fix(iwooos): project strict runtime closure

apps/web/src/lib/__tests__/security-asset-control-plane.test.ts

@@ -14,8 +14,8 @@ function payload(): SecurityAssetControlPlanePayload {
     status: "ready",
     source_status: "live_database_aggregate",
     summary: {
-      source_count: 9,
-      ready_source_count: 9,
+      source_count: 10,
+      ready_source_count: 10,
       unavailable_source_count: 0,
       managed_asset_count: 24,
       expected_asset_type_count: 28,
@@ -97,6 +97,24 @@ function payload(): SecurityAssetControlPlanePayload {
       failed_operation_count: 0,
       same_run_closed_loop_proven: false,
       same_run_closed_loop_count: 0,
+      strict_runtime_completion: {
+        schema_version: "ai_agent_strict_runtime_completion_v2",
+        runtime_contract_schema_version:
+          "ai_automation_runtime_completion_contract_v2",
+        contract_compatible: true,
+        completion_percent: 0,
+        required_stage_count: 18,
+        present_stage_count: 17,
+        missing_stage_count: 1,
+        same_run_correlation: false,
+        full_trace_same_run_correlation_proven: false,
+        execution_loop_closed: false,
+        closed: false,
+        reason_code: "strict_runtime_receipts_incomplete",
+        cache_fallback_active: false,
+        raw_run_identity_returned: false,
+        raw_stage_receipts_returned: false,
+      },
     },
     security_audit: {
       k8s_execution_audit_count_24h: 2,
@@ -222,6 +240,20 @@ describe("security asset control plane projection", () => {
     expect(isSecurityAssetControlPlanePayload(unsafeCollectorIdentity)).toBe(
       false,
     );
+
+    const inconsistentStrictRuntime = {
+      ...safe,
+      ai_automation: {
+        ...safe.ai_automation,
+        strict_runtime_completion: {
+          ...safe.ai_automation.strict_runtime_completion,
+          closed: true,
+        },
+      },
+    };
+    expect(isSecurityAssetControlPlanePayload(inconsistentStrictRuntime)).toBe(
+      false,
+    );
   });
 
   it("does not show healthy before same-run closure is proven", () => {