feat: deterministic cClassTrib resolver + gated CCLASSTRIB auto-apply (default OFF), RTC panel summary; 1.1.9

- resolver (rules RTC-R0..R4/A1..A3/G1..G2) over the official cClassTrib table 2026-06-22 and LC 214/2025 annexes; local vs official catalog comparison
- ONE root-cause RTC blocker per product (missing/unresolved/ambiguous/conflict/official mismatch/catalog outdated/evidence missing)
- auto-apply: C000025.CCLASSTRIB only, three switches (FIREBIRD_WRITES + RTC_AUTO_APPLY_ENABLED + Hub authorization), per-product re-read and re-decision, never overwrites, rowcount 1, audit table rtc_write_audits (migration 0027)
- copy-only write E2E (280/280 applied, only CCLASSTRIB changed, 2nd run 0 writes, stale decision 0 writes); real databases untouched
- docs: cclasstrib_resolution, rtc_auto_apply, unified_fiscal_completeness

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

central/app/api.py

@@ -11,6 +11,7 @@ from .classification import ENGINE_VERSION, Classifier
 from .config import settings
 from .datasets.service import DatasetService
 from .jobs import SYNC_KINDS, claim_next_job, complete_job, create_job, fail_job, schedule_automatic_sync
+from .rtc_audit import record_rtc_write_audits
 from .blocked_products import list_blockers, resolve_blocker, resolve_product_blockers, resolve_stale_fiscal_blockers, upsert_blocker
 from .context_keys import validate_entry
 from .models import AgentSnapshot, BlockedProduct, FiscalContextEntry, ClassificationCache, ClassificationRequest, ClassificationResult, Dataset, Installation, Job
@@ -393,7 +394,9 @@ def router(session_factory, bootstrap_token):
                 record_event(session, tenant_id=agent.tenant_id, installation_id=installation.id, agent_id=agent.id, severity="INFO", event_type="JOB_STARTED", message=f"Job {job.kind} started", context={"kind": job.kind}, job_id=job.id)
                 session.commit()
             logger.info("job claimed job_id=%s agent_id=%s kind=%s", job.id, agent.id, job.kind)
-            return _job_view(job)
+            view = _job_view(job)
+            view["authorizations"] = {"rtc_auto_apply": bool(installation is not None and installation.rtc_auto_apply_authorized)}      # decided centrally, per installation, default OFF
+            return view
         finally: session.close()
 
     @routes.get("/jobs/global")
@@ -427,6 +430,8 @@ def router(session_factory, bootstrap_token):
                 upsert_blocker(session, agent.tenant_id, blocker, installation_id=installation.id if installation else None)
             for product_code in result_summary.get("resolved_products", []):
                 resolve_product_blockers(session, agent.tenant_id, product_code, installation_id=installation.id if installation else None)
+            if installation is not None:
+                record_rtc_write_audits(session, tenant_id=agent.tenant_id, installation=installation, agent=agent, job_id=job_id, rtc_auto_apply=result_summary.get("rtc_auto_apply"))
             if installation is not None and (result_summary.get("fiscal_context") or {}).get("evaluated_all"):
                 resolve_stale_fiscal_blockers(session, agent.tenant_id, installation.id, pass_started)
             if not complete_job(session, job, result_summary): raise HTTPException(409, "job is not RUNNING")