fix(contract): pair composed wave descriptions with measured ceiling

Correct the mistaken pass claim in a53b58b058: the exact provider-free wave receipt failed four stale full-catalog ceilings. Measured Act/Operate full is 85359 bytes / 21340 estimated tokens (+644 B / +161). Merged documentation adds 714 B; the common full-surface factual rewrites trim 70 B (Plan full 54336 -> 54266). Raise only those four fields; other numeric ceilings and all identities pass. The same saved receipt now passes the checker. No second compile or full suite rerun needed for data-only correction.

Evidence: 4/4 exact runtime metric probes; 25/25 budget checker/measurement unit tests. Unchanged JS gate inputs: npm test 1285 passed, 0 failed, 7 skipped; check:web passed. Actual macOS receipt is in CW/artifacts/codex-engine-takeover-20261005/wave-runtime-contract.json. Linux final-head check remains required.

Signed-off-by: CodeWhale Bot <[email protected]>

scripts/runtime-contract-budget.json

@@ -1,6 +1,7 @@
 {
   "_codex_0101_remeasure": "2026-10-01: lock the composed candidate measurement after the audited composition-required schema repair (46835a2fc, D04-11) and shared finance-timeout documentation (7c36620d4, D03-m3). Their parent-surface causal controls are recorded in 6655b191e. Act/Operate full catalog measured 84151 bytes / 21038 estimated tokens versus stale 83988 / 20997; no tools or surface identities changed. Plan/active surfaces and other budgets use their measured values. Estimate only, not provider usage. Receipt: CW/artifacts/codex-0101-takeover-20260930/root-runtime-contract-receipt.json.",
   "_codex_20261005_main_remeasure": "2026-10-05: pair already-merged tool description disclosures with exact hosted Linux measurement on main 3684e2a776fd6ef4f07e8d75e8429d4bed52858b, CI 37359068458 Lint job 111929025135. Only Act/Operate full catalog ceilings failed: 84865 bytes / 21217 estimated tokens versus 84151 / 21038 (+714 B / +179). Accept only that measured increase; tool identities, active/Plan surfaces, prompt and other ceilings unchanged. Estimate only, not provider usage. Wave composition has its own measurement.",
+  "_codex_20261005_wave_remeasure": "2026-10-05: exact provider-free measurement of wave 7903b9645: Act/Operate full 85359 B / 21340 estimated tokens, +644 B / +161 over stale 84715 / 21179. The merged tool-documentation disclosures add 714 B (hosted main measurement); factual description rewrites reduce the common full surface by 70 B (Plan 54336 -> 54266), yielding +644. Only these four numeric ceilings increase. All identity checks and other existing ceilings pass. Receipt CW/artifacts/codex-engine-takeover-20261005/wave-runtime-contract.json. Correction: a53b58b058 incorrectly said this budget check passed; it failed on exactly these four fields. No hosted/native qualification or provider usage implied.",
   "_comment": "One-way numeric ceilings and exact structural identities for the provider-free runtime contract. Decreases pass; increases or identity changes fail. Lock in decreases with: python3 scripts/check-runtime-contract-budget.py --update The v0.9.8 child-receipt restore grew every production tool surface by 1496 schema bytes / 374 estimated tokens (agent tool). The v0.9.8 workshop read/tool-result byte fields then grew every production tool surface by 371 schema bytes / 93 estimated tokens. Both raises are explicit maintainer decisions; identities stay on the pre-raise digests only if the name set is unchanged \u2014 re-measure on Linux CI if Lint reports identity drift. The v0.9.8 pinned session prefix added the <context_update> sentence to the base prompt (5848 -> 6084 bytes, every representative stage re-hashed), and the host-side Workflow/Goal verbs plus honest child posture grew the tool catalog (active 16531 -> 16602 bytes, full 71473 -> 72371); both are explicit v0.9.8 maintainer decisions measured from the release train. The v0.9.9 configured-skills change hides only custom configured-root paths, preserves discoverable default-root paths, normalizes Windows prompt separators, and trims 50 redundant skills-prompt bytes. The skill/memory/goal/handoff identities were re-measured without raising any ceiling. Explicit maintainer decision for #5473/#5492. The v0.9.10 full surfaces intentionally add the safe read_media tool; their measured