Add socketRisk (9th filter result) and lastRevalidated (nullable ISO date) to the library-decision trace schema. Downstream enforcement layers (evaluate-library skill, check.mjs major-bump mode, revalidate.mjs cron) all depend on these fields being validated at the schema layer first. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>