refactor: remove obsolete source exclusions and identity wrapper

src/artifacts/ArtifactProvider.ts

@@ -39,7 +39,6 @@ import {
 } from "./ArtifactProviderMetadata.js";
 import { createEvidence } from "../domain/evidence.js";
 import { createArtifactInspection } from "../domain/artifactInspection.js";
-import { resolveArtifactIntegrityPolicy } from "./inventory/policy.js";
 
 /** Read-only inventory and exclusively owned extraction provider. */
 export class ArtifactProvider implements AnalysisProvider {
@@ -364,9 +363,7 @@ class ArtifactClient implements AnalysisClient {
     return inventoryArtifact(this.target.sourcePath ?? this.target.path, {
       environment: this.environment,
       ...(options?.signal === undefined ? {} : { signal: options.signal }),
-      integrity: resolveArtifactIntegrityPolicy({
-        mode: parsed.integrity_policy,
-      }),
+      integrity: { mode: parsed.integrity_policy },
     });
   }
 }

src/artifacts/inventory/policy.ts

@@ -1,11 +0,0 @@
-import type { ArtifactIntegrityPolicy } from "./types.js";
-
-/** Parsed caller intent for integrity mismatch handling. */
-export type ArtifactIntegrityIntent =
-  | { readonly mode: "fail" }
-  | { readonly mode: "record-and-continue" };
-
-/** Preserve the explicit integrity admission choice without changing verification. */
-export const resolveArtifactIntegrityPolicy = (
-  intent: ArtifactIntegrityIntent,
-): ArtifactIntegrityPolicy => intent;

src/domain/referenceSourceGraph.ts

@@ -133,8 +133,6 @@ const exclusionSchema = z.strictObject({
   reason: z.enum([
     "configured-secret",
     "symlink-escape",
-    "size-limit",
-    "inventory-limit",
     "unreadable",
     "caller-excluded",
   ]),

src/domain/referenceSourcePolicy.ts

@@ -1,4 +1,4 @@
-/** Exclusions and maximum traversal sizes for historical source imports. */
+/** Caller-selected path exclusions for historical source imports. */
 export interface ReferenceSourcePolicy {
   readonly secretPatterns: readonly string[];
 }