feat(callcenter): LanceMembrane::commit_event — the action-commit sole-writer sibling (gate 1)

The runtime-side gate-1 piece referenced by OGAR-AST-CONTRACT §3 (OGAR PR #11)
and CROSS_SESSION_COORDINATION.md grill #10. `commit_event(row) -> u64` is the
seam the Rubicon CommitHook lowers onto: on entering the Committed lifecycle
state, the binding builds a CognitiveEventRow from the OGAR ActionInvocation and
calls this; it returns the new monotonic Lance version (the crossing's audit
version).

Where project() projects a cognitive cycle (ShaderBus + MetaWord), commit_event
takes a caller-built CognitiveEventRow directly. Unlike project(), the action
commit is the authoritative audit event (the Rubicon crossing / rubberstamp), so
it ALWAYS ticks the version and fans out via the watcher — the server filter /
gate throttle cognitive-cycle fan-out, not an explicit committed action.

Kept on the concrete LanceMembrane, NOT on the zero-dep ExternalMembrane trait,
so the contract crate stays zero-dep and action commits never get forced through
the cognitive-cycle ShaderBus shape (the boundary agreed with the OGAR session).

Verified: cargo check -p lance-graph-callcenter (realtime + default) green;
test commit_event_ticks_version_and_returns_new passes.

https://claude.ai/code/session_01VysoWJ6vsyg3wEGc5v7T5v

Author: AdaWorldAPI

crates/lance-graph-callcenter/src/lance_membrane.rs

@@ -292,6 +292,35 @@ impl LanceMembrane {
         self.version.load(Ordering::Acquire)
     }
 
+    /// Append an externally-built commit row — the **action-commit** sole-writer
+    /// sibling of [`ExternalMembrane::project`].
+    ///
+    /// Where `project()` projects a cognitive cycle (`ShaderBus` + `MetaWord`),
+    /// `commit_event` takes a caller-built [`CognitiveEventRow`] directly. It is
+    /// the seam the Rubicon `CommitHook` lowers onto: on entering the `Committed`
+    /// lifecycle state, the binding builds the row from the OGAR
+    /// `ActionInvocation` and calls this. (See `ractor_actors::state_machine`
+    /// `CommitHook::on_commit` + `CROSS_SESSION_COORDINATION.md` grill #10.)
+    ///
+    /// Unlike `project()`, the action commit is the authoritative **audit** event
+    /// (the Rubicon crossing / rubberstamp), so it ALWAYS ticks the version and
+    /// fans out — the server filter / gate throttle cognitive-cycle fan-out, not
+    /// an explicit committed action.
+    ///
+    /// Returns the new monotonic Lance version (the same counter
+    /// [`version`](Self::version) reports; Phase D wires it to the Lance dataset
+    /// version). Kept on the concrete `LanceMembrane`, NOT on the zero-dep
+    /// `ExternalMembrane` trait, so the contract crate stays zero-dep and the
+    /// action-commit path never forces the cognitive-cycle `ShaderBus` shape.
+    pub fn commit_event(&self, row: CognitiveEventRow) -> u64 {
+        let version = self.version.fetch_add(1, Ordering::AcqRel) + 1;
+        #[cfg(feature = "realtime")]
+        self.watcher.bump(row);
+        #[cfg(not(feature = "realtime"))]
+        let _ = row; // without realtime there are no subscribers to fan out to
+        version
+    }
+
     /// Set the faculty context for the current cycle.
     ///
     /// Called by the orchestration layer (not by `ingest`) when
@@ -519,6 +548,21 @@ mod tests {
         );
     }
 
+    #[test]
+    fn commit_event_ticks_version_and_returns_new() {
+        // The action-commit sole-writer sibling: each call ticks the monotonic
+        // Lance version and returns the new value (the Rubicon crossing's audit
+        // version). Mirrors the OGAR `CommitHook::on_commit` lowering.
+        let m = LanceMembrane::new();
+        assert_eq!(m.version(), 0);
+        let v1 = m.commit_event(crate::external_intent::CognitiveEventRow::default());
+        assert_eq!(v1, 1);
+        assert_eq!(m.version(), 1);
+        let v2 = m.commit_event(crate::external_intent::CognitiveEventRow::default());
+        assert_eq!(v2, 2);
+        assert_eq!(m.version(), 2);
+    }
+
     #[test]
     fn project_emits_scalar_row() {
         let m = LanceMembrane::new();