feat: bind active metadata promotion to object store

.github/workflows/ci.yml

@@ -35,6 +35,7 @@ on:
       - feat/ar1-metadata-fabric-active-metadata-scheduler-delivery
       - feat/ar1-metadata-fabric-active-metadata-projection-execution
       - feat/ar1-metadata-fabric-active-metadata-binding-reconciliation
+      - feat/ar1-metadata-fabric-durable-active-metadata-promotion
 
 env:
   PYTHON_VERSION: "3.13"
@@ -192,6 +193,9 @@ jobs:
       - name: Validate metadata fabric durable Active Metadata promotion evidence
         run: python -m data_agent.metadata_fabric_durable_active_metadata_promotion validate
 
+      - name: Validate metadata fabric object-store Active Metadata promotion evidence
+        run: python -m data_agent.metadata_fabric_object_store_active_metadata_promotion validate
+
       - name: Validate Active Metadata consumer deployment boundary
         run: python -m data_agent.active_metadata_consumer_deployment validate
 
@@ -281,6 +285,7 @@ jobs:
             data_agent/test_metadata_fabric_active_metadata_projection_execution.py \
             data_agent/test_metadata_fabric_active_metadata_binding_reconciliation.py \
             data_agent/test_metadata_fabric_durable_active_metadata_promotion.py \
+            data_agent/test_metadata_fabric_object_store_active_metadata_promotion.py \
             data_agent/test_metadata_fabric_lineage_delivery.py \
             data_agent/test_metadata_fabric_provider_identity.py \
             data_agent/test_metadata_fabric_gravitino_identity.py \

config/metadata-fabric-object-store-active-metadata-promotion.local.yaml

@@ -0,0 +1,52 @@
+schema: gda.object_store_active_metadata_promotion_profile.v1
+environment: local_docker_desktop
+
+dependencies:
+  m320_profile_path: config/metadata-fabric-durable-active-metadata-promotion.local.yaml
+  m320_evidence_path: docs/evidence/metadata-fabric-durable-active-metadata-promotion-2026-07-30.json
+  m320_evidence_sha256: 53773e9417668e03ad3ab2b5c3cdbd627fb3bc397d63c5860755ec5318eebe8b
+  m310_profile_path: config/metadata-fabric-spark-object-store-interoperability.local.yaml
+  m310_evidence_path: docs/evidence/metadata-fabric-spark-object-store-interoperability-2026-07-29.json
+  m310_evidence_fingerprint: 05844457efb378581fb7fc2e7ed3c706819b2d8fa5a52b2f82577051d38c2cd1
+
+target:
+  metalake: gda_chongqing_m3_21
+  catalog: lakehouse
+  schema: cultural_heritage
+  table: cultural_districts
+  catalog_type: RELATIONAL
+  catalog_provider: lakehouse-iceberg
+  catalog_backend: jdbc
+  uri: jdbc:postgresql://gravitino-persistence-postgresql:5432/iceberg
+  warehouse: s3://gda-metadata-warehouse/warehouse
+  jdbc_driver: org.postgresql.Driver
+  io_impl: org.apache.iceberg.aws.s3.S3FileIO
+  s3_endpoint: http://metadata-object-store:9000
+  s3_region: us-east-1
+  s3_path_style_access: true
+  bucket: gda-metadata-warehouse
+  object_prefix: warehouse/cultural_heritage/cultural_districts/
+
+identity:
+  service_admin: gda-object-store-admin
+  user: gda-object-store-active-metadata-promoter
+  role: gda-object-store-cultural-district-projector
+  material_delivery: runtime_generated_ephemeral_kubernetes_object
+
+authorization:
+  policy_version_ref: gda://metadata-authorization-local/policy/object-store-metadata-promotion-v1
+  evaluator_subject: workload:object-store-metadata-policy-evaluator
+  approver_subject: human:metadata-platform-owner
+  approval_reason: approved local object-store Active Metadata promotion rehearsal
+
+claims:
+  predecessor_history_changed: false
+  promotion_persisted_to_gda_control: false
+  protected_workload_identity_verified: false
+  provider_minimum_privilege_verified: false
+  durable_catalog_verified: false
+  production_object_store_verified: false
+  oidc_verified: false
+  tls_verified: false
+  production_ingestion_verified: false
+  production_ready: false