@githolon/dsl 0.119.13 → 0.119.29

package/dart_types/lib/src/proto/nomos/kernel/v1/kernel.pb.dart

@@ -5759,6 +5759,7 @@ enum QueryResponse_Result {
   openApiDescription,
   installedLawDeclarations,
   applicationResultDelta,
+  resolveDomainPlan,
   notSet
 }
 
@@ -5792,6 +5793,7 @@ class QueryResponse extends $pb.GeneratedMessage {
     FullResultReason? fullResultReason,
     ReadDependencies? resultDependencies,
     ReadIndexBehind? readIndexBehind,
+    ResolveDomainPlanResponse? resolveDomainPlan,
   }) {
     final result = create();
     if (value != null) result.value = value;
@@ -5838,6 +5840,7 @@ class QueryResponse extends $pb.GeneratedMessage {
     if (resultDependencies != null)
       result.resultDependencies = resultDependencies;
     if (readIndexBehind != null) result.readIndexBehind = readIndexBehind;
+    if (resolveDomainPlan != null) result.resolveDomainPlan = resolveDomainPlan;
     return result;
   }
 
@@ -5875,6 +5878,7 @@ class QueryResponse extends $pb.GeneratedMessage {
     29: QueryResponse_Result.openApiDescription,
     30: QueryResponse_Result.installedLawDeclarations,
     31: QueryResponse_Result.applicationResultDelta,
+    36: QueryResponse_Result.resolveDomainPlan,
     0: QueryResponse_Result.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -5905,7 +5909,8 @@ class QueryResponse extends $pb.GeneratedMessage {
       28,
       29,
       30,
-      31
+      31,
+      36
     ])
     ..aOM<NomosValue>(1, _omitFieldNames ? '' : 'value',
         subBuilder: NomosValue.create)
@@ -5980,6 +5985,9 @@ class QueryResponse extends $pb.GeneratedMessage {
         subBuilder: ReadDependencies.create)
     ..aOM<ReadIndexBehind>(35, _omitFieldNames ? '' : 'readIndexBehind',
         subBuilder: ReadIndexBehind.create)
+    ..aOM<ResolveDomainPlanResponse>(
+        36, _omitFieldNames ? '' : 'resolveDomainPlan',
+        subBuilder: ResolveDomainPlanResponse.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -6024,6 +6032,7 @@ class QueryResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(29)
   @$pb.TagNumber(30)
   @$pb.TagNumber(31)
+  @$pb.TagNumber(36)
   QueryResponse_Result whichResult() =>
       _QueryResponse_ResultByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(1)
@@ -6049,6 +6058,7 @@ class QueryResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(29)
   @$pb.TagNumber(30)
   @$pb.TagNumber(31)
+  @$pb.TagNumber(36)
   void clearResult() => $_clearField($_whichOneof(0));
 
   /// Cutover debt for fixed framework queries which have not yet gained a
@@ -6397,6 +6407,18 @@ class QueryResponse extends $pb.GeneratedMessage {
   void clearReadIndexBehind() => $_clearField(35);
   @$pb.TagNumber(35)
   ReadIndexBehind ensureReadIndexBehind() => $_ensure(27);
+
+  @$pb.TagNumber(36)
+  ResolveDomainPlanResponse get resolveDomainPlan => $_getN(28);
+  @$pb.TagNumber(36)
+  set resolveDomainPlan(ResolveDomainPlanResponse value) =>
+      $_setField(36, value);
+  @$pb.TagNumber(36)
+  $core.bool hasResolveDomainPlan() => $_has(28);
+  @$pb.TagNumber(36)
+  void clearResolveDomainPlan() => $_clearField(36);
+  @$pb.TagNumber(36)
+  ResolveDomainPlanResponse ensureResolveDomainPlan() => $_ensure(28);
 }
 
 /// The last-ready read index a `serve_last_ready` read met: bound to `served_frontier`, while the
@@ -6947,12 +6969,15 @@ class InterfaceCompatibilityResponse extends $pb.GeneratedMessage {
     $core.Iterable<InterfaceMemberVerdict>? members,
     $core.String? workspaceFrontier,
     $core.String? candidateHash,
+    $core.String? effectiveLawIdentity,
   }) {
     final result = create();
     if (compatible != null) result.compatible = compatible;
     if (members != null) result.members.addAll(members);
     if (workspaceFrontier != null) result.workspaceFrontier = workspaceFrontier;
     if (candidateHash != null) result.candidateHash = candidateHash;
+    if (effectiveLawIdentity != null)
+      result.effectiveLawIdentity = effectiveLawIdentity;
     return result;
   }
 
