refactor(application): version quarantine state contracts

Author: morluto

src/flameox/application/quarantine.py

@@ -22,7 +22,7 @@
 
 
 class _QuarantineManifest(ContractModel):
-    schema_version: int = 1
+    schema_version: Literal[2] = 2
     quarantine_id: str
     operation: str
     detected_at: datetime

tests/application/test_repair.py

@@ -194,6 +194,23 @@ def test_quarantine_rejects_recovery_options_that_disagree_with_state(
     assert error.value.code is ErrorCode.WORKSPACE_INVALID
 
 
+def test_quarantine_rejects_version_one_manifests(tmp_path: Path) -> None:
+    workspace = Workspace.initialize(tmp_path)
+    source = workspace.paths.staging / "partial.bin"
+    source.write_bytes(b"partial")
+    service = QuarantineService(workspace)
+    quarantined = service.quarantine(source, reason="fixture", operation="test")
+    manifest_path = workspace.paths.quarantine / quarantined.quarantine_id / "manifest.json"
+    serialized = quarantined.model_dump(mode="json")
+    serialized["schema_version"] = 1
+    manifest_path.write_text(json.dumps(serialized))
+
+    with pytest.raises(DomainError) as error:
+        service.restore(quarantined.quarantine_id)
+
+    assert error.value.code is ErrorCode.WORKSPACE_INVALID
+
+
 def test_quarantine_rejects_symbolic_link_sources(tmp_path: Path) -> None:
     workspace = Workspace.initialize(tmp_path)
     target = workspace.paths.staging / "target.bin"