feat(guardrails): Wave 8 — review fixes + remaining hooks + multi-model delegation

[terisuke]

Summary

Wave 8 implements the final batch of guardrails hooks, addresses all PR #128 review findings, and adds OpenCode's competitive multi-model delegation enhancement.

Changes

PR #128 Review Fixes (6 items)

• CRITICAL: active_task_count race condition → Map-based callID tracking
• HIGH: verify-agent-output parses <task_result> payload instead of raw output length
• MEDIUM: enforce-soak-time now surfaces user-visible advisory via out.output
• MEDIUM: enforce-domain-naming now surfaces user-visible advisory via out.output
• MEDIUM: issue_verification_done only set when reviewed && factchecked
• Per-provider cost tracking added to session state

New Plugin Hooks (5)

Hook	Event	Type
verify-state-file-integrity	tool.execute.after	advisory (auto-repair)
audit-docker-build-args	tool.execute.before/after	advisory
enforce-review-reading	tool.execute.before/after	advisory
pr-guard	tool.execute.before/after	advisory
stop-test-gate	tool.execute.before/after	advisory

New CI Workflow Hooks (4)

Hook	File
enforce-seed-data-verification	seed-verify.yml
workflow-sync-guard	workflow-sync.yml
inject-claude-review-on-checks	pr-management.yml
post-pr-create-review-trigger	pr-management.yml

Multi-Model Delegation Enhancement

• Provider-aware routing: optimal providers per agent tier
• Per-provider LLM call tracking (llm_calls_by_provider)
• Cost waste detection: low-tier agent on high-tier model
• Tier mismatch advisory in compacting context
• Session provider tracking

Metrics

• guardrail.ts: 987 → 1184 lines (+197)
• Hooks coverage: ~75% → ~90-93%

Verification

• bun turbo typecheck — PASS
• bun turbo build — PASS (smoke test: 0.0.0-feat/guardrails-hooks-wave7)
• Binary launch + plugin load — PASS
• State file firing: llm_call_count, mode=enforced confirmed
• Full CI green (pending fix(ci): test failures caused by runner downgrade — blacksmith-4vcpu vs ubuntu-latest #129 resolution)

Closes #124, #125, #126

[terisuke]

Closed by PR #128 merge.