Module trust 

TrustedGraphView (P0): the only way the Context Compiler may query the reality graph. Enforces the trust contract (docs/SYSTEM_DESIGN.md §5):

• STALE facts (evidence whose file changed since indexing) are excluded from every trusted traversal and reported as warnings.
• Provenance policy: extracted/resolved/observed/declared facts are trusted by default; INFERRED facts below the confidence floor are excluded unless include_low_confidence_inference is set.
• No transformation may strengthen a claim: the view only filters, it never rewrites provenance.

Structs

TrustPolicy

Trust policy applied to graph queries. STALE facts are always excluded; the remaining provenance classes are gated here.

TrustedGraphView

Filtered, policy-governed view over the reality graph.