derive-round-returns-negative-on-error

Summary

The derive function uses numeric return codes rather than throwing exceptions to signal what happened during a derivation round. This means the calling loop can cheaply distinguish between errors, completion, and progress without try/catch overhead, but callers must remember to check for -1 explicitly or they risk treating an error as "one belief retracted."