[STRAT-001] Strategy evaluation provider and contract parity

[mrnicholasbcarter-code]

User story

Expose feature and expected-value evaluation as a governed provider.

Problem and target state

The current audit identifies a gap that blocks the policy-first, ecosystem-neutral Verdict control plane. Implement the smallest coherent slice described here; preserve existing behavior outside this boundary.

Scope and likely files

src/edge_mining_framework/evaluator.py, gate.py, package metadata

Acceptance criteria

• Provider returns typed evaluation, explainable rule outcomes, data freshness, and evidence references; unsafe operators remain rejected; package/repository naming and version metadata are made explicit; contract tests pass.

Dependencies and references

Depends on VER-004 and VER-009.

Verification plan

• Add or update fixtures at the contract boundary.
• Test success, denial, degraded, unavailable, timeout, and malformed-input paths where applicable.
• Demonstrate that advisory learning/retrieval/provider data cannot weaken hard policy.

Required implementation evidence

• Targeted unit tests and negative-path tests
• Integration/conformance test at the relevant repository boundary
• Security/privacy review for any boundary, persistence, provider, or execution change
• Documentation and migration notes updated
• git diff --check and repository verification commands pass
• Evidence receipt or reproducible test artifact linked in the implementation PR

Definition of done

• Contract and implementation are versioned and backwards-compatibility impact is documented
• Failure, timeout, stale-provider, unknown, and denial states are explicit
• No learning, retrieval, UI, or external provider can bypass Core eligibility or envelope enforcement
• Reviewers can reproduce the acceptance evidence from a clean checkout