feat(api): authorize purpose-bound exports via loopback CLI

[seonghobae]

Why

Protected main already serves POST /v1/exports on NaruonLiveService, but operators still had to write raw HTTP/1.1. tepp-loopback is AnalysisRunLiveService and does not serve this path. Stdout stays purpose-bound. tepp.scientific_acceptance.v1 never appears.

Live slices that this PR does not duplicate:

• feat(analysis): bind validation runs to scientific acceptance evidence #356 analysis_engine scientific-acceptance library
• feat(api): carry scientific acceptance only on terminal results #358 tepp_api terminal-wire DTO
• feat(api): serve scientific acceptance only on loopback status GET #359 GET loopback status by id
• feat(api): record scientific acceptance via loopback lifecycle POST #360 POST running/terminal lifecycle
• feat(api): cancel accepted and running analysis runs on loopback #361 cancel HTTP
• feat(api): drive scientific acceptance via loopback CLI #362 scientific-acceptance loopback CLI
• feat(api): enumerate analysis runs via loopback collection GET #368 collection GET
• feat(api): enumerate analysis runs via loopback collection CLI #371 collection CLI list
• feat(api): cancel analysis runs via loopback CLI #378 cancel CLI
• feat(api): create analysis runs via loopback CLI #385 create CLI
• feat(api): inspect analysis-run status via loopback CLI #392 status CLI
• feat(api): POST retry from published tepp-retry CLI #394 retry CLI
• feat(api): inspect stored analysis-run requests via loopback CLI #395 stored-request CLI
• feat(api): POST running and terminal from published tepp-lifecycle CLI #397 lifecycle CLI
• feat(api): GET retry parent from published tepp-retry-parent CLI #400 retry-parent CLI
• feat(api): resolve analysis-run identity via loopback lookup CLI #401 lookup CLI
• feat(api): GET retry children from published tepp-retry-lineage CLI #403 retry-lineage CLI
• feat(api): wait for analysis-run terminal status via loopback CLI #406 wait CLI
• feat(persistence): persist idempotent analysis runs #287 GAP-003B persistence/Compose
• feat(network): replace union-find stand-in with Leiden consensus #351 Leiden
• GAP-010 Figma/export

What

Purpose-bound export CLI stacked on protected main 1bc02f580cf48e1d39da239f0e818453437c31c3:

• tepp-naruon-live binds NaruonLiveService on 127.0.0.1:18082 by default
• tepp-exports authorize client of POST /v1/exports
• stdin is ExportAuthorizationRequest JSON; only modular_service_consumer
• idempotency key must not equal principal_id
• metric-free decision JSON; tepp.scientific_acceptance.v1 never prints
• loopback-only; credential flags, empty stdin, unknown verbs, and metric keys fail closed
• ADR 0026 on protected main (distinct from GAP-003A ADR 0026 on other stacks)

Not an ADR 0014 scientific claim. Not persistence. Not GET /v1/exports/{export_id}.

Verification

• cargo clippy -p tepp_api --all-targets -- -D warnings
• cargo test -p tepp_api --lib export_authorize_cli
• cargo test -p tepp_api --test export_authorize_cli_contract
• RUSTDOCFLAGS='-D warnings' cargo doc -p tepp_api --no-deps
• python3 scripts/validate_documentation.py
• python3 scripts/check_docstrings.py

Exact head: 0c0341e39f0fb166c8fc37bb8368cf26652095f3

Do not merge without two independent APPROVE reviews on this exact head and current Checks. Author COMMENTED is not independent APPROVE.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Hour-27 exact-head: 0c0341e39f0fb166c8fc37bb8368cf26652095f3. Purpose-bound export CLI tepp-exports authorize against tepp-naruon-live (NaruonLiveService POST /v1/exports) stacked on protected main. tepp-loopback does not serve this path. Metric-free decision JSON; tepp.scientific_acceptance.v1 never appears. Devin/CodeRabbit/author COMMENTED is not independent APPROVE. Ruleset 18156473 needs two independent APPROVE reviews. No self-approve.

[seonghobae]

Exact-head COMMENT on 0c0341e (draft). Unique occupied: tepp-exports authorize POST /v1/exports on NaruonLiveService / tepp-naruon-live (ADR 0026). tepp-loopback (AnalysisRunLiveService) does not serve /v1/exports. Non-loopback host is AuthorizationDenied. Forbidden keys include rmse family, se_gate, scientific_acceptance, terminal_result. Consumer is naruon.

Do not duplicate this authorize CLI. Retrieval is #417; collection is #444; stored-request is #459; lookup/quarantine is #466. Do not un-draft. Zero reviews on this SHA before this COMMENT. Never self-approve. Do not weaken fail-closed. No Buyer language.