Fix dependency blocker routing after Luna pause

[GhostXia]

Fixes #44.

What changed

• Defines dependency preparation as a Luna-only action when explicitly declared by the DISPATCH.
• Routes undeclared, missing, or out-of-contract dependency blockers through ESCALATE / technical_resolution to Terra.
• Defines parent:pause as a zero-execution state: the parent cannot install tools, mutate the environment, clear the latch, or resume Luna itself.
• Keeps Terra read-only and routes contract-changing dependency decisions back to Sol.
• Adds validator anchors and mutation tests across all Skill variants and the three role profiles.

Root cause

The routing table sent BLOCKED / none to parent:pause, but the surrounding dependency language did not explicitly prevent a parent from interpreting the blocker, running commands such as npm ci, and resuming Luna. The authority boundary was therefore documented but insufficiently enforced.

Validation

• python -m unittest tests.test_validate_repo -v — 25 passed
• python -m unittest discover -s tests -v — 69 passed, 1 skipped
• python scripts/validate_repo.py — passed
• Scope check — passed, 10 tracked files, no untracked or ignored artifacts
• Independent Terra full causal audit — passed

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1649f68e-ad8b-4aa5-9b75-dcbb881ed62c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[GhostXia]

Final audit is currently blocked by an external runtime prerequisite.

Commit b724746 passes repository validation and 72 unit tests, but the real Luna invocation produced no authoritative runtime-guard event, and this harness exposes no exact call/time/token/product telemetry. I have not synthesized an event or launched Terra without the declared prerequisites.

Sol's read-only review also identified known draft defects: attempt 1 is not registered atomically at start, missing product fields can count as zero product, uncaptured telemetry is confused with no execution, audit matching is incomplete, and new clean commit SHAs are rejected.

Full details and the required host lifecycle hook are recorded in #44. This PR should remain draft and must not be treated as audited or ready to merge.