[raiseCatError]

Post-merge standardization on main

All five feature PRs (#16–#20) were merged in stack order into main using merge commits to retain test-first history. The integrated main commit 410dffb5130678fd7dc526837a5086cacb68dff1 passed Ubuntu and macOS CI (run 39019289770).

This small, separate follow-up aligns source tree conventions without enabling new executable behavior:

• Adds canonical schemas/freview-ops.schema.json (JSON Schema Draft 2020-12), mirrored at skills/freview/assets/schemas/freview-ops.schema.json.
• Defines bounded and documented v1 fields for opt-in modules, configured argv, forwarded environment, timeout/output limits, mutation quality, and autonomy defaults. Runtime ops.py remains the execution and permission authority; schema validation by itself never grants execution.
• New regression tests/test_ops_schema_contract.py guards schema strictness, fields, runtime enum/option parity, safe example defaults, exact distribution copy, and README status.
• Extends distribution layout tests to package the new schema.
• Replaces stale “draft PR Evidence reconciliation: specification sources, verifiable receipts and adversarial audit protocol #16 in progress” README status with actual merged history; clarifies .freview.json (read-only audit preferences) vs .freview-ops.json (separate opt-in operations) in docs.
• No release, tag, provider test, external mutation execution, automatic hook install or changed authorization model.

Verification gates

• Integrated main Ubuntu/macOS CI green at 410dffb5
• Test-first red when schema did not yet exist
• Final exact-head Ubuntu/macOS CI for this PR
• Merge with expected unchanged PR head
• Verify final main push CI and diff/schema presence

Future work: physical Mac and trusted external SSD acceptance, real mutmut/Stryker runs and independent live agent CLI testing; not claimed complete here.