@@ -6975,6 +7000,7 @@ class InterfaceCompatibilityResponse extends $pb.GeneratedMessage {
         subBuilder: InterfaceMemberVerdict.create)
     ..aOS(3, _omitFieldNames ? '' : 'workspaceFrontier')
     ..aOS(4, _omitFieldNames ? '' : 'candidateHash')
+    ..aOS(5, _omitFieldNames ? '' : 'effectiveLawIdentity')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -7029,6 +7055,16 @@ class InterfaceCompatibilityResponse extends $pb.GeneratedMessage {
   $core.bool hasCandidateHash() => $_has(3);
   @$pb.TagNumber(4)
   void clearCandidateHash() => $_clearField(4);
+
+  /// Canonical selected workspace law graph, independent of installation route/history.
+  @$pb.TagNumber(5)
+  $core.String get effectiveLawIdentity => $_getSZ(4);
+  @$pb.TagNumber(5)
+  set effectiveLawIdentity($core.String value) => $_setString(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasEffectiveLawIdentity() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearEffectiveLawIdentity() => $_clearField(5);
 }
 
 /// One bounded kernel-maintenance quantum. This is runtime procedure state,
@@ -11291,6 +11327,7 @@ class ModelLifecycleIntent extends $pb.GeneratedMessage {
     $core.String? replaces,
     $core.String? acceptanceReason,
     $core.String? lawIdentity,
+    DomainTransitionActivation? domainTransition,
   }) {
     final result = create();
     if (operation != null) result.operation = operation;
@@ -11300,6 +11337,7 @@ class ModelLifecycleIntent extends $pb.GeneratedMessage {
     if (replaces != null) result.replaces = replaces;
     if (acceptanceReason != null) result.acceptanceReason = acceptanceReason;
     if (lawIdentity != null) result.lawIdentity = lawIdentity;
+    if (domainTransition != null) result.domainTransition = domainTransition;
     return result;
   }
 
@@ -11326,6 +11364,9 @@ class ModelLifecycleIntent extends $pb.GeneratedMessage {
     ..aOS(5, _omitFieldNames ? '' : 'replaces')
     ..aOS(6, _omitFieldNames ? '' : 'acceptanceReason')
     ..aOS(7, _omitFieldNames ? '' : 'lawIdentity')
+    ..aOM<DomainTransitionActivation>(
+        8, _omitFieldNames ? '' : 'domainTransition',
+        subBuilder: DomainTransitionActivation.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -11418,896 +11459,1770 @@ class ModelLifecycleIntent extends $pb.GeneratedMessage {
   $core.bool hasLawIdentity() => $_has(6);
   @$pb.TagNumber(7)
   void clearLawIdentity() => $_clearField(7);
+
+  /// Atomic per-domain activation. Candidates must already be staged in custody.
+  @$pb.TagNumber(8)
+  DomainTransitionActivation get domainTransition => $_getN(7);
+  @$pb.TagNumber(8)
+  set domainTransition(DomainTransitionActivation value) =>
+      $_setField(8, value);
+  @$pb.TagNumber(8)
+  $core.bool hasDomainTransition() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearDomainTransition() => $_clearField(8);
+  @$pb.TagNumber(8)
+  DomainTransitionActivation ensureDomainTransition() => $_ensure(7);
 }
 
-/// Exact framework authoring request for the ordinary provider-witness adoption directive. The
-/// signed reads remain OfferRequest evidence; this message neither imports verifier material nor
-/// changes custody outside the destination workspace's normal offer gate.
-class IdentityProviderWitnessAdoption extends $pb.GeneratedMessage {
-  factory IdentityProviderWitnessAdoption({
-    $core.String? sourceWorkspace,
+/// Manifest-only resolution; this is a preview, not compatibility or admission evidence.
+class DomainPlan extends $pb.GeneratedMessage {
+  factory DomainPlan({
+    $core.Iterable<DomainAction>? actions,
+    $core.Iterable<DomainSupportPin>? support,
   }) {
     final result = create();
-    if (sourceWorkspace != null) result.sourceWorkspace = sourceWorkspace;
+    if (actions != null) result.actions.addAll(actions);
+    if (support != null) result.support.addAll(support);
     return result;
   }
 
