v9 roadmap completion: 48/53 items

[toasterbook88]

This PR completes 48 of 53 items from the AXIS v9 authority-first governance roadmap, plus benchmark evidence that blocks the remaining 5 Phase G performance items.

What is included

Production Hardening (B)

• Remove 6 fmt.Printf DEBUG leaks from execution path (internal/execution/guarded.go)
• Add ClusterState.Version with version-gated migrations (tombstones->failures, heartbeat normalization)
• Add minimal RepairEvent types in internal/repairs/types.go

Surface Clarity (C)

• docs/lifecycle.md -- 6-state taxonomy (stable/experimental/scaffolded/dormant/deprecated/internal-only) with inheritance rules
• Label all 34 internal packages with lifecycle state via doc.go
• Restructure README into stable vs. experimental sections
• Fix 6 stale docs (phase-tracking, current-state, architecture, hybrid-ai-router-plan, distributed-cognitive-architecture)
• hack/lifecycle-check.go -- CI enforcement for stable->stable import closure

Reservation CLI (D)

• axis reservations list [--json|--ndjson] -- table or streaming output
• axis reservations inspect [--json] -- full metadata
• axis reservations release [--force] [--json] -- safe deletion with confirmation
• 12 tests in cmd/axis/reservations_test.go
• docs/reservations.md -- operator-facing semantics

Coverage + Benchmarks (E)

• cmd/axis/exit_test.go -- 100% coverage
• internal/versioncmp/versioncmp_test.go -- 100% coverage
• cmd/axis/summary_test.go -- dashboard contract tests, 0%->90%
• internal/mcp/server_tools_test.go -- MCP coverage 43.4%->88.7%
• internal/execution/guarded_test.go -- error branch coverage 60.2%->79.8%
• internal/facts/collectors_test.go + parsers_test.go -- edge cases
• 8 placement benchmarks + 4 snapshot benchmarks
• internal/transport/ssh_bench_test.go -- SSH reuse benchmark

Profiling (F)

• axis serve --pprof / axis daemon --pprof -- runtime profiling endpoints
• benchmarks/ -- baseline profiles (placement, snapshot, build)
• docs/profiling.md -- operator profiling workflow

Structural Cleanup (H)

• Mesh disable flag via discovery.enabled config (backward-compatible: default ON)
• Delete dead Fatal() from cmd/axis/exit.go
• Deduplicate dashboard UI constants into internal/ui/color.go
• Compile-gate internal/safety/ with !safety_scaffolded build tag + no-op stubs

Authority Audit Docs (A)

10 governance documents establishing canonical ownership, mutation boundaries, and violation detection:

• docs/authority-reservation.md
• docs/authority-identity.md
• docs/authority-freshness.md
• docs/authority-observations.md
• docs/authority-execution.md
• docs/authority-config.md
• docs/authority-secrets.md
• docs/authority-cache.md
• docs/authority-observability.md
• docs/authority-violations.md
• docs/authority-transition.md (6-phase transition protocol)

Future Design Docs

• docs/future/reservation-doctor.md
• docs/future/consistency-model.md

Metrics

Metric	Before	After
Total coverage	70.4%	74.1%
MCP coverage	43.4%	88.7%
Dashboard coverage	0%	90%
Execution coverage	60.2%	79.8%
Benchmarks	0	10
Authority docs	0	13
Lifecycle labels	0	34 packages + 33 commands/routes

Phase G -- Performance (BLOCKED)

5 items remain blocked per roadmap discipline (evidence before optimization):

Item	Status	Rationale
G-2 SSH cross-cycle reuse	BLOCKED	Benchmark shows AXIS already reuses connections within Collect(). Cross-cycle pooling adds complexity for marginal gain without production profile evidence.
G-4 Context caching	BLOCKED	Speculative without profile evidence
G-5 Double-buffer snapshot	BLOCKED	High danger; requires immutable snapshot prerequisite
G-6 sync.Pool JSON buffers	BLOCKED	Speculative without heap profile evidence
G-8 Struct field ordering	BLOCKED	Micro-optimization without allocation proof

Verification

All changes pass:

• make build
• make test (all 34 packages)
• make test-race
• make lint
• make coverage (gates: knowledge 90.9%, api 80.2%, mcp 88.7%, ui 94.0%)
• go run hack/lifecycle-check.go

[gemini-code-assist]

Code Review

This pull request introduces significant structural and functional improvements to the AXIS CLI and daemon. Key changes include the addition of a reservation ledger and associated CLI commands (reservations list, inspect, release), the addition of an --pprof flag for daemon profiling, and the implementation of structured safety evaluation scaffolding. The pull request also formalizes package lifecycle states (stable, experimental, scaffolded, etc.) and introduces a lifecycle-check tool to enforce dependency constraints. My feedback highlights that the Load() function in internal/state/state.go now performs maintenance tasks (pruning and reclaiming stale state) and saves the state file if changes are made, which makes Load() non-idempotent and potentially slow for CLI commands; I recommend moving this maintenance to an explicit Maintain() function called only by the daemon or a dedicated maintenance task.