schemas remain below the prior byte/token ceilings. Representative prompt byte metrics now use the same host-independent normalized text as their identities; the normalized base is 6089 bytes. The v0.9.11 model-visible sub-agent surface intentionally retires six legacy agents/* tools in favor of the canonical agent tool; all affected schema and prompt metrics decrease. The v0.9.12 plugin prompt-match slice intentionally adds the request_plugin_install tool to the full tool surfaces (plan full: +518 schema bytes / +130 estimated tokens / 29 -> 30 tools) so a strong prompt match can surface the human review CTA; explicit maintainer decision for #5663/#5579. The v0.9.13 profile pins a non-executed bare bash shell so interpreter guidance is reproducible across hosts. The duplicate tts catalog entry is intentionally hidden; speech remains canonical and the alias remains available for saved-transcript dispatch. Explicit v0.9.13 maintainer decision (2026-09-08): after removing 1426 repeated guidance bytes and pinning the bash-v2 fixture, accept only the measured tool byte/token ceilings from all-features macOS source e27735bb63c897f88061c71567701fd971f5d396, verified libtest SHA-256 5e8cbe213f32c4ecdec63494c4de5e31857b4a40134edf7b21a55bca926b1b38: active 13274/3319 in every mode, Plan full 39885/9972, Act/Operate full 67603/16901, with no margin. Against the prior budget, active +390 bytes is agent -41 plus retained bash command syntax +431. Plan full also retains Git commit_plan +253, update_goal progress +583, github bounded local-report guidance +127, review complete-input refusal +35, and send_later dispatching status +14. Act/Operate full instead has github +2151 and additionally speech +230, hidden tts -2120, and tasks/automation exact model-route fields +274 each. The older budget predates v0.9.12: that tag had already removed 361 agent bytes and added the two 274-byte route fields; the retained initial increase versus the tag is 751 source-attributed bytes (agent +320, bash +431), not the +390 budget delta. Only the seven active definitions form the initial request; full catalogs include deferred tools. Estimated tokens use the existing bytes/4 heuristic, not provider usage or billing. Prompt, representative-context, skill-discovery and tool-name identities/ceilings are unchanged. Explicit v0.9.13 maintainer decision (2026-09-09): source ccc5dadfa2279545bf084d37cff3617e41ceaae2 intentionally exposes create_goal, get_goal and update_goal before continuation, so all three initial surfaces now contain ten tools. Measure exact source 4648d148eea64782be857eda6952af2c539cbfcc with the hosted macOS all-features libtest SHA-256 4485c88c7a8b66b8bb9a135807321e417a1e266457ecb74cffc7dfb92f850fc4: four exact provider-free metric tests pass. Active schemas are exactly 17847 bytes / 4462 estimated tokens (+4573 / +1143 for the three eager goal definitions); Plan full is 40597 / 10150 and Act/Operate full is 68315 / 17079, with no margin. The +712 full-catalog bytes are request_user_input guidance +358, update_goal state-change guidance +98, list_dir home-relative path guidance +56, explicit review max_passes schema +197, and three defer_loading true-to-false values +3. The three active name sets/digests, their counts, and measured active/full byte/token ceilings change; full name identities and all prompt, representative-context and skill-discovery measurements remain unchanged. This updates the earlier seven-tool initial-request receipt; bytes/4 remains an estimate, not measLine truncated
   "document_kind": "codewhale.runtime_contract_budget",
   "representative_context": {
@@ -109,9 +110,9 @@
           "tools": 13
         },
         "full": {
-          "bytes": 84715,
+          "bytes": 85359,
           "identity_sha256": "45e989bbe5ac0bb1f2d9084361c021009f30a06539f132ebd4fd2331a1bb1954",
-          "tokens_est": 21179,
+          "tokens_est": 21340,
           "tool_names": [
             "Git",
             "Run",
@@ -193,9 +194,9 @@
           "tools": 13
         },
         "full": {
-          "bytes": 84715,
+          "bytes": 85359,
           "identity_sha256": "45e989bbe5ac0bb1f2d9084361c021009f30a06539f132ebd4fd2331a1bb1954",
-          "tokens_est": 21179,
+          "tokens_est": 21340,
           "tool_names": [
             "Git",
             "Run",