PMAT-3704 / ONT-4c3: pc_extract draws one planted defect per implemented extractor — parity-receipt, json and pv-contract gain their controls, and the set is tied to Σ

[noahgift]

Closes #3704. Refs #3577 (ONT-4c3), #3624.

The defect. pv lint contracts/ --gate shapes reported pc_extract = {apr-model, code, gguf, lean} while Σ (contracts/ontology.yaml) marks seven entity types implemented. parity_receipt::positive_control (#3600) had one caller — a unit test — so the gate never drew it, and json (#3516) and pv-contract had no control at all. ONT-001 R-3 requires "pc_extract (one planted defect per registered extractor, every run)", and the infra ONT-4c3 probe asks .pc_extract["parity-receipt"]=="fired": the row was RED on main whatever the ledger said. extract_controls() is byte-identical on #3600's head, the #3669 squash and 225b2a9ab — never wired, not dropped.

The fix is the tie, not the missing entry. A lib test makes extract_controls()'s key set EQUAL Σ's implemented entity types (a non-empty set, every value fired), so the next extractor cannot ship without its control. Then the three controls it demands:

• parity-receipt — the existing control, drawn on control_sample() (a minimal v2 record; fails closed to Null);
• json — in memory through extract_text(), the post-read path extract_into now shares: a mapped nested key extracts typed by its class, an unmapped one is refused naming the key;
• pv-contract — metadata.kind and a depends_on relation come out as ont:kind and the edge; the copy without metadata carries no ont:kind.

Measured (pv from this tree, aprender contracts/): verdict=Pass, pc_extract 7/7 fired, by_entity_type["parity-receipt"]=7 — the probe's gate conjunct rc 0 (rc 1 on main). RED commit d542db3cd (4 keys vs 7; no parity key), GREEN 9f6b2e02c, both tests unedited.

Mutations, each RED: parity drops the comparator edge / json infers a class for an unmapped key / pv-contract defaults metadata.kind to kernel → the Σ-tie test fails AND the gate declines exit 2 naming exactly pc_extract.<that key>; dropping a control key → the Σ-tie test fails on its assertion. make gate rc 0; clippy -D warnings and fmt clean; all 11 tests/ont*.rs pass (95). Receipt: docs/audits/impl-PMAT-3704-receipt.md.

ont-delta: none — adds pc_extract positive controls for three already-implemented extractors (pv-contract, json, parity-receipt); no entity type, shape, relation or verdict reason is added or changed

keep-open: #3577 closes only when paiml/infra binds ONT-4c3 in the ONT-001 ledger from this PR's squash (the binding is infra's row, not a change here); #3624 is the by_entity_type sibling list, which this PR does not change.

🤖 Generated with Claude Code

[github-actions]

§13.11 rung 1 — quorum shadow verdict

S13-SHADOW pr=3706 head=18108846f222382d69a6242a77066add2c688e6b verdict=REFUSE class=Q1 arm_rc=1

Shadow mode: this records a verdict and merges nothing. A refusal
to arm is not a block (§13 adds zero rows to §7) — the pull request is
exactly as green as it was.

[noahgift]

quorum-review (AD-04): NOT agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3704",
 "head": "18108846f222382d69a6242a77066add2c688e6b",
 "width": 3,
 "executor": "agy",
 "agreed": false,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "PASS",
   "findings": 7
  },
  {
   "lane": 2,
   "verdict": "PASS",
   "findings": 9
  },
  {
   "lane": 3,
   "verdict": "NO-VERDICT",
   "findings": 0
  }
 ]
}

[noahgift]

quorum-review (AD-04): NOT agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3704",
 "head": "18108846f222382d69a6242a77066add2c688e6b",
 "width": 3,
 "executor": "agy",
 "agreed": false,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "PASS",
   "findings": 0
  },
  {
   "lane": 2,
   "verdict": "NO-VERDICT",
   "findings": 0
  },
  {
   "lane": 3,
   "verdict": "PASS",
   "findings": 0
  }
 ]
}

[noahgift]

quorum-review (AD-04): three PASS — agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3704",
 "head": "18108846f222382d69a6242a77066add2c688e6b",
 "width": 3,
 "executor": "agy",
 "agreed": true,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "PASS",
   "findings": 0
  },
  {
   "lane": 2,
   "verdict": "PASS",
   "findings": 0
  },
  {
   "lane": 3,
   "verdict": "PASS",
   "findings": 0
  }
 ]
}