Epic: -iser regeneration-cartridge pattern — wire all 28 -isers into boj-server (unified gated adapter)

[hyperpolymath]

Problem (systemic)

iseriser scaffolds 28 -iser generators; all run ad hoc and hand-commit generated/* → rot → fail gates. K9 surfaced first (only one with a CI gate). The estate has the central-trigger pattern (boj-build.yml→ssg-mcp); no -iser was given an equivalent. Surfaced via idaptik#77 → k9iser#8.

Reference implementation (DONE — pilot)

• k9iser#9 — codegen emits K9!+pedigree (0 err/warn vs canonical validator).
• boj-server#73 — k9iser-mcp cartridge + unified transaction-gated adapter (one internal listener, REST/SSE/GraphQL/gRPC → one gated dispatch → one Zig ABI; mirrors Idris2 exposureSatisfied; idris2 --check passes) + boj-rest SSE + doc reconciliation to ADR-0004. Elixir 177/177; zig ffi 16/16, adapter 5/5.
• k9iser-regen.yml merged into rsr-template-repo#58 / v3-templater#76 / reposystem#52.

Sub-issues

1. Roll the unified-gated-adapter + SSE + *-regen.yml pattern into the iseriser scaffold (supersedes the ssg-era 3-parallel-port adapter estate-wide; adds SSE + the transaction gate to every -iser).
2. http-capability-gateway tier-2 production-wiring — per ADR-0004 (accepted): mTLS-as-primary, E2E, benchmarks; fills Trustfile.a2ml tier-2 PENDING. ~8–12 wks. Tracks the existing ADR; does not duplicate it.
3. Idris2 as source-of-truth — generate/verify the Zig FFI from the Idris2 ABI instead of the current hand-mirrored dual-encoding (cross-checked only by tests). Affects ssg-mcp + k9iser-mcp + all future cartridges.
4. Stop committing generated/* — .gitignore + regenerate-on-trigger once the gateway is wired.

Dependency

Until the gateway (sub-issue 2) is production-wired, the unified core stays internal/loopback; K9 Dogfood Gate on consumers stays red (tracked, not masked). Sibling of #82/#83/#85 under #66.

🤖 Generated with Claude Code