Function execute 

pub fn execute(plan: &RetrievalPlan, inputs: &ExecutorInputs) -> ContextBundle

Execute a plan over the provided candidates.

Deterministic: same plan + same inputs always produce the same bundle. An invalid plan (schema/policy/scope) produces a blocked bundle whose audit drops every candidate; it never partially executes.