chore: CI validation + color policy dogfood

[mikeylong]

Changes

Adds CI validation workflow, provenance stamping, and enables color policy with traceable drift demo.

1. CI Validation Workflow

• New GitHub Actions workflow: .github/workflows/validate-contract.yml
• Runs on push to main and all pull requests
• Includes provenance stamping for auditability

2. Provenance Stamping

• New script: scripts/print-provenance.mjs
• Prints Git SHA, binary path, CLI version, schema hash, contract path
• Ensures validation runs are traceable and auditable

3. Color Policy Enablement

• Updated contract with color policy configuration
• Captured drift discovery output in DRIFT_DISCOVERY.md
• Generated interface contract for surfaces-web

4. Documentation

• Updated contract validation docs
• Added generator consumption guide
• Added surfaces interface correctness guide

Commits

• c0f16fa - chore: add CI validation + provenance stamp + dogfood docs
• 72bb848 - feat: enable color policy + capture traceable drift demo output

Validation

• ✅ pnpm validate:ci passes (exit code 0)
• ✅ Warnings-only mode working correctly
• ✅ Provenance stamp prints correctly

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
interfacectl.com	Ready	Preview, Comment	Jan 16, 2026 8:50pm
surfaceops.ai	Ready	Preview, Comment	Jan 16, 2026 8:50pm
surfaces.dev	Ready	Preview, Comment	Jan 16, 2026 8:50pm
surfaces.systems	Ready	Preview, Comment	Jan 16, 2026 8:50pm