Add neutral sandbox tool policy contract

[chubes4]

Summary

• Add a neutral datamachine/sandbox-tool-policy/v1 list-shaped transport contract for host tool policies.
• Add datamachine_host_tool_policy_transport_schemas so external hosts can register compatible transport schemas without Data Machine core naming product-specific schemas.
• Update the pipeline policy smoke test to cover neutral sandbox policy, filter-registered transports, generic runtime compatibility, and absence of the old Codebox sandbox schema in production policy code.

Tests

• php tests/pipeline-tool-policy-snapshot-smoke.php
• php tests/runtime-vocabulary-smoke.php
• php tests/agent-bundle-runner-contract-smoke.php
• php -l inc/Engine/AI/Tools/HostToolPolicy.php && php -l tests/pipeline-tool-policy-snapshot-smoke.php
• git diff --check

AI assistance

• AI assistance: Yes
• Tool(s): openai/gpt-5.5 via OpenCode
• Used for: Scoped implementation, targeted test updates, local verification, and PR drafting.

[homeboy-ci]

Homeboy Results — data-machine

Lint

✅ lint — passed

ℹ️ Full options: homeboy docs commands/lint
Deep dive: homeboy lint data-machine --changed-since d106948

Artifacts and drill-down

• CI results artifact: homeboy-ci-results-data-machine-lint-quality-Linux-node24 contains immediate command JSON for this action invocation.
• Observation artifact: homeboy-observations-data-machine-lint-quality-Linux-node24 contains exported Homeboy run history for deeper queries.
• Drill-down: download the observation artifact, then run homeboy runs import <dir>, homeboy runs list, and homeboy runs findings <run-id>.
• Artifacts are attached to the workflow run: https://github.com/Extra-Chill/data-machine/actions/runs/27922913861

Test

✅ test — passed

ℹ️ Auto-fix lint issues: homeboy refactor data-machine --from lint --write
ℹ️ Collect coverage: homeboy test data-machine --coverage
ℹ️ Pass args to test runner: homeboy test -- [args]
ℹ️ Full options: homeboy docs commands/test
Deep dive: homeboy test data-machine --changed-since d106948

Artifacts and drill-down

• CI results artifact: homeboy-ci-results-data-machine-test-quality-Linux-node24 contains immediate command JSON for this action invocation.
• Observation artifact: homeboy-observations-data-machine-test-quality-Linux-node24 contains exported Homeboy run history for deeper queries.
• Drill-down: download the observation artifact, then run homeboy runs import <dir>, homeboy runs list, and homeboy runs findings <run-id>.
• Artifacts are attached to the workflow run: https://github.com/Extra-Chill/data-machine/actions/runs/27922913861

Audit

✅ audit — passed

• audit — 15 finding(s)
• Total: 15 finding(s)

Deep dive: homeboy audit data-machine --changed-since d106948

Artifacts and drill-down

• CI results artifact: homeboy-ci-results-data-machine-audit-quality-Linux-node24 contains immediate command JSON for this action invocation.
• Observation artifact: homeboy-observations-data-machine-audit-quality-Linux-node24 contains exported Homeboy run history for deeper queries.
• Drill-down: download the observation artifact, then run homeboy runs import <dir>, homeboy runs list, and homeboy runs findings <run-id>.
• Artifacts are attached to the workflow run: https://github.com/Extra-Chill/data-machine/actions/runs/27922913861

Tooling versions

• Homeboy CLI: homeboy 0.249.0+f05a14e58a41+f3ee36fa
• Extension: wordpress from https://github.com/Extra-Chill/homeboy-extensions
• Extension revision: 3b20ed07
• Action: unknown@unknown