verify-harness coverage gaps: actuator live loops, missing invariants, blind trade caravan path

[alexanderolvera]

Update (2026-07-24): two tools now have invariant coverage that this issue originally listed as snapshot-only — jobs_and_labor (jobs_and_labor_wellformed) and military (military_roster_wellformed) both landed in test/invariants.mjs. Removed from the list below.

Verify-harness gaps still open from the post-v1.0.0 review:

• No live confirm->apply->undo loop for work_order_create/work_order_cancel/assign_work_detail. blueprintActuatorChecks (verify.mjs) is still the only routine that exercises the full mutating loop and restores the fixture; the other actuators only get dry-run reachability + pure-logic unit tests.
• Goldens with no invariant spec (snapshot-only): artifacts_and_engravings, chronicle, defenses, game_data, identify, site_history, threats, unmet_needs. The chronicle cursor contract (since/pruned/limit) is particularly invariant-shaped and is currently only frozen as bytes.
• trade's active-caravan path is still authored blind — confirmed the current golden (test/golden/trade.json) still has caravan_count: 0, caravans: []. Approaching/AtDepot/Leaving states, leaving_in_days, and merchant goods have never been observed live. Capture a golden when a caravan is on-site.
• No golden exists for work_order_list (fixture predates the tool) — confirmed still missing from test/golden/.

(run_lua's zero coverage is tracked with the T0 gate issue.)