feat(governance): a consumer app reads its governance body back

[rubenvdlinde]

What this does

dossiq already holds its bezwaar committees in decidiq through GovernanceBodyRequestedEvent, but it still reads them from its own copy, because decidiq has no read it may use (ADR-022/066 forbid reading decidiq's register directly). So a committee archived in decidiq can still be given new objections in dossiq.

This adds the read half of the contract, in the same request/response-over-the-bus shape DecisionStateRequestedEvent uses:

• GovernanceBodyStateRequestedEvent: asked by governanceBodyId or by the consumer's own (sourceApp, externalReference). Two result slots kept apart: isHandled() false means decidiq could not answer (absent, or the read failed), handled without isFound() means decidiq holds no such body for that consumer.
• GovernanceBodyQueryService::lookup(): the body (active, quorum, quorumRule, jurisdiction, statutoryBasis, terms, provenance) plus the roster (uid, name, role, external, label, dates). Only the asking app's own bodies; reads run as the acting user, so OpenRegister RBAC decides; filters are re-checked in PHP like the command service does.
• GovernanceBodyStateRequestedListener, registered in CrossAppEventRegistrar. It never throws; a failed read is left unhandled so the consumer falls back instead of treating a live committee as gone.

Spec: governance-body-events gains REQ-GBE-007; change archived as openspec/changes/archive/2026-10-10-governance-body-read-seam (screens.md: no screen, in-process event).

Needed by dossiq migrate-committees-to-decidiq task 3 (decision 156: build the dependency).

New classes and their tests (coverage guard)

• GovernanceBodyQueryService: tests/Unit/Service/GovernanceBodyQueryServiceTest.php (5 cases, against rows written by the real GovernanceBodyCommandService: found by reference with roster, by id with active: false, another app's body refused, unknown/empty key, roster scoped to its body).
• GovernanceBodyStateRequestedListener and GovernanceBodyStateRequestedEvent: tests/Unit/Listener/GovernanceBodyStateRequestedListenerTest.php (found, miss, failed read left unhandled, other event ignored, registrar wiring).

Checks run locally

• php -l, phpcs (phpcs.xml) and phpmd (phpmd.xml) on the four changed lib files: clean.
• PHPUnit on the touched and new tests: OK (Listener suite + both governance-body service tests).
• Full composer check:strict NOT run locally: the machine's two heavy-command slots were held by another check. CI is the full check for this PR.

[github-actions]

Quality Report — ConductionNL/decidiq @ 7079853

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-nav-ceiling		✅
test-l10n		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
composer			✅	✅ 107/107
npm			✅	✅ 652/652
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					✅ 2646/2646 · 8 skipped
Newman					✅ 363/363 · 1 skipped
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates					❌

---

Quality workflow — 2026-10-10 10:43 UTC

Download the full PDF report from the workflow artifacts.