-  IdentityProviderWitnessAdoption._();
+  DomainPlan._();
 
-  factory IdentityProviderWitnessAdoption.fromBuffer($core.List<$core.int> data,
+  factory DomainPlan.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory IdentityProviderWitnessAdoption.fromJson($core.String json,
+  factory DomainPlan.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'IdentityProviderWitnessAdoption',
+      _omitMessageNames ? '' : 'DomainPlan',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aOS(1, _omitFieldNames ? '' : 'sourceWorkspace')
+    ..pPM<DomainAction>(1, _omitFieldNames ? '' : 'actions',
+        subBuilder: DomainAction.create)
+    ..pPM<DomainSupportPin>(2, _omitFieldNames ? '' : 'support',
+        subBuilder: DomainSupportPin.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  IdentityProviderWitnessAdoption clone() => deepCopy();
+  DomainPlan clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  IdentityProviderWitnessAdoption copyWith(
-          void Function(IdentityProviderWitnessAdoption) updates) =>
-      super.copyWith(
-              (message) => updates(message as IdentityProviderWitnessAdoption))
-          as IdentityProviderWitnessAdoption;
+  DomainPlan copyWith(void Function(DomainPlan) updates) =>
+      super.copyWith((message) => updates(message as DomainPlan)) as DomainPlan;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static IdentityProviderWitnessAdoption create() =>
-      IdentityProviderWitnessAdoption._();
+  static DomainPlan create() => DomainPlan._();
   @$core.override
-  IdentityProviderWitnessAdoption createEmptyInstance() => create();
+  DomainPlan createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static IdentityProviderWitnessAdoption getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<IdentityProviderWitnessAdoption>(
-          create);
-  static IdentityProviderWitnessAdoption? _defaultInstance;
+  static DomainPlan getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainPlan>(create);
+  static DomainPlan? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $core.String get sourceWorkspace => $_getSZ(0);
-  @$pb.TagNumber(1)
-  set sourceWorkspace($core.String value) => $_setString(0, value);
-  @$pb.TagNumber(1)
-  $core.bool hasSourceWorkspace() => $_has(0);
-  @$pb.TagNumber(1)
-  void clearSourceWorkspace() => $_clearField(1);
-}
+  $pb.PbList<DomainAction> get actions => $_getList(0);
 
-enum OfferRequest_Intent {
-  call,
-  sealedChangeUsda,
-  modelLifecycle,
-  identityProviderWitnessAdoption,
-  genesis,
-  carriedWorkspaceOffer,
-  placement,
-  detachedSignedChange,
-  notSet
+  @$pb.TagNumber(2)
+  $pb.PbList<DomainSupportPin> get support => $_getList(1);
 }
 
-class OfferRequest extends $pb.GeneratedMessage {
-  factory OfferRequest({
-    WorkspaceTarget? target,
-    DirectiveCall? call,
-    AuthoringOptions? authoring,
-    $core.List<$core.int>? lawUsdz,
-    $core.Iterable<AttestedRead>? attestations,
-    $core.Iterable<ConflictSnapshot>? conflictSnapshots,
-    $core.List<$core.int>? sealedChangeUsda,
-    $core.List<$core.int>? executionLawUsdz,
-    $core.String? controllerLawHash,
-    $core.String? candidateCommit,
-    BirthCertificate? birthCertificate,
-    ModelLifecycleIntent? modelLifecycle,
-    IdentityProviderWitnessAdoption? identityProviderWitnessAdoption,
-    GenesisOffer? genesis,
-    CarriedWorkspaceOffer? carriedWorkspaceOffer,
-    PlacementOffer? placement,
-    $core.Iterable<LawUnit>? lawUnits,
-    DetachedSignedChange? detachedSignedChange,
+class DomainAction extends $pb.GeneratedMessage {
+  factory DomainAction({
+    $core.String? domain,
+    $core.String? expectedUnit,
+    $core.String? targetUnit,
+    $core.String? group,
   }) {
     final result = create();
-    if (target != null) result.target = target;
-    if (call != null) result.call = call;
-    if (authoring != null) result.authoring = authoring;
-    if (lawUsdz != null) result.lawUsdz = lawUsdz;
-    if (attestations != null) result.attestations.addAll(attestations);
-    if (conflictSnapshots != null)
-      result.conflictSnapshots.addAll(conflictSnapshots);
-    if (sealedChangeUsda != null) result.sealedChangeUsda = sealedChangeUsda;
-    if (executionLawUsdz != null) result.executionLawUsdz = executionLawUsdz;
-    if (controllerLawHash != null) result.controllerLawHash = controllerLawHash;
-    if (candidateCommit != null) result.candidateCommit = candidateCommit;
-    if (birthCertificate != null) result.birthCertificate = birthCertificate;
-    if (modelLifecycle != null) result.modelLifecycle = modelLifecycle;
-    if (identityProviderWitnessAdoption != null)
-      result.identityProviderWitnessAdoption = identityProviderWitnessAdoption;
-    if (genesis != null) result.genesis = genesis;
-    if (carriedWorkspaceOffer != null)
-      result.carriedWorkspaceOffer = carriedWorkspaceOffer;
-    if (placement != null) result.placement = placement;
-    if (lawUnits != null) result.lawUnits.addAll(lawUnits);
-    if (detachedSignedChange != null)
-      result.detachedSignedChange = detachedSignedChange;
+    if (domain != null) result.domain = domain;
+    if (expectedUnit != null) result.expectedUnit = expectedUnit;
+    if (targetUnit != null) result.targetUnit = targetUnit;
+    if (group != null) result.group = group;
     return result;
   }
 
-  OfferRequest._();
+  DomainAction._();
 
-  factory OfferRequest.fromBuffer($core.List<$core.int> data,
+  factory DomainAction.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory OfferRequest.fromJson($core.String json,
+  factory DomainAction.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
-  static const $core.Map<$core.int, OfferRequest_Intent>
-      _OfferRequest_IntentByTag = {
-    2: OfferRequest_Intent.call,
-    7: OfferRequest_Intent.sealedChangeUsda,
-    12: OfferRequest_Intent.modelLifecycle,
-    13: OfferRequest_Intent.identityProviderWitnessAdoption,
-    14: OfferRequest_Intent.genesis,
-    15: OfferRequest_Intent.carriedWorkspaceOffer,
-    16: OfferRequest_Intent.placement,
-    18: OfferRequest_Intent.detachedSignedChange,
-    0: OfferRequest_Intent.notSet
-  };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'OfferRequest',
+      _omitMessageNames ? '' : 'DomainAction',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..oo(0, [2, 7, 12, 13, 14, 15, 16, 18])
-    ..aOM<WorkspaceTarget>(1, _omitFieldNames ? '' : 'target',
-        subBuilder: WorkspaceTarget.create)
-    ..aOM<DirectiveCall>(2, _omitFieldNames ? '' : 'call',
-        subBuilder: DirectiveCall.create)
-    ..aOM<AuthoringOptions>(3, _omitFieldNames ? '' : 'authoring',
-        subBuilder: AuthoringOptions.create)
-    ..a<$core.List<$core.int>>(
-        4, _omitFieldNames ? '' : 'lawUsdz', $pb.PbFieldType.OY)
-    ..pPM<AttestedRead>(5, _omitFieldNames ? '' : 'attestations',
-        subBuilder: AttestedRead.create)
-    ..pPM<ConflictSnapshot>(6, _omitFieldNames ? '' : 'conflictSnapshots',
-        subBuilder: ConflictSnapshot.create)
-    ..a<$core.List<$core.int>>(
-        7, _omitFieldNames ? '' : 'sealedChangeUsda', $pb.PbFieldType.OY)
-    ..a<$core.List<$core.int>>(
-        8, _omitFieldNames ? '' : 'executionLawUsdz', $pb.PbFieldType.OY)
-    ..aOS(9, _omitFieldNames ? '' : 'controllerLawHash')
-    ..aOS(10, _omitFieldNames ? '' : 'candidateCommit')
-    ..aOM<BirthCertificate>(11, _omitFieldNames ? '' : 'birthCertificate',
-        subBuilder: BirthCertificate.create)
-    ..aOM<ModelLifecycleIntent>(12, _omitFieldNames ? '' : 'modelLifecycle',
-        subBuilder: ModelLifecycleIntent.create)
-    ..aOM<IdentityProviderWitnessAdoption>(
-        13, _omitFieldNames ? '' : 'identityProviderWitnessAdoption',
-        subBuilder: IdentityProviderWitnessAdoption.create)
-    ..aOM<GenesisOffer>(14, _omitFieldNames ? '' : 'genesis',
-        subBuilder: GenesisOffer.create)
-    ..aOM<CarriedWorkspaceOffer>(
-        15, _omitFieldNames ? '' : 'carriedWorkspaceOffer',
-        subBuilder: CarriedWorkspaceOffer.create)
-    ..aOM<PlacementOffer>(16, _omitFieldNames ? '' : 'placement',
-        subBuilder: PlacementOffer.create)
-    ..pPM<LawUnit>(17, _omitFieldNames ? '' : 'lawUnits',
-        subBuilder: LawUnit.create)
-    ..aOM<DetachedSignedChange>(
-        18, _omitFieldNames ? '' : 'detachedSignedChange',
-        subBuilder: DetachedSignedChange.create)
+    ..aOS(1, _omitFieldNames ? '' : 'domain')
+    ..aOS(2, _omitFieldNames ? '' : 'expectedUnit')
+    ..aOS(3, _omitFieldNames ? '' : 'targetUnit')
+    ..aOS(4, _omitFieldNames ? '' : 'group')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  OfferRequest clone() => deepCopy();
+  DomainAction clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  OfferRequest copyWith(void Function(OfferRequest) updates) =>
-      super.copyWith((message) => updates(message as OfferRequest))
-          as OfferRequest;
+  DomainAction copyWith(void Function(DomainAction) updates) =>
+      super.copyWith((message) => updates(message as DomainAction))
+          as DomainAction;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static OfferRequest create() => OfferRequest._();
+  static DomainAction create() => DomainAction._();
   @$core.override
-  OfferRequest createEmptyInstance() => create();
+  DomainAction createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static OfferRequest getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<OfferRequest>(create);
-  static OfferRequest? _defaultInstance;
-
-  @$pb.TagNumber(2)
-  @$pb.TagNumber(7)
-  @$pb.TagNumber(12)
-  @$pb.TagNumber(13)
-  @$pb.TagNumber(14)
-  @$pb.TagNumber(15)
-  @$pb.TagNumber(16)
-  @$pb.TagNumber(18)
-  OfferRequest_Intent whichIntent() =>
-      _OfferRequest_IntentByTag[$_whichOneof(0)]!;
-  @$pb.TagNumber(2)
-  @$pb.TagNumber(7)
-  @$pb.TagNumber(12)
-  @$pb.TagNumber(13)
-  @$pb.TagNumber(14)
-  @$pb.TagNumber(15)
-  @$pb.TagNumber(16)
-  @$pb.TagNumber(18)
-  void clearIntent() => $_clearField($_whichOneof(0));
+  static DomainAction getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainAction>(create);
+  static DomainAction? _defaultInstance;
 
   @$pb.TagNumber(1)
-  WorkspaceTarget get target => $_getN(0);
-  @$pb.TagNumber(1)
-  set target(WorkspaceTarget value) => $_setField(1, value);
+  $core.String get domain => $_getSZ(0);
   @$pb.TagNumber(1)
-  $core.bool hasTarget() => $_has(0);
+  set domain($core.String value) => $_setString(0, value);
   @$pb.TagNumber(1)
-  void clearTarget() => $_clearField(1);
+  $core.bool hasDomain() => $_has(0);
   @$pb.TagNumber(1)
-  WorkspaceTarget ensureTarget() => $_ensure(0);
+  void clearDomain() => $_clearField(1);
 
   @$pb.TagNumber(2)
-  DirectiveCall get call => $_getN(1);
-  @$pb.TagNumber(2)
-  set call(DirectiveCall value) => $_setField(2, value);
+  $core.String get expectedUnit => $_getSZ(1);
   @$pb.TagNumber(2)
-  $core.bool hasCall() => $_has(1);
+  set expectedUnit($core.String value) => $_setString(1, value);
   @$pb.TagNumber(2)
-  void clearCall() => $_clearField(2);
+  $core.bool hasExpectedUnit() => $_has(1);
   @$pb.TagNumber(2)
-  DirectiveCall ensureCall() => $_ensure(1);
+  void clearExpectedUnit() => $_clearField(2);
 
