The formal tier's input is hand-authored, and its serde forms are easy to guess
wrong (PascalCase enums, a stringified ContentAddress, JR-N rigor). Removes that
friction without touching the upstream schema serde:
- formal.example.json — a working, copy-pasteable template (the netting
postcondition), with the gotchas spelled out in an ignored _comment key.
- the FormalSpec doc and the parse-error message now name the exact forms and
point at the template.
- a test deserializes the shipped template and checks its indices, so it can
never drift from the schema.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
3589be01f3