proof(conformance): fix corpus to match grammar; wire conformance gate

Wire the parser conformance corpus into CI and fix the divergences found
when it was first run end-to-end against the real parser.

Root causes fixed:

* run_conformance.sh invoked a non-existent entry point
  (`Phronesis.CLI.parse`), so the corpus had never actually executed.
  Replaced with `mix run --no-start -e` calling the real
  `Phronesis.parse/1` (Lexer.tokenize |> Parser.parse). `--no-start`
  avoids booting the ra consensus supervision tree just to parse.

* Four "valid" samples were written against a syntax the language does
  not have (per spec/grammar.ebnf v0.2.0, whose source is parser.ex):
    - v02/v03/v07 used `IF` as the policy *body*; the grammar requires
      `logical_expr THEN action`, with `IF` only as a conditional
      *action* after THEN. They also dropped the required `:` on
      PRIORITY:/EXPIRES:/CREATED_BY:, used atoms (:valid), and string
      metadata.
    - v05 used `x = expr` let-bindings, for which there is no production.
  Rewritten to the real grammar while preserving each file's intent
  (conditional action, AND/OR connectives, IMPORT + module-qualified
  call, nested conditional action). Note: parenthesised *logical*
  expressions are not in the grammar, so v03 uses the equal-precedence
  left-associative form `a AND b OR c` = `((a AND b) OR c)`.

The parser was correct throughout; the corpus and the (also-broken)
runner were the defects. Verified locally against the actual
lib/phronesis/{lexer,parser}.ex: 7/7 valid parse, 3/3 invalid rejected.

New gate conformance.yml runs the corpus on every push/PR, reusing the
estate-vetted checkout + setup-beam pins and the project toolchain
(Elixir 1.16 / OTP 26 per .tool-versions).

https://claude.ai/code/session_01DQACj3RFmAPZaBPgR9SAaS

Author: claude

.github/workflows/conformance.yml

@@ -0,0 +1,52 @@
+# SPDX-License-Identifier: MPL-2.0
+# conformance.yml — parser conformance gate for the Phronesis grammar.
+#
+# Runs the real parser (Phronesis.parse/1 = Lexer.tokenize |> Parser.parse) over
+# the conformance corpus:
+#   * conformance/valid/*.phr   MUST parse  (exit 0)
+#   * conformance/invalid/*.phr MUST fail   (exit non-zero)
+# The corpus is the executable contract for spec/grammar.ebnf (v0.2.0). Any drift
+# between the parser and the documented grammar turns this gate red.
+name: Conformance
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+# Estate guardrail: cancel superseded runs (read-only check, safe to cancel).
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  conformance:
+    name: Grammar conformance (parser vs corpus)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      # Match the project toolchain (.tool-versions: elixir 1.16.0 / erlang 26.2.1).
+      # Pinned to the estate-vetted setup-beam SHA already used by hypatia-scan.yml.
+      - name: Setup Elixir
+        uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.18.2
+        with:
+          elixir-version: '1.16'
+          otp-version: '26'
+
+      - name: Fetch dependencies
+        run: mix deps.get
+
+      # Compile without --warnings-as-errors: the gate measures conformance, not
+      # lint. A genuine compile break still fails here (mix compile exits non-zero).
+      - name: Compile
+        run: mix compile
+
+      - name: Run conformance corpus
+        run: ./conformance/run_conformance.sh

conformance/run_conformance.sh

@@ -20,7 +20,7 @@ if [[ -n "${1:-}" ]]; then
     # shellcheck disable=SC2206 # deliberate word-splitting of caller's string
     PARSER_CMD=(${1})
 else
-    PARSER_CMD=(mix run -e 'Phronesis.CLI.parse(System.argv())' --)
+    PARSER_CMD=(mix run --no-start -e 'System.halt(case Phronesis.parse(File.read!(Enum.at(System.argv(), 0))) do {:ok, _} -> 0; _ -> 1 end)' --)
 fi
 
 PASS=0

conformance/valid/v02_if_then.phr

@@ -1,11 +1,9 @@
 # SPDX-License-Identifier: MPL-2.0
-# Conformance: IF/THEN/ELSE conditional in policy
+# Conformance: IF/THEN/ELSE conditional action (grammar §5 conditional_action)
 
 POLICY conditional_check:
-  IF status == :valid THEN
-    ACCEPT "Status is valid"
-  ELSE
-    REJECT "Status is invalid"
-PRIORITY 50
-EXPIRES "2030-12-31"
-CREATED_BY "test_suite"
+  value > 0
+  THEN IF value > 100 THEN ACCEPT("High value") ELSE REJECT("Low value")
+  PRIORITY: 50
+  EXPIRES: never
+  CREATED_BY: test_suite

conformance/valid/v03_and_or.phr

@@ -1,11 +1,11 @@
 # SPDX-License-Identifier: MPL-2.0
-# Conformance: compound conditions with AND/OR
+# Conformance: compound conditions with AND/OR (grammar §6 logical_expr)
+# AND/OR are equal-precedence, left-associative, so this parses as
+#   ((score > 50 AND status == "active") OR override == true).
 
 POLICY compound_logic:
-  IF (score > 50 AND status == :active) OR override == true THEN
-    ACCEPT "Conditions met"
-  ELSE
-    REJECT "Conditions not met"
-PRIORITY 75
-EXPIRES "2030-12-31"
-CREATED_BY "test_suite"
+  score > 50 AND status == "active" OR override == true
+  THEN ACCEPT("Conditions met")
+  PRIORITY: 75
+  EXPIRES: never
+  CREATED_BY: test_suite

conformance/valid/v05_import.phr

@@ -1,15 +1,12 @@
 # SPDX-License-Identifier: MPL-2.0
-# Conformance: IMPORT clause
+# Conformance: IMPORT clause + module-qualified call (grammar §3, §8)
 
 IMPORT Std.BGP
 IMPORT Std.RPKI
 
 POLICY import_test:
-  rpki_result = Std.RPKI.validate(route)
-  IF rpki_result == :valid THEN
-    ACCEPT "RPKI validation passed"
-  ELSE
-    REJECT "RPKI validation failed"
-PRIORITY 100
-EXPIRES "2030-12-31"
-CREATED_BY "test_suite"
+  Std.RPKI.validate(route) == "valid"
+  THEN ACCEPT("RPKI validation passed")
+  PRIORITY: 100
+  EXPIRES: never
+  CREATED_BY: test_suite

conformance/valid/v07_nested.phr

@@ -1,14 +1,9 @@
 # SPDX-License-Identifier: MPL-2.0
-# Conformance: nested conditions
+# Conformance: nested conditional actions (grammar §5 conditional_action)
 
 POLICY nested_check:
-  IF level > 1 THEN
-    IF score > 80 THEN
-      ACCEPT "High score at high level"
-    ELSE
-      REJECT "Low score at high level"
-  ELSE
-    ACCEPT "Any score at base level"
-PRIORITY 150
-EXPIRES "2030-12-31"
-CREATED_BY "test_suite"
+  level > 1
+  THEN IF score > 80 THEN ACCEPT("High score at high level") ELSE REJECT("Low score at high level")
+  PRIORITY: 150
+  EXPIRES: never
+  CREATED_BY: test_suite