feat(consume): one source document took 8 of 8 delivered places, so cap it

Measured outside this repository on a 3206-concept bundle of a published
handbook: the code's own process overview contributes 28 of 3206 concepts
(0.87 %) and 117 488 of 1 469 225 source characters (8.0 %), and took 8 of 8
delivered places on one question and 7 of 8 on the known-positive -- which was
not delivered at all. Identical at 343 and 1651 concepts, so the cause is the
corpus's COMPOSITION, that it holds its own table of contents, and NOT its size.
Splitting the corpus would move the defect, not remove it: any corpus with a
contents list, a project overview or a summary document has the same property.

`--source-quota N` caps how many DELIVERED places one source document may take.
It cuts where the shortlist is cut -- before the pack, never inside the DP,
which maximises a sum over a set it is handed -- so the freed place goes to the
next candidate and `k` is still delivered in full.

DEFAULT 2 SINCE TODAY, and it is the third change here that alters a payload
with NO bundle changing (after `--tie-shared-rank` and `--stem-prefix`).
Opt-out `--no-source-quota` reproduces the previous excerpt order.

Swept over {2, 3, 4, off} on three bundles, with the fasit prefixes validated
against the bundle FIRST (that control caught a defect in the measuring query
itself -- it read the last id segment where the document is the first):

- K2, both bundles: at 2 and 3, hit@8 goes 5 of 6 to 6 of 6 with all five
  standing rank-1 rows unmoved. The recovered row had missed on every bundle and
  every configuration measured until now. At 4 and off it is 5 of 6.
- The handbook bundle: hit@8 2 of 6 -> 4 of 6, the known-positive from not
  delivered to rank 4, and the dominant document's share of delivered places
  8 of 8 -> 2 of 8 (7 of 8 -> 2 of 8 on the known-positive).
- 2 rather than 3 on rank alone: the recovered rows come in at 5 and 4 rather
  than 7 and 5.

WHAT THE GAIN IS NOT. hit@8 asks whether the gold DOCUMENT appears among the
delivered excerpts, and a document quota directly raises how many distinct
documents a payload holds, so that metric is not neutral with respect to this
rule. The five rows that were already rank 1 are neutral, and they did not move.

THE ADVERSE CASE IS NAMED, not left to a consumer. A bundle built from ONE
document carries the same `source_file` on every concept, so a quota applied
literally would deliver 2 excerpts where `k` were asked for -- a rule against
dominance turned into a rule against small bundles. The shortlist is topped back
up from the best-ranked over-quota candidates, which makes such a bundle
byte-identical to the quota being off, and a test holds it.

`--rarity-weight` was measured against the same defect and does NOT repair it:
it leaves the dominant document at 8 of 8 places on the question it floods,
delivers neither that answer nor the known-positive, and holds 5 of 6 on both K2
bundles. Combined with the quota it is worse than the quota alone (the
known-positive falls back out). It stays off.

The vocabulary stays CLOSED and the new code is published in all three places a
consumer can read it: `WITHHOLDING_RULES` (six -> seven),
`docs/consumption-contract.md` 5.3, and the generated SKILL.md -- verified by
reading the generated file, not the code that writes it. `source_quota_exceeded`
is a DIVERSITY drop and not a relevance one, so folding it into
`no_lexical_match` would tell a consumer the question reached nothing in a
concept the question in fact reached. `okf check --skill --payload` stays
conformant, 0 findings over 15 rules.

Editing the contract moved the 7.4 known-positive, which is the coupling
working as intended: 12 563 -> 13 238 encoded, 12 227 -> 12 893 raw, delta
336 -> 345, updated in the constant, the instantiated skill and the shipped
example payload.

Also adds the O6 guard on the reading side: `build_payload`'s signature defaults
are asserted equal to `okf consume`'s argparse defaults for every same-named
parameter. `okf project` shipped that exact disagreement for two rounds.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

skills/okf-consume/SKILL.md

@@ -67,12 +67,15 @@ and the cut; it decides nothing about the question.
   when you were handed a bounded window, is the denominator failure below with
   extra steps.
 
-**The five rules this pre-pass may drop a concept under**, so a `withheld` entry
+**The seven rules this pre-pass may drop a concept under**, so a `withheld` entry
 can be read without guessing: `verdict_layer_excluded` (§ 9.1, a type check),
 `no_lexical_match` (the question reached nothing in this concept),
 `verified_unreadable` (a `verified` value present but outside what this
 library's line-oriented parser can read, so no tier could be derived honestly),
-`over_budget_alone` (larger than the whole budget), `below_k` (ranked outside
+`over_budget_alone` (larger than the whole budget), `source_quota_exceeded`
+(its source document already holds as many delivered places as
+`--source-quota` allows, default 2 — the freed place goes to the next
+candidate, so `k` is still delivered in full), `below_k` (ranked outside
 the delivered cap), `over_budget_after_knapsack` (it fitted alone but not
 alongside the set that was chosen).
 
@@ -213,7 +216,7 @@ other states is a claim about the fixture rather than about this corpus.
 | Limit | `120000` |
 | Unit | `utf-8 bytes of emitted JSON` |
 | Instrument | `okf_consume.measure` — `len(json.dumps(value, ensure_ascii=False).encode("utf-8"))` |
-| Known-positive | `docs/consumption-contract.md, encoded as a JSON string` at `12563` |
+| Known-positive | `docs/consumption-contract.md, encoded as a JSON string` at `13238` |
 
 The instrument reproduces the known-positive figure before any of its own
 numbers are believed. Report what the run actually spent.
@@ -222,8 +225,8 @@ The known-positive is a **shipped artefact rather than this bundle**, and the
 reason is that a per-bundle one cannot work: it would be either a constant wrong
 for every bundle but one, or the instrument's own output, which makes
 `expected == measured` true by construction and § 7.4 decorative. It is checked
-by a **second, independent route**: `wc -c` reports 12 227 raw bytes for the same
-file, and the 336-byte difference is that file's JSON quoting and escaping
+by a **second, independent route**: `wc -c` reports 12 893 raw bytes for the same
+file, and the 345-byte difference is that file's JSON quoting and escaping
 overhead. The delta moves the moment the instrument changes what it counts.
 
 `spent` is the cost of the **delivered set**, per § 7.2 — not of the whole

skills/okf-consume/references/example-payload.json

@@ -11,10 +11,10 @@
     "spent": 2125,
     "known_positive": {
       "case": "docs/consumption-contract.md, encoded as a JSON string",
-      "expected": 12563,
-      "measured": 12563,
-      "raw_bytes": 12227,
-      "encoding_delta": 336
+      "expected": 13238,
+      "measured": 13238,
+      "raw_bytes": 12893,
+      "encoding_delta": 345
     }
   },
   "denominators": {