feat(api): cancel interpretation runs via loopback cancel CLI

CHANGELOG.d/interpretation-run-cancel-cli.md

@@ -0,0 +1 @@
+- `orchestrator_live` `tepp-interpretation-run-cancel cancel` mints a typed contextual-orchestrator `POST /v1/interpretation-runs/{idempotency_key}/cancel` onto spawned `tepp-orchestrator-loopback` TCP (ADR 0074). Metric-free cancelled identities only (`claim_status=hypothetical`, `scientific_authority=false`, `cancelled=true`). `tepp.scientific_acceptance.v1` never appears. Does not infer causality. Naruon and LineageWeave are refused. Not cancel HTTP-only, not analysis-run cancel CLI, not persistence.

DOCUMENTATION.md

@@ -17,6 +17,7 @@ TEPP's approved PRD v0.4 and implementation plan are the primary product baselin
 | Interpretation-run collection GET doctoring | [`docs/research/interpretation-run-collection-http.md`](docs/research/interpretation-run-collection-http.md) |
 | Interpretation-run GET-by-id doctoring | [`docs/research/interpretation-run-retrieval-http.md`](docs/research/interpretation-run-retrieval-http.md) |
 | Interpretation-run cancel HTTP doctoring | [`docs/research/interpretation-run-cancel-http.md`](docs/research/interpretation-run-cancel-http.md) |
+| Interpretation-run cancel CLI doctoring | [`docs/research/interpretation-run-cancel-cli.md`](docs/research/interpretation-run-cancel-cli.md) |
 | UML/runtime/scientific flows | [`docs/UML.md`](docs/UML.md) |
 | Logical/physical ERD | [`docs/ERD.md`](docs/ERD.md) |
 | Security policy | [`SECURITY.md`](SECURITY.md) |

crates/orchestrator_live/Cargo.toml

@@ -29,5 +29,11 @@ path = "src/bin/tepp_interpretation_runs.rs"
 test = false
 bench = false
 
+[[bin]]
+name = "tepp-interpretation-run-cancel"
+path = "src/bin/tepp_interpretation_run_cancel.rs"
+test = false
+bench = false
+
 [lints]
 workspace = true

crates/orchestrator_live/src/bin/tepp_interpretation_run_cancel.rs

@@ -0,0 +1,34 @@
+//! Operator CLI for loopback contextual-orchestrator interpretation-run cancel.
+
+use std::io::{self, IsTerminal};
+use std::process::ExitCode;
+
+use orchestrator_live::{
+    execute_interpretation_run_cancel_cli, read_interpretation_run_cancel_cli_stdin,
+    render_interpretation_run_cancel_cli_stdout, InterpretationRunCancelCliInvocation,
+    OrchestratorLiveError,
+};
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(_) => ExitCode::FAILURE,
+    }
+}
+
+fn run() -> Result<(), OrchestratorLiveError> {
+    let args: Vec<String> = std::env::args().skip(1).collect();
+    match args.first().map(String::as_str) {
+        Some("cancel") => run_cancel(&args),
+        _ => Err(OrchestratorLiveError::InvalidWirePayload),
+    }
+}
+
+fn run_cancel(args: &[String]) -> Result<(), OrchestratorLiveError> {
+    let body = read_interpretation_run_cancel_cli_stdin(io::stdin().is_terminal(), io::stdin())?;
+    let invocation = InterpretationRunCancelCliInvocation::from_args(args, body)?;
+    let response = execute_interpretation_run_cancel_cli(&invocation)?;
+    let stdout = render_interpretation_run_cancel_cli_stdout(&invocation, &response)?;
+    println!("{stdout}");
+    Ok(())
+}