chore(custodian): onboard repo-registry to Custodian State Hub

- Register under capabilities domain (foerster_capabilities renamed)
- Replace prose workplans with ADR-001 format (RREG-WP-0001 done, RREG-WP-0002 active)
- Add AGENTS.md for Codex agent state-hub integration via HTTP API
- Add SCOPE.md with domain context and v0.1 scope boundaries

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

workplans/RREG-WP-0002-production-hardening.md

@@ -0,0 +1,108 @@
+---
+id: RREG-WP-0002
+type: workplan
+title: "Repository Ability Registry — Production Hardening"
+domain: capabilities
+repo: repo-registry
+status: active
+owner: codex
+topic_slug: foerster-capabilities
+created: "2026-04-26"
+updated: "2026-04-26"
+state_hub_workstream_id: "4218d2bb-33e8-4f98-94ba-38b4ac21502d"
+---
+
+# RREG-WP-0002 — Production Hardening
+
+## Goal
+
+Improve trust, search quality, update safety, and operational readiness after MVP
+closure. Core invariant remains: observed facts are deterministic; interpreted claims
+are reviewable; approved registry truth is explicit.
+
+## P0: Update Safety and Change Review
+
+```task
+id: RREG-WP-0002-T01
+status: todo
+priority: high
+state_hub_task_id: "a27142a6-c160-4453-ab59-50a7db92f9c4"
+```
+
+Analysis-run diff model for facts/chunks/candidates/approved entries. API endpoint to
+compare two runs. UI review view for changed/added/removed/weakened claims. Review
+decisions that record change acceptance/rejection. Tests proving approved profiles
+remain stable until changes are approved.
+
+Candidate endpoints:
+- `GET /repos/{id}/analysis-runs/{base}/diff/{target}`
+- `POST /repos/{id}/analysis-runs/{target}/changes/approve`
+
+## P1: Search Quality and Semantic Retrieval
+
+```task
+id: RREG-WP-0002-T02
+status: todo
+priority: medium
+state_hub_task_id: "0e7cce78-13ab-4aa2-8d25-ae50ff8ccd74"
+```
+
+Embedding abstraction for approved entries and content chunks. Local/offline fake
+provider for tests. Optional pgvector path without breaking SQLite dev mode. Hybrid
+ranking combining text match, filters, confidence, and vector score. Existing text
+search behavior must remain stable.
+
+## P1: Discovery UI
+
+```task
+id: RREG-WP-0002-T03
+status: todo
+priority: medium
+state_hub_task_id: "aee945eb-ea25-49f7-b755-4ec451c1d05a"
+```
+
+Repository comparison screen. Capability-gap input and report screen. Export action
+from repository profile. Clear empty states for repos without approved profiles.
+Acceptance: user can compare approved repos, enter desired capabilities, and export
+without raw API calls.
+
+## P1: Fixture Breadth and Regression Confidence
+
+```task
+id: RREG-WP-0002-T04
+status: todo
+priority: medium
+state_hub_task_id: "d1df6453-3bca-4524-85d1-9b3f3f275b45"
+```
+
+E2E tests for: README-only repos, Python CLI repos, JavaScript/TypeScript packages,
+repos with weak or misleading docs, negative cases for unsupported/empty repos.
+Acceptance: conservative candidate extraction when docs are weak; misleading docs
+do not become approved truth without review.
+
+## P2: Operational Readiness
+
+```task
+id: RREG-WP-0002-T05
+status: todo
+priority: low
+state_hub_task_id: "44b10491-f1f2-4e2e-9a8e-e8bd59cbf892"
+```
+
+Structured logging around ingestion, analysis, LLM extraction, and review actions.
+Configuration documentation. Basic health details for DB and checkout root. Backup/
+restore guidance for SQLite deployments. Migration strategy notes for PostgreSQL.
+
+## P2: API Contract Stability
+
+```task
+id: RREG-WP-0002-T06
+status: todo
+priority: low
+state_hub_task_id: "271a4fc4-d966-40ef-bc6f-a5fd1c445a16"
+```
+
+Versioned API path or explicit compatibility policy. Golden OpenAPI snapshot test or
+schema-diff check. More response examples for discovery and change-review endpoints.
+Error response schema for common 400/404 cases. Acceptance: breaking changes are
+deliberate and visible in tests; agent-facing endpoints have stable models.