feat: expose repository navigation queries

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0230c-b06c-7641-808a-e191b6d1da49

workplans/HUB-WP-0006-repository-classification-navigation.md

@@ -99,7 +99,7 @@ full rebuild, upsert, and deletion.
 
 ```task
 id: HUB-WP-0006-T04
-status: todo
+status: done
 priority: high
 state_hub_task_id: "a1d85610-c3ea-4718-b394-ba4abcecf177"
 ```
@@ -109,6 +109,16 @@ domain, category, capability tag, business stake, and business mechanic.
 Responses carry source revision and rebuild provenance. No endpoint writes
 classification authority.
 
+Completed 2026-08-22. The read-only projection port now supports cross-facet
+HTTP queries plus direct facet resolution for primary/secondary domain,
+category, capability tag, business stake, and business mechanic. Filters OR
+within a family and AND across families; snapshot/filter-bound cursors reject
+reuse after rebuild with 409. Responses validate against the frozen output
+schema and carry source revision, observed provenance, rebuild time, status,
+and content hash. MCP tools `query_repository_navigation` and
+`get_repository_navigation_facet` expose the same navigation fields. Runtime
+OpenAPI inspection confirms that every navigation operation is GET-only.
+
 ## Prove conformance and failure behavior
 
 ```task
@@ -142,5 +152,5 @@ expiry. Wait on T02-T05 and the State Hub cutover window.
 - [x] Repo Manager v1.0 authority and projection contract accepted
 - [x] Hub-side projection and compatibility alias contract versioned
 - [ ] Rebuildable durable ingestion passes provenance and failure checks
-- [ ] HTTP/MCP navigation reads only the derived projection
+- [x] HTTP/MCP navigation reads only the derived projection
 - [ ] A5/A4 consumer comparison and rollback evidence recorded