[GP2-S4] Projection Authority Negative Cases

[flyingrobots]

Roadmap slice: GP2-S4
Goalpost: Goalpost 2: WAL Evidence Projection
Parent: #521
Related: #522

Source: docs/design/wal-wsc-durability-roadmap.md on branch cycle/521-wal-wsc-storage-relationship at bde7957c.

Scope

Parent issues:
#521,
#525.

Scope:

• Prove graph-projected WAL facts cannot append records, validate recovery, or
  bypass current revocation/storage checks.

Acceptance:

• There is no public path from projected facts to WalStorePort::append_frame,
  flush_commit, truncate_tail_after, or publish_manifest.
• Importing projected facts without WAL bytes/manifests produces observation
  evidence only, not recovered causal authority.

Witness:

cargo test -p warp-core wal_projection_cannot_bootstrap_recovery

Dedupe note

This is the PR-sized implementation slice for the roadmap item above. Existing umbrella or adjacent issues remain linked as Parent/Related rather than duplicated here.

[coderabbitai]

🔗 Related PRs

#298 - feat(warp-core): TTD domain logic — provenance storage + causal cone walk [merged]
#345 - feat(core): publish capability grant validation obstruction facts [merged]
#379 - feat(core): commit runtime WAL ACK evidence [merged]
#550 - Expose braid membership history [merged]
#551 - Finish braid historical membership and replay goalpost [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!