docs(spec): document wire-level carrier sections (proposals 0001 §4 + 0002 §5)

[hyperpolymath]

Summary

Closes the remaining doc gate for both proposals:

• Proposal 0001 §Acceptance criterion 4 (spec section in `spec/type-safety-levels-for-wasm.adoc`)
• Proposal 0002 §Gate 5 (same)

Adds a new top-level "Wire-Level Carrier Sections" section after "Implementation Architecture" with all 4 carriers documented: `typedwasm.ownership` (existing), `typedwasm.regions` + `typedwasm.capabilities` (proposal 0001 `[review]`), `typedwasm.access-sites` (proposal 0002 `[review]`).

Content

Per-section: full wire format (verbatim from the proposals), Idris2 spec-type mappings, codec entry points (`parse_` / `build_` in `crates/typed-wasm-verify/src/section.rs`). Plus overview table, versioning policy, and cross-references to #106 roadmap + #94 / #95 / #96 / #97 open questions.

Net +187 lines of doc, no code change.

What this leaves for [accepted]

Per proposal 0001 §Acceptance criteria:

• Criterion 1 — paired producer sign-off (4 review comments on #165 + #402)
• Criterion 2 — wire format mapped against `Region.idr` / `Pointer.idr` / `ResourceCapabilities.idr` (could land as proof-side review)
• Criterion 3 — codec landed (regions via feat(verify): pre-stage typedwasm.regions codec behind cargo feature unstable-l2 #77, capabilities + access-sites via feat(verify): L15 capabilities + L2 access-sites codecs (proposals 0001 §3 + 0002 §3) #107)
• Criterion 4 — this PR
• Criterion 5 — cross-repo producer issues filed (ephapax#221, affinescript#444 shipped)

Per proposal 0002 §Acceptance criteria:

• Gate 1 — ADR-021 v2 emit-flip protocol drafted
• Gate 2 — paired producer review (ephapax#222 + affinescript#449)
• Gate 3 — codec landed (via feat(verify): L15 capabilities + L2 access-sites codecs (proposals 0001 §3 + 0002 §3) #107)
• Gate 4 — `verify_access_sites` verifier pass (needs cross-section MissingDependentCarrier check)
• Gate 5 — this PR
• Gate 6 — cross-repo producer codegen issues

Remaining for both proposals to flip to `[accepted]`: the verifier-pass plumbing (`verify_capabilities` for 0001, `verify_access_sites` for 0002 — both cross-section). Tracked under #106.

Test plan

• AsciiDoc renders cleanly (table columns balanced, code blocks valid)
• No path/file references break (verified against current section.rs API names)
• No collisions with existing spec doc sections
• Doc-only change — no code, no CI implications beyond aspect tests (which now pass after ci: fix Cargo.lock wasmparser dup + allowlist nextgen-languages/ in aspect test #105 root-cause fix)

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 96 issues detected

Severity	Count
🔴 Critical	8
🟠 High	19
🟡 Medium	69

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "unknown",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in c5-regenerate.yml",
    "type": "unknown",
    "file": "c5-regenerate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cargo-audit.yml",
    "type": "unknown",
    "file": "cargo-audit.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "unknown",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence