@echopath-labs/forgerail 0.1.0-alpha.1 → 0.1.0-alpha.2

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "forgerail",
-  "version": "0.1.0-alpha.1",
+  "version": "0.1.0-alpha.2",
   "description": "Engineering guidance and governance for coding agents, with workspace diagnosis and composable capability packs.",
   "author": {
     "name": "EchoPath Labs",
@@ -18,6 +18,8 @@
   "skills": "./skills/",
   "interface": {
     "displayName": "ForgeRail",
+    "composerIcon": "./assets/forgerail-icon.svg",
+    "logo": "./assets/forgerail-logo.svg",
     "shortDescription": "Engineering guidance and guardrails for coding agents.",
     "longDescription": "ForgeRail diagnoses workspace habits, composes applicable governance, launches coding agents with explicit boundaries, and verifies observable results without replacing the agent or the workspace's own record system.",
     "developerName": "EchoPath Labs",
@@ -25,12 +27,14 @@
     "capabilities": [
       "Agent engineering governance",
       "Read-only workspace diagnosis",
-      "Workspace health review"
+      "Workspace health review",
+      "Architecture convergence audit"
     ],
     "defaultPrompt": [
       "Use ForgeRail to govern this engineering task.",
       "Diagnose this workspace before recommending governance changes.",
-      "Review this workspace for governance and recovery risks."
+      "Review this workspace for governance and recovery risks.",
+      "Trace duplicate capability ownership and identify the smallest remaining implementation boundary."
     ],
     "brandColor": "#B45309"
   }

package/CHANGELOG.md

@@ -4,6 +4,14 @@
 
 No shipping changes yet.
 
+## 0.1.0-alpha.2 - 2026-08-30
+
+- Add the built-in, independently invoked `architecture-convergence-audit` Pack with Analyze First, read-only behavior, evidence-backed ownership maps, retention burden, deletion-first slices, and no external-write or persisted-state authority.
+- Add private capability-harvest shadows plus sanitized Diagnosis and Health separation fixtures without changing existing Core nouns or creating a second Health Pack.
+- Prepare a Skills-only Universal Plugins Directory candidate with root-confined visual assets, five positive and three negative evaluations, deterministic validation, and no project Node.js or `.forgerail/` requirement.
+- Add ForgeRail-specific Privacy and Terms documents, GitHub Issues support, a confirmed Productivity category, and an all-platform-supported-regions intent while keeping publisher, permission, portal-format, submission, and publication gates explicit.
+- Preserve exact-tag Marketplace installation as the currently available route and keep the scoped npm CLI optional; alpha.2 remains a local source-first candidate until separately approved remote integration and release complete.
+
 ## 0.1.0-alpha.1 - 2026-08-13
 
 - Establish the first ForgeRail Agent Plugin with Core, Workspace Diagnosis, and Workspace Health Review entrypoints.

package/PLUGIN.md

@@ -1,10 +1,11 @@
 # ForgeRail Agent Plugin
 
-The Plugin exposes three separately addressable Skills:
+The current private source exposes four separately addressable Skills:
 
 - `forgerail` is the small task-governance Core.
 - `forgerail-workspace-diagnosis` is a read-only, existing-habits-first diagnosis entry.
 - `workspace-health-review` is the first built-in Capability Pack and keeps its established identity.
+- `architecture-convergence-audit` is an independently invoked, medium-risk, read-only Pack for capability-owner duplication and minimal retained boundaries.
 
 Availability is not activation. Installing this Plugin does not make every Skill or pack mandatory in every workspace.
 

package/PRIVACY.md

@@ -0,0 +1,15 @@
+# ForgeRail Privacy Notice
+
+Effective date: 2026-08-30
+
+ForgeRail is a Skills-only Agent Plugin. ForgeRail does not operate its own server, MCP endpoint, account system, or authentication service. The ForgeRail Plugin and optional local CLI do not themselves collect, transmit, or store telemetry or user content for EchoPath Labs.
+
+ForgeRail Skills run through the host Agent or platform selected by the user. That host may process prompts, workspace files, command output, and other context under the host provider's own privacy terms and settings. Installing ForgeRail does not change those terms or data controls.
+
+Optional external Capability Packs are separately installed and explicitly invoked. A Pack that connects to GitHub, a registry, or another provider is subject to that provider's privacy terms, credentials, permissions, and the Pack's disclosed behavior. Installing the main ForgeRail Plugin does not install, authenticate, enable, or authorize those external connections.
+
+ForgeRail defaults to read-only observation where documented. It does not create `.forgerail/` state, edit project instructions, or transmit workspace material merely because the Plugin is installed. Any host-executed file change or external action remains subject to the user's explicit task scope and approval boundary.
+
+For product support or privacy questions, use [ForgeRail GitHub Issues](https://github.com/echopath-labs/forgerail/issues). Do not include secrets, access tokens, private source code, personal data, or confidential logs in a public issue.
+
+This notice describes ForgeRail-owned behavior. It does not replace the privacy terms of OpenAI, another host Agent, GitHub, npm, or any service the user chooses to connect.

package/README.md

@@ -2,6 +2,8 @@
 
 ForgeRail is an engineering guidance and governance framework for Coding Agents.
 
+This canonical source is preparing `0.1.0-alpha.2` / `v0.1.0-alpha.2`. The candidate is not yet remotely integrated, released, or listed in the Universal Plugins Directory; the currently installable public version remains alpha.1.
+
 It observes a workspace, recommends improvements only when evidence warrants them, composes applicable rules, launches the host Agent with explicit scope and approval boundaries, and verifies observable results. It does not replace the Agent or force a new specification system onto the project.
 
 ## First Alpha Shape
@@ -9,6 +11,12 @@ It observes a workspace, recommends improvements only when evidence warrants the
 - `$forgerail`: task-level guidance and guardrails.
 - `$forgerail-workspace-diagnosis`: bounded read-only diagnosis that follows existing workspace habits first.
 - `$workspace-health-review`: independently invokable workspace governance health pack.
+- `$architecture-convergence-audit`: independently invoked, medium-risk, read-only capability-owner and minimal-boundary audit.
+
+The Architecture Convergence Pack is a post-alpha source candidate. It remains
+available rather than automatically enabled, does not require ForgeRail Core to
+run first, and creates no Profile, task ledger, Receipt, `.forgerail/` state, or
+external issue.
 
 GitHub Rulesets, Release Safety, and Thread Closure are separately distributed Capability Packs because they have independent authentication, risk, lifecycle, and release boundaries.
 
@@ -27,6 +35,8 @@ ForgeRail composes four layers:
 
 The Profile is computed by default. ForgeRail does not create `.forgerail/profile.yaml`, edit `AGENTS.md`, or install OpenSpec merely because it was invoked.
 
+The Control System migration now includes versioned Workspace/Profile, Task Control, Review Authority, Validation Topology, Execution Context, Adapter Observation, and Cross-Workspace Pack composition contracts while preserving the alpha v1 contracts. See [Control Profile Contracts](docs/control-profile-contracts.md), [Control Task Contracts](docs/control-task-contracts.md), [Control Authority And Validation Contracts](docs/control-authority-validation-contracts.md), [Cross-Workspace Pack Composition Contract](docs/cross-workspace-pack-composition-contract.md), and the pre-evaluator [Control System Fixture Matrix](docs/control-system-fixture-matrix.md).
+
 Workspace adoption is progressive: Plugin Only by default; user-confirmed lightweight bindings when durable guidance is valuable; persisted `.forgerail/` governance only for future evidence-backed machine configuration or repeated conflicts. Host-specific instruction files are adapters, not ForgeRail Core. Codex is supported for alpha.1; Claude Code and Cursor profiles are explicit but unverified.
 
 ## Local Validation
@@ -51,7 +61,7 @@ forgerail adoption-plan --workspace . --host codex
 
 ## Install The Prerelease
 
-After `v0.1.0-alpha.1` is published, register the exact ForgeRail Marketplace snapshot and install the main Plugin:
+The intended future default is the Universal Plugins Directory UI, but ForgeRail is not listed there yet. Until a separate submission, review, and publication complete, install the released exact ForgeRail Marketplace snapshot:
 
 ```bash
 codex plugin marketplace add echopath-labs/forgerail --ref v0.1.0-alpha.1
@@ -60,6 +70,8 @@ codex plugin add forgerail@echopath-labs
 
 Start a new Codex task after installation. Install high-risk Capability Packs separately and only when the project needs them. See [Installation And Adoption](docs/installation.md) and [Progressive Adoption](docs/adoption.md) for exact commands, adoption levels, Host Adapter status, upgrade, rollback, and uninstall boundaries.
 
+The Agent Plugin does not require Node.js or `package.json` in the target project. npm/npx remains optional maintainer and validation tooling.
+
 ## Status
 
-The public bootstrap and Node.js 22/24 contract CI are complete. `0.1.0-alpha.1` remains a signed release candidate until its ordinary branch/PR CI and independent release approval complete; the commands above become a supported install path only after the tag exists.
+The immutable public alpha.1 remains the current install source. Alpha.2 is a local source-first candidate containing Architecture Convergence, the reviewed Utopia capability harvest, Directory readiness, and ForgeRail-specific Privacy and Terms. Its proposed version and tag do not authorize public projection application, remote integration, release, or Directory submission/publication.

package/README.zh-CN.md

@@ -2,6 +2,8 @@
 
 ForgeRail 是面向 Coding Agent 的工程引航与治理框架。
 
+当前 canonical source 正在准备 `0.1.0-alpha.2` / `v0.1.0-alpha.2`。该候选尚未完成远端集成、发布或 Universal Plugins Directory 上线；当前可安装的公开版本仍是 alpha.1。
+
 它观察工作区，在证据表明存在缺口时提出建议，组装适用规约，以明确的范围和审批边界发起宿主 Agent 工作，并核验可观察结果。它不替代 Agent，也不强迫项目采用新的规格系统。
 
 ## 首个 Alpha 形态
@@ -9,6 +11,11 @@ ForgeRail 是面向 Coding Agent 的工程引航与治理框架。
 - `$forgerail`：任务级引航与围栏；
 - `$forgerail-workspace-diagnosis`：优先沿用现有习惯的有界只读诊断；
 - `$workspace-health-review`：可独立触发的工作区治理健康能力包。
+- `$architecture-convergence-audit`：可独立触发、中风险、Analyze First 的只读能力 owner 与最小边界审计。
+
+Architecture Convergence 是 alpha.1 之后的私有 source candidate。安装只令其
+`available`，不会自动启用；它不要求先运行 ForgeRail Core，也不会创建 Profile、
+task ledger、Receipt、`.forgerail/` 状态或外部 issue。
 
 GitHub Rulesets、Release Safety 与 Thread Closure 由于具有独立身份、权限、风险与生命周期边界，作为单独分发、按需安装和显式触发的 Capability Packs。主插件被安装不代表这些能力包已安装、启用、认证或获批执行。
 
@@ -16,6 +23,8 @@ Cross-Workspace Orchestration 同样单独分发并显式使用。它只适用
 
 ForgeRail 默认动态计算有效 Workspace Profile，不会因为被调用就创建 `.forgerail/profile.yaml`、修改 `AGENTS.md` 或安装 OpenSpec。
 
+Control System 迁移现已加入版本化 Workspace/Profile、Task Control、Review Authority、Validation Topology、Execution Context、Adapter Observation 与 Cross-Workspace Pack composition 合同，同时保留 alpha v1 合同。详情见 [Control Profile 合同](docs/control-profile-contracts.zh-CN.md)、[Control Task 合同](docs/control-task-contracts.zh-CN.md)、[Control Authority 与 Validation 合同](docs/control-authority-validation-contracts.zh-CN.md)、[Cross-Workspace Pack Composition 合同](docs/cross-workspace-pack-composition-contract.zh-CN.md)与 pre-evaluator [Control System Fixture Matrix](docs/control-system-fixture-matrix.zh-CN.md)。
+
 工作区采用遵循渐进式三级模型：默认 Plugin Only；只有用户确认后才使用轻量绑定；未来只有机器配置或反复冲突等证据充分时，才考虑持久化 `.forgerail/` 治理。宿主 instruction 文件只是 Adapter，不是 ForgeRail Core。alpha.1 支持 Codex；Claude Code 与 Cursor profile 会明确发布，但仍标记为未验证。
 
 可选官方 npm 包为 `@echopath-labs/forgerail`，安装后仍提供简短的 `forgerail` 命令入口，用于离线校验、只读诊断和合同闭环；Agent Plugin 本身不依赖该 CLI 才能使用。未作用域 `forgerail` 只保留名称占位，不是正式安装入口。
@@ -27,7 +36,7 @@ forgerail validate
 
 ## 安装预发布版
 
-在 `v0.1.0-alpha.1` 正式发布后，先注册精确版本的 ForgeRail Marketplace 快照，再安装主插件：
+未来面向人的默认入口是 Universal Plugins Directory 界面，但 ForgeRail 当前尚未在该目录上线。在独立提交、审查与发布完成前，请安装已经发布的精确 ForgeRail Marketplace 快照：
 
 ```bash
 codex plugin marketplace add echopath-labs/forgerail --ref v0.1.0-alpha.1
@@ -36,4 +45,6 @@ codex plugin add forgerail@echopath-labs
 
 安装后请启动一个新的 Codex 任务。GitHub Rulesets、Release Safety 与 Thread Closure 必须按项目实际需要单独安装；精确命令、三级采用模型、Host Adapter 状态、升级、回滚和卸载边界见[安装与采用](docs/installation.zh-CN.md)及[渐进式采用](docs/adoption.zh-CN.md)。
 
-公开仓库 bootstrap 与 Node.js 22/24 合同 CI 已完成。`0.1.0-alpha.1` 在普通分支/PR CI 与独立发布审批完成前仍是签名候选；只有对应 tag 存在后，上述命令才成为受支持的安装路径。
+Agent Plugin 不要求目标项目安装 Node.js 或存在 `package.json`；npm/npx 始终只是可选维护与验证工具。
+
+不可变 public alpha.1 仍是当前安装来源。Alpha.2 是本地 source-first 候选，包含 Architecture Convergence、已审查的 Utopia capability harvest、Directory readiness 和 ForgeRail 专属 Privacy/Terms。拟议版本/tag 不授权应用公开投影、远端集成、发布或 Directory submit/publish。

package/TERMS.md

@@ -0,0 +1,19 @@
+# ForgeRail Terms
+
+Effective date: 2026-08-30
+
+ForgeRail is open-source software provided under the [Apache License 2.0](LICENSE). Your use, copying, modification, and distribution of the software are governed by that license.
+
+ForgeRail provides engineering guidance, read-only diagnosis, validation, and governance workflows for host Agents. It does not guarantee that generated guidance, validation, or Agent output is complete, correct, secure, compliant, or suitable for a particular purpose. The software is provided without warranties or conditions except as required by applicable law; see the Apache License 2.0 for the controlling warranty and liability terms.
+
+You are responsible for:
+
+- reviewing suggested changes and validation evidence;
+- granting only permissions you intend to grant;
+- confirming authorization before file, repository, registry, release, deployment, or other external actions;
+- complying with the terms and policies of the host Agent, platform, repository, registry, and external services you use; and
+- protecting credentials, confidential data, and customer information.
+
+Installation makes a capability available. It does not approve project adoption, enable an external Capability Pack, authenticate a provider, or authorize a remote or release operation. Optional external Packs and host platforms are governed by their own terms and permission boundaries.
+
+ForgeRail does not provide legal advice, professional certification, an availability commitment, or a service-level agreement. Product support is available through [ForgeRail GitHub Issues](https://github.com/echopath-labs/forgerail/issues), without a guaranteed response or resolution time.

package/adapters/codex.json

@@ -11,7 +11,7 @@
   "activationBoundary": "new-task-required",
   "verification": {
     "mode": "new-task-discovery",
-    "expectedSkills": ["forgerail", "forgerail-workspace-diagnosis", "workspace-health-review"]
+    "expectedSkills": ["architecture-convergence-audit", "forgerail", "forgerail-workspace-diagnosis", "workspace-health-review"]
   },
   "limitations": [
     "A binding is discovered only by a new Codex task started inside the applicable instruction scope.",

package/assets/forgerail-icon.svg

@@ -0,0 +1,6 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256" role="img" aria-labelledby="title">
+  <title id="title">ForgeRail icon candidate</title>
+  <rect width="256" height="256" rx="48" fill="#1C1917"/>
+  <path d="M68 48h120v36H104v30h68v34h-68v60H68V48Z" fill="#F5F5F4"/>
+  <path d="M172 114h36v94h-36z" fill="#D97706"/>
+</svg>

package/assets/forgerail-logo.svg

@@ -0,0 +1,7 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 256" role="img" aria-labelledby="title">
+  <title id="title">ForgeRail logo candidate</title>
+  <rect width="960" height="256" rx="40" fill="#1C1917"/>
+  <path d="M64 48h120v36h-84v30h68v34h-68v60H64V48Z" fill="#F5F5F4"/>
+  <path d="M168 114h36v94h-36z" fill="#D97706"/>
+  <text x="244" y="164" fill="#F5F5F4" font-family="ui-sans-serif, system-ui, sans-serif" font-size="88" font-weight="700" letter-spacing="-2">ForgeRail</text>
+</svg>

package/contracts/authority-evidence-v1.schema.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/authority-evidence-v1.json",
+  "title": "ForgeRail Authority Evidence v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "authorityEvidenceId", "evidenceIdentityId", "requirementId", "workspaceIdentityId", "operation", "authorityClass", "subjectId", "actorId", "actorRelations", "scope", "coveredSurfaceIds", "lifecycle", "observedAt", "effectiveAt", "expiresAt", "invalidatedAt", "invalidationEvidenceIdentityId", "supersededByAuthorityEvidenceId", "limitedReason"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "authorityEvidenceId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "evidenceIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "requirementId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "workspaceIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "operation": { "type": "string", "minLength": 1 },
+    "authorityClass": { "enum": ["agent_review", "automated_validation", "peer_review", "ownership_approval", "security_approval", "release_approval", "environment_approval"] },
+    "subjectId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "actorId": { "type": "string", "minLength": 1 },
+    "actorRelations": { "type": "array", "items": { "enum": ["subject-author", "executor", "evidence-author", "surface-owner", "independent-reviewer"] }, "uniqueItems": true },
+    "scope": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+    "coveredSurfaceIds": { "type": "array", "items": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" }, "uniqueItems": true },
+    "lifecycle": { "enum": ["current", "stale", "revoked", "dismissed", "expired", "superseded"] },
+    "observedAt": { "type": "string", "format": "date-time" },
+    "effectiveAt": { "type": "string", "format": "date-time" },
+    "expiresAt": { "type": ["string", "null"], "format": "date-time" },
+    "invalidatedAt": { "type": ["string", "null"], "format": "date-time" },
+    "invalidationEvidenceIdentityId": { "type": ["string", "null"], "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "supersededByAuthorityEvidenceId": { "type": ["string", "null"], "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "limitedReason": { "anyOf": [{ "$ref": "https://forgerail.dev/schemas/limited-reason-v1.json" }, { "type": "null" }] }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "lifecycle": { "const": "current" } }, "required": ["lifecycle"] },
+      "then": { "properties": { "invalidatedAt": { "const": null }, "invalidationEvidenceIdentityId": { "const": null }, "supersededByAuthorityEvidenceId": { "const": null }, "limitedReason": { "const": null } } }
+    },
+    {
+      "if": { "properties": { "lifecycle": { "enum": ["stale", "revoked", "dismissed", "expired", "superseded"] } }, "required": ["lifecycle"] },
+      "then": { "properties": { "invalidatedAt": { "type": "string" }, "limitedReason": { "$ref": "https://forgerail.dev/schemas/limited-reason-v1.json" } } }
+    },
+    {
+      "if": { "properties": { "lifecycle": { "enum": ["stale", "revoked", "dismissed", "superseded"] } }, "required": ["lifecycle"] },
+      "then": { "properties": { "invalidationEvidenceIdentityId": { "type": "string" } } }
+    },
+    {
+      "if": { "properties": { "lifecycle": { "const": "superseded" } }, "required": ["lifecycle"] },
+      "then": { "properties": { "supersededByAuthorityEvidenceId": { "type": "string" } } }
+    }
+  ]
+}

package/contracts/cross-workspace-pack-composition-v1.schema.json

@@ -0,0 +1,241 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/cross-workspace-pack-composition-v1.json",
+  "title": "ForgeRail Cross-Workspace Pack Composition v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "compositionId", "packId", "packVersion", "coreCompatibility", "kernelInvariants", "workspaceSet", "nodes", "dependencyEdges", "phases", "workspaceReceiptBundle", "declaredAt"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "compositionId": { "$ref": "#/$defs/id" },
+    "packId": { "const": "forgerail-cross-workspace-orchestration" },
+    "packVersion": { "type": "string", "minLength": 1 },
+    "coreCompatibility": { "$ref": "#/$defs/coreCompatibility" },
+    "kernelInvariants": { "$ref": "#/$defs/kernelInvariants" },
+    "workspaceSet": { "$ref": "#/$defs/workspaceSet" },
+    "nodes": { "type": "array", "items": { "$ref": "#/$defs/node" }, "minItems": 2 },
+    "dependencyEdges": { "type": "array", "items": { "$ref": "#/$defs/dependencyEdge" } },
+    "phases": { "type": "array", "items": { "$ref": "#/$defs/phaseAggregation" }, "minItems": 1 },
+    "workspaceReceiptBundle": { "$ref": "#/$defs/workspaceReceiptBundle" },
+    "declaredAt": { "type": "string", "format": "date-time" }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "ids": { "type": "array", "items": { "$ref": "#/$defs/id" }, "uniqueItems": true },
+    "coreCompatibility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["workspaceIdentityVersions", "taskEnvelopeVersions", "returnReceiptVersions", "phaseSliceCorrelationVersions", "status", "evidenceIdentityIds"],
+      "properties": {
+        "workspaceIdentityVersions": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+        "taskEnvelopeVersions": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+        "returnReceiptVersions": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+        "phaseSliceCorrelationVersions": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+        "status": { "enum": ["compatible", "incompatible", "unverified"] },
+        "evidenceIdentityIds": { "$ref": "#/$defs/ids" }
+      }
+    },
+    "kernelInvariants": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stateModelRedefined", "operationGrantMinting", "authoritySubstitution", "waiverBroadening", "freshnessBroadening", "receiptVerificationBypass", "transportAsAcceptance"],
+      "properties": {
+        "stateModelRedefined": { "const": false },
+        "operationGrantMinting": { "const": false },
+        "authoritySubstitution": { "const": false },
+        "waiverBroadening": { "const": false },
+        "freshnessBroadening": { "const": false },
+        "receiptVerificationBypass": { "const": false },
+        "transportAsAcceptance": { "const": false }
+      }
+    },
+    "workspaceSet": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["workspaceSetId", "ownerWorkspaceIdentityIds", "coordinatorWorkspaceIdentityId", "aggregateWriterId", "relationshipIds", "observedAt"],
+      "properties": {
+        "workspaceSetId": { "$ref": "#/$defs/id" },
+        "ownerWorkspaceIdentityIds": { "type": "array", "items": { "$ref": "#/$defs/id" }, "minItems": 2, "uniqueItems": true },
+        "coordinatorWorkspaceIdentityId": { "anyOf": [{ "$ref": "#/$defs/id" }, { "type": "null" }] },
+        "aggregateWriterId": { "$ref": "#/$defs/id" },
+        "relationshipIds": { "$ref": "#/$defs/ids" },
+        "observedAt": { "type": "string", "format": "date-time" }
+      }
+    },
+    "coreEnvelopeReference": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["contract", "schemaVersion", "envelopeId", "envelopeRevisionId", "workspaceIdentityId", "subjectId"],
+      "properties": {
+        "contract": { "const": "task-envelope-v2" },
+        "schemaVersion": { "type": "string", "minLength": 1 },
+        "envelopeId": { "$ref": "#/$defs/id" },
+        "envelopeRevisionId": { "$ref": "#/$defs/id" },
+        "workspaceIdentityId": { "$ref": "#/$defs/id" },
+        "subjectId": { "$ref": "#/$defs/id" }
+      }
+    },
+    "phaseSliceReference": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["contract", "schemaVersion", "correlationId", "phaseId", "sliceId", "executionAttemptId"],
+      "properties": {
+        "contract": { "const": "phase-slice-correlation-v1" },
+        "schemaVersion": { "type": "string", "minLength": 1 },
+        "correlationId": { "$ref": "#/$defs/id" },
+        "phaseId": { "$ref": "#/$defs/id" },
+        "sliceId": { "$ref": "#/$defs/id" },
+        "executionAttemptId": { "$ref": "#/$defs/id" }
+      }
+    },
+    "coreReceiptReference": {
+      "anyOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["contract", "schemaVersion", "receiptId", "workspaceIdentityId", "envelopeId", "envelopeRevisionId", "controlRevisionId", "subjectId", "verificationStatus", "verificationGateResultId", "transportStatus", "coordinatorAcceptance", "coordinatorAcceptanceEvidenceIdentityIds", "observedAt"],
+          "properties": {
+            "contract": { "const": "return-receipt-v2" },
+            "schemaVersion": { "type": "string", "minLength": 1 },
+            "receiptId": { "$ref": "#/$defs/id" },
+            "workspaceIdentityId": { "$ref": "#/$defs/id" },
+            "envelopeId": { "$ref": "#/$defs/id" },
+            "envelopeRevisionId": { "$ref": "#/$defs/id" },
+            "controlRevisionId": { "$ref": "#/$defs/id" },
+            "subjectId": { "$ref": "#/$defs/id" },
+            "verificationStatus": { "enum": ["pending", "verified", "rejected", "stale"] },
+            "verificationGateResultId": { "anyOf": [{ "$ref": "#/$defs/id" }, { "type": "null" }] },
+            "transportStatus": { "enum": ["not_delivered", "delivered", "failed"] },
+            "coordinatorAcceptance": { "enum": ["pending", "accepted", "rejected", "stale"] },
+            "coordinatorAcceptanceEvidenceIdentityIds": { "$ref": "#/$defs/ids" },
+            "observedAt": { "type": "string", "format": "date-time" }
+          },
+          "allOf": [
+            {
+              "if": { "properties": { "verificationStatus": { "const": "verified" } }, "required": ["verificationStatus"] },
+              "then": { "properties": { "verificationGateResultId": { "$ref": "#/$defs/id" } } }
+            },
+            {
+              "if": { "properties": { "coordinatorAcceptance": { "const": "accepted" } }, "required": ["coordinatorAcceptance"] },
+              "then": { "properties": { "verificationStatus": { "const": "verified" }, "coordinatorAcceptanceEvidenceIdentityIds": { "minItems": 1 } } }
+            }
+          ]
+        },
+        { "type": "null" }
+      ]
+    },
+    "node": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["nodeId", "workspaceIdentityId", "workspaceIdentitySchemaVersion", "writerIdentityId", "coreEnvelope", "phaseSlice", "coreReceipt", "state"],
+      "properties": {
+        "nodeId": { "$ref": "#/$defs/id" },
+        "workspaceIdentityId": { "$ref": "#/$defs/id" },
+        "workspaceIdentitySchemaVersion": { "type": "string", "minLength": 1 },
+        "writerIdentityId": { "$ref": "#/$defs/id" },
+        "coreEnvelope": { "$ref": "#/$defs/coreEnvelopeReference" },
+        "phaseSlice": { "$ref": "#/$defs/phaseSliceReference" },
+        "coreReceipt": { "$ref": "#/$defs/coreReceiptReference" },
+        "state": { "enum": ["pending", "ready", "executing", "receipt_pending", "verification_pending", "acceptance_pending", "accepted", "blocked", "failed", "stale"] }
+      }
+    },
+    "dependencyEdge": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["edgeId", "predecessorNodeId", "successorNodeId", "kind", "required", "unlockCondition", "authorityTransfer", "operationGrantTransfer", "receiptSubstitution"],
+      "properties": {
+        "edgeId": { "$ref": "#/$defs/id" },
+        "predecessorNodeId": { "$ref": "#/$defs/id" },
+        "successorNodeId": { "$ref": "#/$defs/id" },
+        "kind": { "enum": ["delivery", "validation", "acceptance", "rollback"] },
+        "required": { "type": "boolean" },
+        "unlockCondition": { "const": "core-receipt-verified-and-coordinator-accepted" },
+        "authorityTransfer": { "const": false },
+        "operationGrantTransfer": { "const": false },
