fix(harness): remediation difetti review — gate↔CLI, D15, D7/D6, D14, robustezza

Implementazione del piano di remediation progressiva sui difetti emersi
dall'analisi dell'harness. Tutto verificato: 214 test Python (incl. L0 su
Postgres reale), 14 test JS del gate, ruff pulito.

Blocco 1 (CRITICA, integrazione gate↔CLI):
- phase advance: gate usa --auto + exit 6; reviewer_confirm kind:phase fa
  advance esplicito che applica i prerequisiti (prima non avanzava per le
  fasi a conferma umana).
- cte plan riceve i --name dal gate (param names); set-question con id
  posizionale; skill `tht search find`; nuovo comando `tht memory save-one`
  con dedup hash client-side in save_one_memory.

Blocco 2 (D15, stato post-rollback):
- campo `phase` su DecisionRecord + effective_decisions phase-aware per i
  subject "a nome" (cte_approved ecc.); _compute_promotions e finalize sulla
  vista effective; finalize confronta col piano CTE effettivo, non glob;
  `decision add --retracts` + comando `decision retract`.

Blocco 3 (D7 read-only + D6 manifest):
- assert_read_only su tutti e quattro i codepath (direct + REST);
- manifest author/summary/updated_at/updated_by/schema_version popolati +
  helper touch_manifest sulle mutazioni.

Blocco 4-5 (D14a/D14b):
- decision_min_phase data-driven via `emits:` in workflow.yaml;
- formula evidence: status auto, search_formulas, gruppo CLI `tht formula`,
  `search find --kind formula`, load_evidence_dir salta i .sql.md.

Blocco 6 (robustezza):
- taskdoc slice promoted_tables + bound enforced; report escaping/bound +
  rsplit note; filtro kind reader REST/direct; conteggio upserted robusto;
  guard REST run_query non-list; LSH disallineato -> LshIndexError.

Blocco 7 (pulizia):
- dead code gate e KIND_TO_TABLE morto rimossi; doc Postgres-only
  (README + connection.py).

Blocco 0 (parziale): test di compatibilità firma gate↔CLI
(tests/integration). Rinviati: fake-Pi runtime completo, artifact-gate da
disco (#23), parità eligibility REST/direct (#28), unificazione
reserved-labels (#30), memory_rejected da deselezione (#33).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

harness/tht/workflow.py

@@ -25,6 +25,7 @@ class PhaseSpec:
     advance: str
     prerequisites: list[Any]
     artifacts_out: list[str] = field(default_factory=list)
+    emits: list[str] = field(default_factory=list)
 
 
 @dataclass
@@ -46,8 +47,9 @@ class Workflow:
         return "?"
 
     def decision_min_phase(self, decision_type: str) -> int:
-        """A decision type's min phase = the earliest phase whose prerequisites
-        reference it (via decision_exists / decision_subject_exists). Defaults to 1."""
+        """A decision type's min phase = the earliest phase that EMITS it (workflow.yaml
+        `emits`), or that references it in a prerequisite. Defaults to 1 (meta types like
+        phase_approved/decision_retracted are not phase-gated)."""
         return self._decision_min_map.get(decision_type, 1)
 
     def schema_linking_phase(self) -> int:
@@ -91,6 +93,12 @@ def _collect_decision_mins(phases: list[PhaseSpec]) -> dict[str, int]:
 
     for p in phases:
         scan(p.prerequisites, p.num)
+        # `emits`: la fase dichiara i decision type che produce -> fonte primaria del
+        # min phase (copre i tipi non citati nei prerequisites, es. table_promoted,
+        # value_grounded, concept_formula_*). Vince la fase piu' bassa.
+        for dtype in p.emits:
+            if isinstance(dtype, str) and (dtype not in mins or p.num < mins[dtype]):
+                mins[dtype] = p.num
     return mins
 
 
@@ -107,6 +115,7 @@ def load_workflow(path: Path | str = _WF_PATH) -> Workflow:
                 advance=p["advance"],
                 prerequisites=p.get("prerequisites", []),
                 artifacts_out=p.get("artifacts_out", []),
+                emits=p.get("emits", []),
             )
         )
     return Workflow(