Fix: preserve independent validation contracts

[ivory-code]

Summary

• Keep independent behavior commits separate even when they edit one shared analyzer file.
• Prevent partial identifier matches from turning unrelated symbols into routing evidence.
• Preserve every changed test and benchmark contract while keeping qa run bounded to one selected command.
• Align the English and Korean README, agent schema, command reference, architecture notes, and roadmap with the actual execution boundary.

Behavioral Contract

QAMap must not merge unrelated commits solely because they share a central file, and identifiers such as requireDirectory must not become redirect or navigation evidence. When one change modifies several independent validation contracts, QAMap selects one command for qa run, reports the remaining commands through route.additionalCommands, and keeps every unexecuted command marked not run.

Evidence

• Minimized negative control: shared analyzer files do not merge independent feature commits
• Routing boundary and positive control: routing evidence respects identifier boundaries without losing real redirect symbols
• Multi-contract fixture: qa preserves every changed test and benchmark validation contract

Checks

Check only what applies. Mark the rest N/A in Review Notes.

• Focused regression test
• pnpm test
• pnpm bench:ci for inference, routing, trace, or output
• pnpm bench:execution for E2E compiler or execution fixtures
• pnpm scan for scanner, security, or repository policy
• pnpm plugin:check and pnpm plugin:smoke for plugin changes
• Documentation links and commands verified

Public OSS Check

• No private repository, source, path, customer data, credential, or internal smoke output is included.
• Shared inference has unrelated positive and negative coverage, or this is not applicable.
• User-facing commands and claims match actual behavior.

Review Notes

The agent schema change is additive: route.additionalCommands is optional and the readiness enum gains additional-commands-required. qa run still executes exactly one repository-owned command. The full suite passed with 412 tests, 35 static benchmark contracts, 3 execution benchmark contracts, plugin checks, package smoke validation, and coverage above the configured 80% thresholds. This PR does not bump or publish a version.