crm-cleanup 0.2.1: execute decided updates through a sealed CRM transport

[antheducation]

crm-cleanup 0.2.1: the cleanup executes its writes

The 0.1.0 package reconciles a transcript against pasted records and returns a proposal object with write_performed: false; nothing downstream consumes it, so the CRM never changes. This PR evolves the skill so the run itself completes the loop: read the current records from a real source, decide deterministically, and execute the decided updates through a transport that seals before/after evidence bound to the decision digests.

What changed

• fetch-source reads the source handle's https URL through native web.fetch under a caller-supplied host allowlist; pasted record payloads are no longer accepted as a source.
• normalize-records validates the fetch (status, truncation, allowlist decision) and seals the working record set with its origin (kind, ref, count).
• decide enforces the reconciliation draft deterministically: target record must exist in the set that was read, the field must be inside crm_schema.allowed_fields, the evidence quote must appear verbatim in the transcript, and the value must be non-empty. Any unsupported proposal refuses the whole write set.
• execute-writes always runs. On an apply decision it drift-checks every from value against the records that were read, applies the updates, and seals {executed: true, write_ref, applied, before, after} bound to the transcript and records digests. On no-op or refusal it seals {executed: false} so the absence of a write is itself evidence.
• finalize asserts the transport result matches the decision before sealing runx.crm_cleanup_result.v1.

Evidence

• Local package harness: 5 cases passed (applies-traced-updates, noop-executes-nothing, rejects-unlisted-field, refuses-invented-quote, needs-transcript).
• Published listing: https://runx.ai/x/antheducation/crm-cleanup (community tier, URL-as-publish from https://github.com/antheducation/crm-cleanup-skill).
• Sealed live dogfood on the installed package: run run_reconcile_293cc47646262c74, root receipt sha256:f35d7d879696d86552ce85d9ca8de5356a0b27889d4f1b48aa5fa32e71e7cae5, receipt tree of 9 verified valid. The run fetched https://raw.githubusercontent.com/antheducation/runx/crm-cleanup-executed-writes/harness-data/crm-records-globex.json live, applied two allowlisted, quote-traced updates, and sealed the before/after write result.

Harness fixtures fetch pinned JSON files from this branch's harness-data/ directory; each case also declares caller.http_responses with identical bytes so harness runners without egress replay the same read deterministically.

🤖 Generated with Claude Code

https://claude.ai/code/session_01WYXNBgyhBMg6rASyd4nwhN