(production),
-    ...recordRuntimeRouteViolations(production),
-  ].map((violation) => {
+  return recordRuntimeRegistryJoinViolations(production).map((violation) => {
     const separator = violation.indexOf(': ');
     return {
       rule: 'R16 record-runtime-cutover',
@@ -619,7 +574,7 @@ function report(
         `inside its declared owner (R7); every zero-dep CI job resolves without ` +
         `node_modules (R8); ${typeCycleNote(typeCycle)}; ${daemonModularitySummary()}; ` +
         `${packageBoundariesSummary(repoRoot)}; ${platformPackagePolicySummary()}; ` +
-        `${deviceInventoryCutoverSummary()}; and bin.ts imports normalizeCliCommandAlias, ` +
+        `${runtimeCommandCutoverSummary()}; and bin.ts imports normalizeCliCommandAlias, ` +
         `actually passes it into buildCommandUsageText, and holds no local alias literals ` +
         `(R12).\n`,
     );
@@ -669,11 +624,10 @@ export type LayeringRule = (context: LayeringContext) => LayeringViolation[];
 export const LAYERING_RULE_IDS = [
   'zone-policies',
   'value-import-cycles',
-  'logs-runtime-cutover',
+  'runtime-command-cutover',
+  'record-runtime-registry-join',
   'contracts-implementation-authority',
   'selector-pipeline-ownership',
-  'network-runtime-cutover',
-  'record-runtime-cutover',
   'back-edges',
   'type-spine-inversions',
   'session-state-ownership',
@@ -682,21 +636,19 @@ export const LAYERING_RULE_IDS = [
   'bin-alias-fast-path',
   'package-boundaries',
   'platform-package-policy',
-  'device-inventory-cutover',
 ] as const;
 
 export type LayeringRuleId = (typeof LAYERING_RULE_IDS)[number];
 
 export const LAYERING_RULES: Readonly<Record<LayeringRuleId, LayeringRule>> = {
   'zone-policies': (context) => checkLayeringRules(context.edges),
   'value-import-cycles': (context) => checkCycles(context.edges),
-  'logs-runtime-cutover': (context) => checkLogsRuntimeCutover(context.sources),
+  'runtime-command-cutover': (context) => checkRuntimeCommandCutover(context.sources),
+  'record-runtime-registry-join': (context) => checkRecordRuntimeRegistryJoin(context.sources),
   'contracts-implementation-authority': (context) =>
     checkContractsImplementationAuthority(context.sources),
   'selector-pipeline-ownership': (context) =>
     selectorPipelineOwnershipViolations(context.edges, workspaceSpecifierTargets(repoRoot)),
-  'network-runtime-cutover': (context) => checkNetworkRuntimeCutover(context.sources),
-  'record-runtime-cutover': (context) => checkRecordRuntimeCutover(context.sources),
   'back-edges': (context) => checkBackEdges(context.edges),
   'type-spine-inversions': (context) => checkTypeInversions(context.edges),
   'session-state-ownership': (context) => checkSessionStateOwnership(context.sources),
@@ -715,7 +667,6 @@ export const LAYERING_RULES: Readonly<Record<LayeringRuleId, LayeringRule>> = {
       readTrackedPlatformPackageDeclarations(repoRoot),
       { untrackedProductionFiles: listUntrackedProductionTypeScriptFiles(repoRoot) },
     ),
-  'device-inventory-cutover': (context) => checkDeviceInventoryCutover(context.sources),
 };
 
 export function main(): number {

…ts/layering/record-runtime-policy-ast.ts scripts/layering/cutover-policy-ast.tsscripts/layering/record-runtime-policy-ast.ts renamed to scripts/layering/cutover-policy-ast.ts scripts/layering/record-runtime-policy-ast.ts renamed to scripts/layering/cutover-policy-ast.ts

@@ -1,4 +1,5 @@
-export type RecordRuntimeProductionSource = Readonly<{ path: string; source: string }>;
+/** A production file the cutover policies scan: repo-relative path plus its source. */
+export type ProductionSource = Readonly<{ path: string; source: string }>;
 
 export function memberName(node: Record<string, unknown>): string | undefined {
   const property = node.property as Record<string, unknown> | undefined;