feat(moments): mount the corpus by proposal - a pass and an open-after-moment signal, both stopping at the operator (milestone 458 step 7, #4925)

A rule written before moments existed is mounted on nothing. Step 7 records,
per (rule, moment), whether it belongs there and who said so:

- rule_moment_judgments (migration 0118, backup v23): suggested / confirmed /
  rejected, from a pass, the signal, or an edit. Moment "" is "no moment fits".
- The pass: rules_to_mount lists unjudged rules; propose_rule_moments records
  suggestions that mount nothing; rule_moment_proposals and
  judge_rule_moments put them to the operator. A confirm mounts, a reject is
  kept so the pair is never proposed again. Same service behind REST and a
  "Waiting on you" panel in Settings > Moments.
- Edits are judgments: set_rule_moments, the one mount write path, confirms
  what was added and rejects what was removed in the same transaction.
- The signal: scribe_moment.sh keeps a per-session acts ledger; when a rule
  is opened, scribe_record_opened.sh sends the last three minutes of it to
  /api/plugin/rule-opened. The acts resolve through the install's mappings;
  work.run and work.change are not evidence. Counted per distinct session
  with lesson_rules' evidence model, and once due the open returns one line
  asking the reader to offer the mount.
- scribe_session_end.sh removes the session's scribe-moment files.

Plugin 2026.10.05.2003.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/scribe/routes/retrieval.py

@@ -20,6 +20,7 @@ from quart import Blueprint, jsonify, request
 from scribe.auth import get_current_user_id, login_required
 from scribe.services import moment_actions as moment_actions_svc
 from scribe.services import moments as moments_svc
+from scribe.services import rule_moment_judgments as judgments_svc
 from scribe.services import rulebooks as rulebooks_svc
 from scribe.services.retrieval_telemetry import moment_usage
 from scribe.services.retrieval_tuning import set_dial, current_settings, tuning_history
@@ -177,3 +178,27 @@ async def map_action_route():
 @login_required
 async def unmap_action_route():
     return await _mapping_change(moment_actions_svc.unmap_action)
+
+
+@retrieval_bp.route("/moments/proposals", methods=["GET"])
+@login_required
+async def moment_proposals_route():
+    """The moment proposals waiting on a judgment (milestone 458 step 7) —
+    `rule_moment_proposals`' payload, from the same service. `?rule_id=`
+    narrows to one rule, for the rule editor."""
+    try:
+        rule_id = int(request.args.get("rule_id") or 0)
+    except ValueError:
+        return jsonify({"error": "rule_id must be a whole number"}), 400
+    return jsonify(await judgments_svc.pending(get_current_user_id(), rule_id=rule_id or None))
+
+
+@retrieval_bp.route("/moments/proposals/judge", methods=["POST"])
+@login_required
+async def judge_moment_proposals_route():
+    """Confirm or reject proposals: `{"judgments": [{rule_id, moment, verdict,
+    note}]}` — `judge_rule_moments` from the browser. A confirm mounts."""
+    data = await request.get_json(silent=True)
+    if not isinstance(data, dict) or not isinstance(data.get("judgments"), list):
+        return jsonify({"error": "Expected {\"judgments\": [...]}"}), 400
+    return jsonify(await judgments_svc.judge(get_current_user_id(), data["judgments"]))