B2: ship Hermes auto-capture pipeline

[samrusani]

Summary

• add the B2 auto-capture pipeline on top of the shipped Hermes provider and B1 contract foundation with alice_capture_candidates and alice_commit_captures
• implement operating modes manual, assist, and auto, plus deterministic idempotent and no-op behavior for repeated sync attempts
• persist non-auto-saved candidates for later review while preserving legacy fallback and existing Hermes provider architecture

Scope Notes

• auto-save allowlist categories: correction, preference, decision, commitment, waiting_for, blocker
• type-routed review category: note
• low-confidence or policy-disallowed candidates route to review rather than auto-save
• does not claim alice_review_queue or alice_review_apply as shipped in B2

Verification

• python3 scripts/check_control_doc_truth.py
• ./.venv/bin/python -m pytest tests/unit tests/integration -q
• ./.venv/bin/python scripts/run_hermes_memory_provider_smoke.py

Upgrade Overview

Protected Areas

• continuity APIs
• memory schema
• trust rules
• evidence pipeline

Compatibility Impact

This extends the existing Hermes bridge flow with capture extraction and commit policy while preserving the shipped provider, MCP fallback, and continuity semantics. Existing Hermes tools remain intact, and the new B2 capture surfaces layer on top of the existing continuity capture seam rather than replacing it.

Migration / Rollout

Deploy the Alice API and Hermes provider changes together so the B2 HTTP and MCP capture surfaces, commit policy logic, and provider sync behavior stay aligned. No review-action expansion is included in this sprint, so downstream consumers should keep using persisted review items as passive outputs only.

Operator Action

Validate the B2 operating modes manual, assist, and auto with the Hermes smoke flow. Confirm the auto-save allowlist categories correction, preference, decision, commitment, waiting_for, and blocker, and confirm note plus low-confidence candidates route to review persistence rather than memory writes.

Validation

Branch-local verification passed:

• python3 scripts/check_control_doc_truth.py -> PASS
• ./.venv/bin/python -m pytest tests/unit tests/integration -q -> 1188 passed in 191.85s (0:03:11)
• ./.venv/bin/python scripts/run_hermes_memory_provider_smoke.py -> PASS

Rollback

Revert the squash merge commit to restore the pre-B2 provider and continuity behavior, then re-run the Hermes smoke and full test suite before redeploying.