Close Milestone 2 with measured evidence

docs/CONTRACT.md

@@ -22,6 +22,8 @@ commit when Git is available; it cannot change repository state.
 - Task context capsule: `schemas/context-capsule.schema.json`, version 1.
 - Latest generation diff: `schemas/generation-diff.schema.json`, version 1.
 - Latest generation-diff page: `schemas/generation-diff-page.schema.json`, version 1.
+- Generated client configuration: `schemas/client-configuration.schema.json`, version 1.
+- Client doctor result: `schemas/doctor-result.schema.json`, version 1.
 - Index schema: version 3, disposable and reproducible.
 - Index attestation: schema version 1, disposable and reproducible.
 - Core, CLI, and MCP server: version 1.3.0.dev0.
@@ -75,6 +77,25 @@ not history and contains no Logic details or source text. Public pages carry one
 `receipt_header`; its `stored_receipt_hash` identifies the complete persisted receipt rather than
 the header alone. One top-level pagination object carries the only continuation cursor.
 
+## Machine-local client integration
+
+Generated Codex, Claude, and OpenClaw fragments are machine-local projections. They are not
+canonical project content. Version 1 binds the selected project, exact isolated Python
+interpreter, canonical argument layout, effective policy, no-AST projection, render policy,
+timeouts, artifact bytes, and configuration hash.
+
+Preview is side-effect free. Explicit publication creates only one new private standalone
+fragment in an existing real directory. It never merges or replaces different content. Descriptor,
+parent, target, content, ownership, permission, and link identities are checked before and after
+the directory durability boundary. A failure rolls back when that can be proven and otherwise
+returns bounded unconfirmed publication evidence.
+
+Doctor is a bounded read-only inspector with one fixed check inventory. It uses stable no-follow
+descriptor and configuration reads plus stat-only derived-index evidence. It never loads a
+complete projection, opens SQLite, starts MCP, executes the configured command, synchronizes,
+builds, renders, starts a viewer, or writes configuration. Unprovable client behavior is a warning,
+not an invented success.
+
 ## Isolated proposal model
 
 Create, update, move, and delete are ordered node operations inside an isolated changeset. Every