fix: add multi-dimensional index to contract-registry.yaml

Adds index.by_domain with pm2-self-heal and disk-gc-threat-response in
infrastructure group. All 28 contracts now accounted for in every index
dimension: by_category, by_domain, by_owner, by_trigger, by_sensitivity.

contract-registry.yaml

@@ -3,6 +3,19 @@
 # Maps every prose contract to its enforcement category, trigger mechanism,
 # dependencies, postconditions, and escalation rules.
 #
+# Contracts are indexed by:
+#   1. Enforcement category (compliance, monitoring, remediation, ...)
+#   2. Domain (hermes-agent, zulip, infrastructure, gpu, proxmox, litellm, ...)
+#   3. Owner (who runs it: abiba, mumuni, kwame, or none)
+#   4. Trigger type (scheduled, event_driven, passive, on_demand)
+#
+# Use the top-level `index` map for quick lookups by any dimension:
+#   - index.by_category: contract name → category
+#   - index.by_domain: domain → [contract names]
+#   - index.by_owner: owner → [contract names]
+#   - index.by_trigger: trigger type → [contract names]
+#   - index.by_sensitivity: sensitivity → [contract names]
+#
 # Schema reference: ~/.hermes/contract-registry.md
 #
 # Last updated: 2026-07-13
@@ -19,12 +32,233 @@ categories:
   - maintenance
   - reference
 
+domains:
+  - hermes-agent
+  - zulip
+  - infrastructure
+  - gpu
+  - proxmox
+  - litellm
+  - memory
+  - relay
+  - shared-patterns
+
+owners:
+  - abiba
+  - mumuni
+  - kwame
+
+trigger_types:
+  - scheduled
+  - event_driven
+  - passive
+  - on_demand
+  - none
+
 sensitivity_levels:
   - critical
   - high
   - normal
   - retired
 
+sensitivity_levels:
+  - critical
+  - high
+  - normal
+  - retired
+
+# ─── Multi-Dimensional Index ──────────────────────────────────
+# Quick lookups by any dimension. Generated from the contracts list.
+
+index:
+
+  # Contract name → category mapping
+  by_category:
+    compliance:
+      - hermes-key-enforcement
+      - hermes-config-template
+      - hermes-agent-baseline
+    monitoring:
+      - proxmox-monitor
+      - gpu-monitor
+      - infrastructure-monitoring
+      - zulip-health
+      - litellm-health
+    remediation:
+      - litellm-self-heal
+      - pm2-self-heal
+      - disk-gc-threat-response
+      - hermes-zulip-restore
+    build_deploy:
+      - hermes-zulip-plugin
+      - build-zulip-plugin
+      - stirling-pdf-agent-access
+    maintenance:
+      - memory-audit-maintenance
+      - gpu-fleet
+      - infrastructure-update
+    reference:
+      - infrastructure-control
+      - ra-h-os-custodianship-contract
+      - mumuni-delegation
+      - zulip-approval-fix
+      - zulip-oidc-redirect-fix
+      - hello-world
+      - zulip-adapter-lessons
+      - pi-approval-architecture
+    retired:
+      - zulip-mention-reliability
+      - zulip-self-heal
+
+  # Domain → contract names (natural grouping by subsystem)
+  by_domain:
+    hermes-agent:
+      - hermes-key-enforcement
+      - hermes-config-template
+      - hermes-agent-baseline
+      - mumuni-delegation
+    zulip:
+      - zulip-health
+      - hermes-zulip-restore
+      - hermes-zulip-plugin
+      - build-zulip-plugin
+      - zulip-approval-fix
+      - zulip-oidc-redirect-fix
+      - zulip-adapter-lessons
+      - zulip-mention-reliability
+      - zulip-self-heal
+    infrastructure:
+      - infrastructure-control
+      - infrastructure-monitoring
+      - infrastructure-update
+      - pm2-self-heal
+      - disk-gc-threat-response
+    gpu:
+      - gpu-monitor
+      - gpu-fleet
+    proxmox:
+      - proxmox-monitor
+    litellm:
+      - litellm-health
+      - litellm-self-heal
+    memory:
+      - memory-audit-maintenance
+    shared-patterns:
+      - ra-h-os-custodianship-contract
+      - pi-approval-architecture
+      - stirling-pdf-agent-access
+      - hello-world
+    retired:
+      - zulip-mention-reliability
+      - zulip-self-heal
+      - zulip-adapter-lessons
+      - pi-approval-architecture
+
+  # Owner → contract names (who runs it)
+  by_owner:
+    abiba:
+      - hermes-key-enforcement
+      - hermes-config-template
+      - hermes-agent-baseline
+      - proxmox-monitor
+      - gpu-monitor
+      - infrastructure-monitoring
+      - zulip-health
+      - litellm-health
+      - litellm-self-heal
+      - pm2-self-heal
+      - disk-gc-threat-response
+      - hermes-zulip-restore
+      - hermes-zulip-plugin
+      - build-zulip-plugin
+      - stirling-pdf-agent-access
+      - gpu-fleet
+      - infrastructure-update
+      - infrastructure-control
+      - zulip-adapter-lessons
+      - pi-approval-architecture
+      - zulip-approval-fix
+      - zulip-oidc-redirect-fix
+      - zulip-mention-reliability
+      - zulip-self-heal
+    mumuni:
+      - memory-audit-maintenance
+      - ra-h-os-custodianship-contract
+      - mumuni-delegation
+    kwame:
+      - hello-world
+
+  # Trigger type → contract names
+  by_trigger:
+    scheduled:
+      - hermes-key-enforcement
+      - hermes-config-template
+      - hermes-agent-baseline
+      - proxmox-monitor
+      - gpu-monitor
+      - infrastructure-monitoring
+      - zulip-health
+      - litellm-health
+      - memory-audit-maintenance
+      - infrastructure-update
+    event_driven:
+      - litellm-self-heal
+      - pm2-self-heal
+      - disk-gc-threat-response
+      - hermes-zulip-restore
+      - gpu-fleet
+      - zulip-oidc-redirect-fix
+    passive:
+      - infrastructure-control
+      - ra-h-os-custodianship-contract
+      - mumuni-delegation
+      - zulip-adapter-lessons
+      - pi-approval-architecture
+      - zulip-approval-fix
+    on_demand:
+      - hermes-zulip-plugin
+      - build-zulip-plugin
+      - stirling-pdf-agent-access
+      - hello-world
+    none:
+      - zulip-mention-reliability
+      - zulip-self-heal
+
+  # Sensitivity → contract names
+  by_sensitivity:
+    critical:
+      - hermes-key-enforcement
+      - proxmox-monitor
+      - gpu-monitor
+      - litellm-health
+      - litellm-self-heal
+      - disk-gc-threat-response
+      - gpu-fleet
+      - infrastructure-control
+    high:
+      - hermes-config-template
+      - infrastructure-monitoring
+      - zulip-health
+      - pm2-self-heal
+      - hermes-zulip-restore
+      - hermes-zulip-plugin
+      - build-zulip-plugin
+      - infrastructure-update
+      - ra-h-os-custodianship-contract
+      - mumuni-delegation
+    normal:
+      - hermes-agent-baseline
+      - stirling-pdf-agent-access
+      - memory-audit-maintenance
+      - zulip-approval-fix
+      - zulip-oidc-redirect-fix
+      - hello-world
+    retired:
+      - zulip-adapter-lessons
+      - pi-approval-architecture
+      - zulip-mention-reliability
+      - zulip-self-heal
+
 contracts:
 
   # ─── COMPLIANCE ───────────────────────────────────────────────