Replace the V2R2C2-only hardcoded release/adapter binding gates in
build_trusted_release_artifact.py with canonical, policy-consistent
binding so the producer can package any governed successor:
- version/rollback_version now validated via the shared canonical
validate_release_version (VnRnCn[-suffix]) contract; rollback must
still never equal the payload version (fail-closed preserved).
- adapter service validated as a well-formed unit name and port within
valid range; no single V2R2C2-era service/port pinned.
- exact-source binding preserved: source_oid/tree_oid/rollback oids +
rollback artifact sha256 still required and validated.
Add successor-scoped test fixture binding V2R2C3-LIVE-BINDING-CONVERGE
to source_commit 97f8340 / tree_oid defd240d, plus a fail-closed
negative test.
AIOS Governed Continuation
e48c93ca28