[appleweiping]

Summary

• Add a bounded, deterministic assignment/aggregate-score edge plan with exact invitation, group, paper, reviewer, label, and SHA-256 binding.
• Keep the default path offline/dry-run. Explicit publishing requires an injected transport and exact plan digest confirmation; the transport contract requires atomic create-only insertion, not bulk upsert.
• Reconcile bounded batches through read-back, issue incomplete receipts after ambiguous partial failures, and persist one atomic no-overwrite JSON evidence file.
• Add a synthetic in-memory example, protocol/threat documentation, and adversarial tests for generator ceilings, concurrent divergence, partial writes, and destination races.

This is not a live OpenReview publisher. No real API write adapter, venue credentials, or actual OpenReview writes are included. A future adapter must separately prove exact read completeness and atomic create-only semantics.

Verification

• Windows: 855 passed, 1 skipped; pure branch coverage 2110/2318 = 91.03%; new module 95.99% combined branch/statement coverage.
• Ruff format/check, strict mypy, Bandit, and locked dependency audit passed.
• Clean v0.13.0 wheel and sdist built; wheel installed into a fresh virtual environment and public imports passed.
• All tests use an injected in-memory transport; no test contacted OpenReview.

Assisted-by: OpenAI Codex