audit(real-family): cycle close 0060 — ledger records the real-data family axis

Architect drift review (b92aab7..HEAD): the cycle is contract-clean — C9 (engine
untouched, whole change CLI-side), C6/C1 (real bars streamed from the pre-recorded
archive, real sweep byte-deterministic), C10 (refuse-don't-guess shared by run
--real and the family path), C12 (MC-exclusion fenced: mc --real exits 2). One
medium ledger-gap, now closed; one low item ratified as carry-on.

- Ledger: docs/design/INDEX.md C22 gains a "real-data family source" amendment
  (#106) recording the opt-in real-data axis on sweep/walkforward families, the
  DataSource provider, the MC exclusion (Fork A), and the oos{ns} key widening.
  This was the only drift — a documentation gap, not code drift.
- Ratified carry-on [low]: the real walk-forward member key oos{from.0} is now an
  epoch-ns integer; portable and collision-free, covered in practice by the
  walkforward_real test (>=2 distinct oos<ns> dirs) and the 9-window E2E probe.
  No explicit ns-uniqueness assertion beyond starts_with("oos") — acceptable; a
  dedicated pin is not worth an iteration.
- Retire ephemeral spec/plan 0060 (git rm) per the cycle-artifact lifecycle; the
  durable record is this ledger amendment + the git history.

No regression scripts configured (architect is the gate). Full workspace test +
clippy -D warnings green at close.

refs #106

docs/design/INDEX.md

@@ -1042,6 +1042,23 @@ as a subpath, `aura chart <name>/<member_key>` charts any single member with no
 view-side change — the write-side precondition for the family-comparison **view**
 (overlay / small-multiples across members), which itself remains open.
 
+**Amendment (real-data family source, #106, 8e5d14b).** The family runs gain an
+**opt-in real-data source axis**: `aura sweep|walkforward --real <SYMBOL> [--from
+<ms>] [--to <ms>]` streams real M1 close bars from the data-server archive (the #71
+`M1FieldSource` seam — C6 record-then-replay: a pre-recorded archive, never a live
+call mid-sim) instead of the built-in synthetic stream, per family member. A
+CLI-side `DataSource` provider (synthetic | real) supplies each member's source,
+pip (`instrument_spec` — C10 refuse-don't-guess; an un-vetted symbol exits 2 before
+any data access), window, and — for walk-forward — its `WindowRoller` sizes
+(synthetic: bar-index 24/12/12; real: fixed calendar-time 90d/30d/30d in ns; CLI
+flags for these are deferred). The engine, ingest, and registry are untouched (C9 —
+the whole change is in `aura-cli`); the synthetic path is byte-unchanged.
+**MC is excluded** (#106 Fork A): its seed varies a *synthetic* price-walk
+realization (C12 axis 4), which is undefined over real data's single realization —
+`aura mc --real` refuses with exit 2; a real MC needs a bootstrap-resampling axis
+(its own cycle). The real walk-forward member key `oos{from.0}` widens from a small
+synthetic bar index to an epoch-ns integer (still portable, collision-free).
+
 ### C23 — Graph compilation and behaviour-preserving optimisation
 **Guarantee.** The bootstrap (C19) is a **compilation**: it lowers a param-generic,
 named **blueprint** (the authoring source — nodes, composites, strategy, harness;