[COCK-001] Control-plane API client and evidence dashboard

[mrnicholasbcarter-code]

User story

Replace cockpit mock state with typed Core/Node control-plane data.

Problem and target state

The current audit identifies a gap that blocks the policy-first, ecosystem-neutral Verdict control plane. Implement the smallest coherent slice described here; preserve existing behavior outside this boundary.

Scope and likely files

src/lib/tradingStore.ts, src/hooks/, src/components/, tests/

Acceptance criteria

• Dashboard displays provider health, decisions, envelopes, verification, evidence, and audit states from versioned APIs/events; mock data is isolated behind an explicit dev adapter; loading/error/degraded/denied states are tested; no policy decisions are made in UI.

Dependencies and references

Depends on NOD-001, NOD-002, VER-011, and CTX-001.

Verification plan

• Add or update fixtures at the contract boundary.
• Test success, denial, degraded, unavailable, timeout, and malformed-input paths where applicable.
• Demonstrate that advisory learning/retrieval/provider data cannot weaken hard policy.

Required implementation evidence

• Targeted unit tests and negative-path tests
• Integration/conformance test at the relevant repository boundary
• Security/privacy review for any boundary, persistence, provider, or execution change
• Documentation and migration notes updated
• git diff --check and repository verification commands pass
• Evidence receipt or reproducible test artifact linked in the implementation PR

Definition of done

• Contract and implementation are versioned and backwards-compatibility impact is documented
• Failure, timeout, stale-provider, unknown, and denial states are explicit
• No learning, retrieval, UI, or external provider can bypass Core eligibility or envelope enforcement
• Reviewers can reproduce the acceptance evidence from a clean checkout