[openapi-mcp S2] P2 proof: spec fidelity + size dry-run against a real scaffold

[rickylabs]

Part of #1126

Scope

Disposable proof [P2] — spec-fidelity + size dry-run against a real scaffolded app: confirm operationIds are dotted contract paths in practice, measure real operation-row and schema-view sizes against the truncation budget, and capture error-envelope presence — including the no-database in-memory contract template, whose routes build from bare oc and do not carry the common error family (S-19). The measured keyword inventory feeds the S-5 validator subset (S13).

Design source: RFC #1123 (rfc.md §4 Wave 0) + .llm/runs/plan-openapi-mcp-plugin--seed/design/canonical/03-projection-and-naming.md (rev 2).

Acceptance

• gate: committed proofs/P2-verdict.md with measured sizes, operationId shapes, and the observed OpenAPI keyword subset (incl. the no-DB template case)

[rickylabs]

Partial proof evidence is committed in #1182 at 5b0ba26b5.

The no-database scaffold measurement is complete and separately reviewed, but the required DB-backed live spec could not be attributed because the generated SQLite service exits without --allow-ffi. Under the locked two-scaffold rule, proofs/P2-verdict.md is explicit FAIL. The acceptance box remains unchecked and #1182 intentionally carries no Closes #1128 keyword.

[rickylabs]

Box ticked by the orchestrator on verdict evidence: proofs/P2-verdict.md (PR #1182, commit 5b0ba26b5) carries the measured sizes (3657-byte spec; per-row 73/89/88 bytes; per-operation schema byte counts in P2-no-db.json), the dotted operationId shapes, and the observed OpenAPI 3.1/2020-12 keyword subset including the no-DB template case with its {} error views. The verdict is an honest FAIL because the required DB branch was blocked by the generated service's missing --allow-ffi — that branch's re-measurement is an acceptance box of #1191; contract impact, if any, is a recorded re-scope on epic #1126.

[rickylabs]

Closed by hand by the milestone orchestrator. The deliverable — committed proofs/P2-verdict.md with the measured no-DB inventory — shipped in merged PR #1182 (2c8865e8c, canary 0.0.5-canary.1 payload). The PR deliberately carried Refs #1128 (its verdict text declines to self-claim acceptance — correct honesty discipline); the single acceptance box was ticked by the orchestrator on verdict evidence (see prior comment). The blocked DB-branch re-measurement continues under #1191.