feat(audit): publish sequenced heartbeat and reconciliation evidence

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ec5-7e2b-7743-ac08-719e1b0f42e2

specs/audit-emission-cadence.yaml

@@ -0,0 +1,66 @@
+# Source-owned declaration for the qonto-assistant structured audit stream.
+# The semantic shape follows the Taxonomy draft in
+# kings-guard/specs/EmissionCadenceDeclaration.md. This repository owns the
+# concrete emission claim even while the fleet-wide schema remains a draft.
+
+audit_emission_cadence:
+  schema_version: "0.1"
+  source: qonto-assistant
+  stream_id: qonto-assistant.audit
+  transport: structured-stdout
+  instance_boundary: process
+
+  ordering:
+    instance_field: stream_instance_id
+    sequence_field: stream_sequence
+    sequence_starts_at: 1
+    gap: finding
+    reset: permitted-only-when-stream_instance_id-changes
+
+  event_classes:
+    audit.allow:
+      evidence_class: attributive
+      completeness_claimed: false
+    audit.deny:
+      evidence_class: load-bearing
+      form: heartbeat-or-reconciliation
+      rate_monitoring: forbidden
+      completeness_claimed: true
+    audit.heartbeat:
+      evidence_class: load-bearing
+      role: positive-liveness-and-reconciliation-claim
+
+  heartbeat:
+    event_class: audit.heartbeat
+    interval: PT24H
+    interval_config: QONTO_AUDIT_HEARTBEAT_INTERVAL_SECONDS
+    default_interval_seconds: 86400
+    lifecycle:
+      startup: required
+      periodic_while_process_active: required
+      shutdown: best-effort
+    quiet_assertion: nothing-to-report
+    active_instance_missing: finding
+    scale_to_zero_semantics: >
+      No periodic heartbeat is promised while no process instance exists.
+      Observers track each stream_instance_id from its startup heartbeat until
+      a shutdown heartbeat or expiry after a missing active-instance cadence.
+
+  reconciliation:
+    source_counts_field: source_transition_counts
+    window_counts_field: window_transition_counts
+    counted_classes:
+      - audit.allow
+      - audit.deny
+    snapshot_endpoint: /v1/audit/reconciliation
+    compare_observed: >
+      Count received request events by event_class and stream_instance_id, then
+      compare them with the heartbeat source counts and stream sequence.
+    divergence: finding
+    undrained_local: lag-not-divergence
+    persistence: process-local
+
+  event_context:
+    identity_binding_field: identity_binding
+    egress_destination_field: egress_destination
+    qonto_egress_destination: qonto-thirdparty-api