feat(runtime): add parent-owned development lifecycle

PROJECT_STATUS.md

@@ -30,7 +30,7 @@ one.
 | Claim-level reuse | Validator-extracted claims, claim proofs, mixed planning, and bounded authoritative location, runtime-flow, and focused-test claims | Deterministic freshness, mutation, negative, projection, economics, and performance cases | **Implemented; offline validated** |
 | Verified changes | Isolated patch preparation, independent verifier, one repair, explicit journaled apply | Simulator and focused persistence, isolation, drift, and recovery tests | **Implemented; offline validated** |
 | Codex role-profile control plane | Canonical Codex role definitions, bounded policies, immutable revisions, state-digest CAS, SQLite persistence, audit records, explicit WorkerProfile projection, bounded digest-bound HTTP API, local editor, and frozen session/worker/cache provenance | Focused deterministic Rust and frontend tests; no parent-owned lifecycle execution | **Implemented; offline validated** |
-| Codex development lifecycle orchestration | Evidence, patch, test, verification, approval, and apply primitives exist; the configurable parent-owned role lifecycle is not integrated | Component-level offline evidence only | **Pending** |
+| Codex development lifecycle contract | Durable depth-one `explore -> implement -> test -> review -> verify -> apply` state machine, frozen role-profile/test-plan anchors, budgets, cancellation, one repair, explicit approval, transactional SQLite projection/events, restart replay, and journaled apply integration; Codex executor and lifecycle UI are not wired | Deterministic transition matrix, adversarial domain tests, persistence/restart tests, and concurrent apply serialization without provider calls | **Implemented; offline validated** |
 | Other-host subagent configuration | Configuration-only interoperability is planned for Claude Code and Cursor, followed by OpenCode and Antigravity | Not available | **Pending** |
 | Multi-host orchestration | Execution remains Codex-only; non-Codex execution follows configuration interoperability, a host contract, and conformance evidence | Not available | **Pending** |
 | Release readiness | Stable packaging, supported installation, compatibility policy, second live platform, powered corpus | Not available | **Pending** |
@@ -63,7 +63,7 @@ provider-backed claim-authority observation exists.
 | Canonical named Codex role-profile domain and revision store | **Implemented; offline validated** |
 | Named role-profile HTTP/editor | **Implemented; offline validated; configuration mutations only** |
 | Role-profile session, worker, cache, attempt, and audit provenance | **Implemented; offline validated; Codex-first** |
-| Parent-owned role-profile lifecycle integration | **Pending; Codex-first** |
+| Parent-owned lifecycle domain and change-journal integration | **Implemented; offline validated; executor pending** |
 | Non-Codex subagent configuration | **Pending; configuration only before execution** |
 | Non-Codex execution and orchestration | **Pending; later milestone** |
 | Stable public API or configuration compatibility | **Pending** |
@@ -126,10 +126,11 @@ validation.
   provider-backed evidence.
 - Verified changes have no provider-backed patcher or verifier observation.
 - Canonical role-profile definitions, revision persistence, bounded HTTP/editor
-  flows, request-time preflight, and frozen session/worker/cache/attempt/audit
-  provenance are implemented and offline validated. They do not provide a
-  parent-owned lifecycle executor or automatic profile activation; activation
-  is an explicit configuration change.
+  flows, request-time preflight, frozen session/worker/cache/attempt/audit
+  provenance, and the parent-owned lifecycle domain/journal are implemented and
+  offline validated. The lifecycle contract does not launch or supervise Codex
+  workers and has no read/timeline UI; automatic profile activation remains
+  unsupported and activation is an explicit configuration change.
 - The verifier handles a deterministic serial set of up to four distinct
   associated certified test plans; exact duplicates collapse to one execution,
   while over-cap and unavailable plans fail closed. This behavior is offline

crates/needle-core/src/lib.rs

@@ -10,6 +10,7 @@ mod artifact;
 mod change;
 pub mod claim;
 mod domain;
+mod lifecycle;
 mod multi_need;
 mod role_profile;
 mod semantic;
@@ -24,6 +25,7 @@ pub use claim::{
     MAX_SELECTED_CLAIMS, ProofComponent, runtime_flow_anchor,
 };
 pub use domain::*;
+pub use lifecycle::*;
 pub use multi_need::*;
 pub use role_profile::*;
 pub use semantic::*;