+        "receiptSubstitution": { "const": false }
+      }
+    },
+    "phaseAggregation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["phaseId", "requiredNodeIds", "acceptedNodeIds", "pendingNodeIds", "failedNodeIds", "blockedNodeIds", "staleNodeIds", "state", "aggregateClosureClaim"],
+      "properties": {
+        "phaseId": { "$ref": "#/$defs/id" },
+        "requiredNodeIds": { "type": "array", "items": { "$ref": "#/$defs/id" }, "minItems": 1, "uniqueItems": true },
+        "acceptedNodeIds": { "$ref": "#/$defs/ids" },
+        "pendingNodeIds": { "$ref": "#/$defs/ids" },
+        "failedNodeIds": { "$ref": "#/$defs/ids" },
+        "blockedNodeIds": { "$ref": "#/$defs/ids" },
+        "staleNodeIds": { "$ref": "#/$defs/ids" },
+        "state": { "enum": ["open", "blocked", "closed", "stale"] },
+        "aggregateClosureClaim": { "type": "boolean" }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "state": { "const": "closed" } }, "required": ["state"] },
+          "then": { "properties": { "pendingNodeIds": { "maxItems": 0 }, "failedNodeIds": { "maxItems": 0 }, "blockedNodeIds": { "maxItems": 0 }, "staleNodeIds": { "maxItems": 0 }, "aggregateClosureClaim": { "const": true } } }
+        },
+        {
+          "if": { "properties": { "state": { "enum": ["open", "blocked", "stale"] } }, "required": ["state"] },
+          "then": { "properties": { "aggregateClosureClaim": { "const": false } } }
+        }
+      ]
+    },
+    "workspaceReceiptBundle": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["bundleId", "bundleRevisionId", "predecessorBundleRevisionId", "bundleDigest", "compositionId", "workspaceSetId", "phaseIds", "nodeReceipts", "dependencyStatus", "pendingNodeIds", "failedNodeIds", "blockedNodeIds", "staleNodeIds", "deviationEvidenceIdentityIds", "nextEligibleNodeIds", "state", "observedAt", "immutable"],
+      "properties": {
+        "bundleId": { "$ref": "#/$defs/id" },
+        "bundleRevisionId": { "$ref": "#/$defs/id" },
+        "predecessorBundleRevisionId": { "anyOf": [{ "$ref": "#/$defs/id" }, { "type": "null" }] },
+        "bundleDigest": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+        "compositionId": { "$ref": "#/$defs/id" },
+        "workspaceSetId": { "$ref": "#/$defs/id" },
+        "phaseIds": { "type": "array", "items": { "$ref": "#/$defs/id" }, "minItems": 1, "uniqueItems": true },
+        "nodeReceipts": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["nodeId", "receiptId", "verificationStatus", "coordinatorAcceptance"],
+            "properties": {
+              "nodeId": { "$ref": "#/$defs/id" },
+              "receiptId": { "$ref": "#/$defs/id" },
+              "verificationStatus": { "const": "verified" },
+              "coordinatorAcceptance": { "const": "accepted" }
+            }
+          }
+        },
+        "dependencyStatus": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["edgeId", "status", "evidenceIdentityIds"],
+            "properties": {
+              "edgeId": { "$ref": "#/$defs/id" },
+              "status": { "enum": ["locked", "unlocked", "blocked", "stale"] },
+              "evidenceIdentityIds": { "$ref": "#/$defs/ids" }
+            }
+          }
+        },
+        "pendingNodeIds": { "$ref": "#/$defs/ids" },
+        "failedNodeIds": { "$ref": "#/$defs/ids" },
+        "blockedNodeIds": { "$ref": "#/$defs/ids" },
+        "staleNodeIds": { "$ref": "#/$defs/ids" },
+        "deviationEvidenceIdentityIds": { "$ref": "#/$defs/ids" },
+        "nextEligibleNodeIds": { "$ref": "#/$defs/ids" },
+        "state": { "enum": ["assembling", "review_required", "accepted", "blocked", "stale"] },
+        "observedAt": { "type": "string", "format": "date-time" },
+        "immutable": { "const": true }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "state": { "const": "accepted" } }, "required": ["state"] },
+          "then": { "properties": { "pendingNodeIds": { "maxItems": 0 }, "failedNodeIds": { "maxItems": 0 }, "blockedNodeIds": { "maxItems": 0 }, "staleNodeIds": { "maxItems": 0 }, "deviationEvidenceIdentityIds": { "maxItems": 0 } } }
+        }
+      ]
+    }
+  }
+}