chore(work): finish 01-trace-schema-extensions

docs/work/2026-05-14-ci-security-and-supply-chain/01-trace-schema-extensions/_story.md

@@ -3,7 +3,7 @@ id: 01-trace-schema-extensions
 epic: 2026-05-14-ci-security-and-supply-chain
 title: Trace schema extensions (socketRisk + lastRevalidated)
 type: technical-story
-status: in-progress
+status: done
 feature: scripts
 depends-on: []
 blocks:
@@ -46,4 +46,4 @@ Every downstream enforcement layer (the evaluate-library skill's 9th filter, the
 
 ## Tasks
 
-- [ ] Extend `scripts/library-decisions/schema.mjs` adding `socketRisk` (union: `"clean" | "flagged" | string`) to the `filter-results` Zod object and `lastRevalidated` (nullable ISO-date string) to the trace frontmatter schema; update `docs/library-decisions/_template.md` to document both fields with their enum values; add test cases to `schema.test.mjs` covering `socketRisk` round-trips (all three variants), `lastRevalidated` ISO + null acceptance, and missing-`socketRisk` rejection; all gates pass on this single commit.
+- [x] Extend `scripts/library-decisions/schema.mjs` adding `socketRisk` (union: `"clean" | "flagged" | string`) to the `filter-results` Zod object and `lastRevalidated` (nullable ISO-date string) to the trace frontmatter schema; update `docs/library-decisions/_template.md` to document both fields with their enum values; add test cases to `schema.test.mjs` covering `socketRisk` round-trips (all three variants), `lastRevalidated` ISO + null acceptance, and missing-`socketRisk` rejection; all gates pass on this single commit.

docs/work/_state.json

@@ -1,5 +1,5 @@
 {
-  "updated_at": "2026-05-14T16:59:14.033Z",
+  "updated_at": "2026-05-14T17:06:12.047Z",
   "epics": {
     "2026-05-13-binder-wrap-helper": {
       "status": "done",
@@ -45,10 +45,10 @@
       "prd": "docs/work/prds/2026-05-14-ci-security-and-supply-chain.prd.md",
       "stories": {
         "01-trace-schema-extensions": {
-          "status": "in-progress",
+          "status": "done",
           "title": "Trace schema extensions (socketRisk + lastRevalidated)",
           "ac_total": 1,
-          "ac_completed": 0,
+          "ac_completed": 1,
           "depends_on": [],
           "blocks": []
         },
@@ -260,14 +260,19 @@
   "ready": [
     {
       "epic": "2026-05-14-ci-security-and-supply-chain",
-      "story": "01-trace-schema-extensions",
+      "story": "02-socket-integration",
-      "title": "Trace schema extensions (socketRisk + lastRevalidated)"
+      "title": "Socket integration (skill + CI)"
     },
     {
       "epic": "2026-05-14-ci-security-and-supply-chain",
       "story": "03-renovate-adoption",
       "title": "Renovate adoption"
     },
+    {
+      "epic": "2026-05-14-ci-security-and-supply-chain",
+      "story": "04-major-bump-reevaluation",
+      "title": "Major-bump re-evaluation flow"
+    },
     {
       "epic": "2026-05-14-ci-security-and-supply-chain",
       "story": "06-codeql-and-audit-signatures",
@@ -285,28 +290,11 @@
     }
   ],
   "blocked": [
-    {
-      "epic": "2026-05-14-ci-security-and-supply-chain",
-      "story": "02-socket-integration",
-      "title": "Socket integration (skill + CI)",
-      "waiting_on": [
-        "2026-05-14-ci-security-and-supply-chain/01-trace-schema-extensions"
-      ]
-    },
-    {
-      "epic": "2026-05-14-ci-security-and-supply-chain",
-      "story": "04-major-bump-reevaluation",
-      "title": "Major-bump re-evaluation flow",
-      "waiting_on": [
-        "2026-05-14-ci-security-and-supply-chain/01-trace-schema-extensions"
-      ]
-    },
     {
       "epic": "2026-05-14-ci-security-and-supply-chain",
       "story": "05-trace-revalidation-workflow",
       "title": "Trace revalidation workflow",
       "waiting_on": [
-        "2026-05-14-ci-security-and-supply-chain/01-trace-schema-extensions",
         "2026-05-14-ci-security-and-supply-chain/04-major-bump-reevaluation"
       ]
     },