feat(harness): nsp memory save-one core — targeted upsert via writer key (D11)

The D11 deviation is a single-row pgvector upsert, not a full vectorstore resync.
Ports memory.py + session/{store,artifacts} + textutil (deps of memory), renamed
psdwp3->nsp. Decision import paths rewired from nsp.session.decisions to nsp.decisions
(our A4 port lives at the top level). session/models.py left UNCHANGED to preserve
the Phase-A ThothII additions (D12/D15 author/summary, D14a grounded_values,
D14b concept_formulas).

New in memory.py:
- memory_vector_record_for_decision(records, decision_seq): the single VectorRecord
  for a chosen decision (reuses memory_vector_records, filtered to one).
- save_one_memory(records, decision_seq, writer, embedder): embeds one record and
  calls writer.upsert_records('memory', [row]) -- NEVER writer.sync (that's the
  full-resync, server-side-only path). Returns the upsert count.

L1: test_memory_save_one (5 tests) pins the contract -- single row, one upsert
call, sync never called, None/0 for unknown seq.

Deferred: the full nsp memory save-one CLI command (config/session loading + the
workstation write-guard) lands when memory_cmd.py is ported alongside the other
CLI commands. The pure D11 core is what L1 can honestly cover here.

harness/nsp/session/artifacts.py

@@ -0,0 +1,39 @@
+from pathlib import Path
+
+from nsp.decisions import DecisionRecord
+from nsp.session.models import SchemaLinking
+
+
+def _find_evidence_file(evidence_root: Path, evidence_id: str) -> str:
+    for match in evidence_root.rglob(f"{evidence_id}.md"):
+        return str(match)
+    return ""
+
+
+def build_evidence_entries(
+    decisions: list[DecisionRecord],
+    linking: SchemaLinking,
+    evidence_root: Path,
+) -> list[dict]:
+    """Elenco {id, file, esito, decision_seq}: evidence citate nello schema linking
+    (esito 'usata') e decisioni esplicite del reviewer (accettata/scartata, che
+    prevalgono sul linking)."""
+    entries: dict[str, dict] = {}
+    for candidate in linking.candidates:
+        for evidence_id in candidate.evidence:
+            entries.setdefault(evidence_id, {
+                "id": evidence_id,
+                "file": _find_evidence_file(evidence_root, evidence_id),
+                "esito": "usata",
+                "decision_seq": candidate.decision_seq,
+            })
+    for d in decisions:
+        if d.type not in ("evidence_accepted", "evidence_rejected"):
+            continue
+        entries[d.subject] = {
+            "id": d.subject,
+            "file": _find_evidence_file(evidence_root, d.subject),
+            "esito": "accettata" if d.type == "evidence_accepted" else "scartata",
+            "decision_seq": d.seq,
+        }
+    return list(entries.values())

harness/nsp/session/store.py

@@ -0,0 +1,84 @@
+from datetime import UTC, datetime
+from pathlib import Path
+
+from nsp.config import DatabaseConfig
+from nsp.session.models import SessionManifest
+from nsp.textutil import slugify
+
+MANIFEST = "session_manifest.yaml"
+MAX_SLUG_CHARS = 40
+
+
+class SessionError(Exception):
+    pass
+
+
+def render_question_md(question: str, assumptions: list[str] | None = None) -> str:
+    """Rende question.md in modo deterministico: domanda + assunzioni opzionali.
+
+    Unica fonte di formattazione per question.md (riusata da create_session e
+    set_question), così il gate non deve costruire markdown a mano.
+    """
+    body = f"# Domanda\n\n{question.strip()}\n"
+    items = [a.strip() for a in (assumptions or []) if a.strip()]
+    if items:
+        body += "\n## Assunzioni\n\n" + "".join(f"- {a}\n" for a in items)
+    return body
+
+
+def _new_id(question: str, sessions_root: Path, stamp: str) -> str:
+    base = f"{stamp}-{slugify(question)[:MAX_SLUG_CHARS].rstrip('-')}"
+    candidate, n = base, 1
+    while (sessions_root / candidate).exists():
+        n += 1
+        candidate = f"{base}-{n}"
+    return candidate
+
+
+def create_session(
+    question: str, db: DatabaseConfig, sessions_root: Path
+) -> SessionManifest:
+    now = datetime.now(UTC)
+    # stamp con ora/min/sec: identifica univocamente sessioni dello stesso giorno
+    # sulla stessa domanda. Il contatore -n resta come rete per collisioni nello
+    # stesso secondo.
+    session_id = _new_id(question, sessions_root, now.strftime("%Y-%m-%d-%H%M%S"))
+    manifest = SessionManifest(
+        id=session_id, created_at=now, question=question,
+        database=db.database, schema=db.db_schema,
+    )
+    session_dir = sessions_root / session_id
+    manifest.to_yaml(session_dir / MANIFEST)
+    (session_dir / "question.md").write_text(render_question_md(question))
+    return manifest
+
+
+def set_question(
+    session_id: str,
+    question: str,
+    assumptions: list[str],
+    sessions_root: Path,
+) -> Path:
+    """Riscrive question.md (Fase 3) in modo deterministico, senza edit tool.
+
+    Valida l'esistenza della sessione (SessionError se assente) e ritorna il
+    path scritto. Non tocca il manifest né le decisioni.
+    """
+    load_session(session_id, sessions_root)
+    path = sessions_root / session_id / "question.md"
+    path.write_text(render_question_md(question, assumptions))
+    return path
+
+
+def load_session(session_id: str, sessions_root: Path) -> SessionManifest:
+    path = sessions_root / session_id / MANIFEST
+    if not path.exists():
+        raise SessionError(f"Sessione non trovata: {session_id} (atteso {path})")
+    return SessionManifest.from_yaml(path)
+
+
+def close_session(session_id: str, sessions_root: Path) -> SessionManifest:
+    manifest = load_session(session_id, sessions_root)
+    manifest.status = "closed"
+    manifest.to_yaml(sessions_root / session_id / MANIFEST)
+    return manifest