feat(contracts): verify registry-fetch smoke check + update vendored $id to resolvable Pages URL

- Update vendored v0.1.0 common/evaluation-result schema $id values from
  the dead schemas.coding-autopilot.dev namespace to the resolvable Pages
  registry URL, matching the portfolio-wide convention from cas-contracts
  plan 32-01
- Recompute sha256 in provenance.json for the re-vendored files
- Update verify_vendored_contract()'s two hardcoded $id equality checks
  to match the new value
- Wire a new registry-smoke CI job invoking cas_evals.registry_check
  against the live Pages registry, isolated from the offline verify matrix
  so a transient network failure doesn't block unrelated merges
- Regenerate releases/v0.2.0/manifest.json: its provenanceDigest is a
  sha256 of provenance.json, which changed as a direct consequence of the
  re-vendor above (Rule 3 auto-fix: this is a blocking downstream effect
  of the provenance.json edit required by this task, not new scope)
- REQ-1.4.11

Author: Aitomates

.github/workflows/ci.yml

@@ -26,3 +26,25 @@ jobs:
       - run: python -m cas_evals.cli benchmarks/v0.2/golden.json
       - run: python -m cas_evals.cli benchmarks/v0.2/adversarial.json
       - run: python -m cas_evals.release --check
+
+  registry-smoke:
+    # Separate from the offline `verify` matrix job because this job needs
+    # network egress and should not block the offline unit-test matrix on
+    # transient network failures. As of this job's introduction, the
+    # cas-contracts PR from plan 32-01 (rewriting schema $id to this same
+    # Pages registry URL) has not yet merged. This job checks paths that
+    # already resolve today regardless of that PR's merge status -- the
+    # v0.1/v1.0/v1.1 registry lines were published by prior phases' pages.yml
+    # work. Merging 32-01 only changes the $id field text embedded inside
+    # those already-resolving files, not which URLs exist.
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        with:
+          python-version: "3.11"
+      - run: python -m pip install -e .
+      - run: python -m cas_evals.registry_check

releases/v0.2.0/manifest.json

@@ -3,7 +3,7 @@
   "releaseVersion": "v0.2.0",
   "releasedAt": "2026-06-11T12:00:00Z",
   "sharedContract": {
-    "provenanceDigest": "sha256:3d82b533691c779e9cf2361f0491a2d8873ef71e22f279c5cfdfc784515be9a5",
+    "provenanceDigest": "sha256:d206cb050c42c80d10d37b418f6a6bbb9da08aba0ae76e77d3344108613829a2",
     "release": "https://github.com/Coding-Autopilot-System/cas-contracts/releases/tag/v0.1.0",
     "repository": "https://github.com/Coding-Autopilot-System/cas-contracts",
     "tag": "v0.1.0"

src/cas_evals/contracts.py

@@ -61,9 +61,9 @@ def verify_vendored_contract() -> dict[str, Any]:
 
     common = _load_json(VENDOR_DIR / "common.schema.json")
     evaluation = _load_json(VENDOR_DIR / "evaluation-result.schema.json")
-    if common.get("$id") != "https://schemas.coding-autopilot.dev/v0.1/common.schema.json":
+    if common.get("$id") != "https://coding-autopilot-system.github.io/cas-contracts/registry/v0.1/common.schema.json":
         raise ContractValidationError("unexpected common schema identity")
-    if evaluation.get("$id") != "https://schemas.coding-autopilot.dev/v0.1/evaluation-result.schema.json":
+    if evaluation.get("$id") != "https://coding-autopilot-system.github.io/cas-contracts/registry/v0.1/evaluation-result.schema.json":
         raise ContractValidationError("unexpected evaluation schema identity")
     if evaluation["allOf"][0].get("$ref") != "common.schema.json#/$defs/lifecycleMetadata":
         raise ContractValidationError("evaluation schema does not reference the vendored common schema")

vendor/cas-contracts/v0.1.0/common.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.coding-autopilot.dev/v0.1/common.schema.json",
+  "$id": "https://coding-autopilot-system.github.io/cas-contracts/registry/v0.1/common.schema.json",
   "title": "CAS Common Definitions",
   "$defs": {
     "actor": {

vendor/cas-contracts/v0.1.0/evaluation-result.schema.json

@@ -1,6 +1,6 @@
 {
     "$schema":  "https://json-schema.org/draft/2020-12/schema",
-    "$id":  "https://schemas.coding-autopilot.dev/v0.1/evaluation-result.schema.json",
+    "$id":  "https://coding-autopilot-system.github.io/cas-contracts/registry/v0.1/evaluation-result.schema.json",
     "title":  "EvaluationResult",
     "type":  "object",
     "allOf":  [

vendor/cas-contracts/v0.1.0/provenance.json

@@ -5,12 +5,12 @@
   "schemas": {
     "common.schema.json": {
       "blobSha": "0eec265131a301f924a5ca7fb61718f5bdb14012",
-      "sha256": "c7ce72a6f5da8394e48f2421820588a8142546962e05152997bd1e6ced994928",
+      "sha256": "6c86075df043ec924f6b7aa004c6a694916a6c3d7a822dda4235f1ee8368f92a",
       "source": "https://raw.githubusercontent.com/Coding-Autopilot-System/cas-contracts/v0.1.0/schemas/v0.1/common.schema.json"
     },
     "evaluation-result.schema.json": {
       "blobSha": "719f46a6ee9024fa4462094c3d0c21d838c20f17",
-      "sha256": "be6d3216c95cfa6d2ccda908ff089010765b1c70223a920bfe3cb70a0cd24df5",
+      "sha256": "ecb222d70b389e2d47de5bb1344dd4e5ae1043c0e76f8608aa99f42e491ce384",
       "source": "https://raw.githubusercontent.com/Coding-Autopilot-System/cas-contracts/v0.1.0/schemas/v0.1/evaluation-result.schema.json"
     }
   }