feat(capability): add release scoped shadow bindings

modules/commit/domain/commit.go

@@ -98,19 +98,26 @@ func validDigest(value string) bool {
 // Execute records UNKNOWN_OUTCOME rather than silently retrying an ambiguous
 // external mutation.
 func Execute(action commitcontract.AuthorizedAction, attemptID commitcontract.ActionAttemptID, executor ports.Executor) (commitcontract.ActionAttempt, error) {
+	attempt, _, err := ExecuteWithResult(action, attemptID, executor)
+	return attempt, err
+}
+
+// ExecuteWithResult preserves executor evidence for the Commit runtime while
+// keeping the original domain API compatible with existing callers.
+func ExecuteWithResult(action commitcontract.AuthorizedAction, attemptID commitcontract.ActionAttemptID, executor ports.Executor) (commitcontract.ActionAttempt, ports.ExecutionResult, error) {
 	if action.State != commitcontract.ActionAuthorized || attemptID == "" {
-		return commitcontract.ActionAttempt{}, ErrUnknownOutcome
+		return commitcontract.ActionAttempt{}, ports.ExecutionResult{}, ErrUnknownOutcome
 	}
 	attempt := commitcontract.ActionAttempt{ID: attemptID, AuthorizedID: action.ID, IntentID: action.Proposal.IntentID, State: commitcontract.ActionExecuting}
 	result := executor.Execute(action)
 	if !result.Known {
 		attempt.State = commitcontract.ActionUnknownOutcome
-		return attempt, ErrUnknownOutcome
+		return attempt, result, ErrUnknownOutcome
 	}
 	if result.Succeeded {
 		attempt.State = commitcontract.ActionSucceeded
-		return attempt, nil
+		return attempt, result, nil
 	}
 	attempt.State = commitcontract.ActionFailed
-	return attempt, nil
+	return attempt, result, nil
 }

modules/commit/ports/executor.go

@@ -19,6 +19,7 @@ type Reconciler interface {
 type ExecutionResult struct {
 	Succeeded bool
 	Known     bool
+	Receipt   *commit.ExecutionReceipt
 }
 
 // AuthorityValidator is the remote-capable boundary to the Authority owner.