   @$pb.TagNumber(3)
-  AuthoringOptions get authoring => $_getN(2);
-  @$pb.TagNumber(3)
-  set authoring(AuthoringOptions value) => $_setField(3, value);
+  $core.String get targetUnit => $_getSZ(2);
   @$pb.TagNumber(3)
-  $core.bool hasAuthoring() => $_has(2);
+  set targetUnit($core.String value) => $_setString(2, value);
   @$pb.TagNumber(3)
-  void clearAuthoring() => $_clearField(3);
+  $core.bool hasTargetUnit() => $_has(2);
   @$pb.TagNumber(3)
-  AuthoringOptions ensureAuthoring() => $_ensure(2);
+  void clearTargetUnit() => $_clearField(3);
 
-  /// Opaque compiler output. The kernel validates and composes it as USDZ/USDA; Protobuf never
-  /// becomes the law identity and the host never receives a flattened law model.
   @$pb.TagNumber(4)
-  $core.List<$core.int> get lawUsdz => $_getN(3);
+  $core.String get group => $_getSZ(3);
   @$pb.TagNumber(4)
-  set lawUsdz($core.List<$core.int> value) => $_setBytes(3, value);
+  set group($core.String value) => $_setString(3, value);
   @$pb.TagNumber(4)
-  $core.bool hasLawUsdz() => $_has(3);
+  $core.bool hasGroup() => $_has(3);
   @$pb.TagNumber(4)
-  void clearLawUsdz() => $_clearField(4);
+  void clearGroup() => $_clearField(4);
+}
 
-  @$pb.TagNumber(5)
-  $pb.PbList<AttestedRead> get attestations => $_getList(4);
+class DomainSupportPin extends $pb.GeneratedMessage {
+  factory DomainSupportPin({
+    $core.String? group,
+    $core.String? key,
+    $core.String? unitHash,
+  }) {
+    final result = create();
+    if (group != null) result.group = group;
+    if (key != null) result.key = key;
+    if (unitHash != null) result.unitHash = unitHash;
+    return result;
+  }
 
-  @$pb.TagNumber(6)
-  $pb.PbList<ConflictSnapshot> get conflictSnapshots => $_getList(5);
+  DomainSupportPin._();
 
-  /// Canonical change.usda bytes for replay/sync/admission. This is not JSON and does not grant
-  /// authority: the kernel decodes it and sends it through the same admission gate as local authoring.
-  @$pb.TagNumber(7)
-  $core.List<$core.int> get sealedChangeUsda => $_getN(6);
-  @$pb.TagNumber(7)
-  set sealedChangeUsda($core.List<$core.int> value) => $_setBytes(6, value);
-  @$pb.TagNumber(7)
-  $core.bool hasSealedChangeUsda() => $_has(6);
-  @$pb.TagNumber(7)
-  void clearSealedChangeUsda() => $_clearField(7);
+  factory DomainSupportPin.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory DomainSupportPin.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
 
-  /// Stage-zero execution law is a typed USDA closure too. It is kept distinct from the law being
-  /// installed so a host cannot substitute one identity for the other.
-  @$pb.TagNumber(8)
-  $core.List<$core.int> get executionLawUsdz => $_getN(7);
-  @$pb.TagNumber(8)
-  set executionLawUsdz($core.List<$core.int> value) => $_setBytes(7, value);
-  @$pb.TagNumber(8)
-  $core.bool hasExecutionLawUsdz() => $_has(7);
-  @$pb.TagNumber(8)
-  void clearExecutionLawUsdz() => $_clearField(8);
-
-  @$pb.TagNumber(9)
-  $core.String get controllerLawHash => $_getSZ(8);
-  @$pb.TagNumber(9)
-  set controllerLawHash($core.String value) => $_setString(8, value);
-  @$pb.TagNumber(9)
-  $core.bool hasControllerLawHash() => $_has(8);
-  @$pb.TagNumber(9)
-  void clearControllerLawHash() => $_clearField(9);
-
-  @$pb.TagNumber(10)
-  $core.String get candidateCommit => $_getSZ(9);
-  @$pb.TagNumber(10)
-  set candidateCommit($core.String value) => $_setString(9, value);
-  @$pb.TagNumber(10)
-  $core.bool hasCandidateCommit() => $_has(9);
-  @$pb.TagNumber(10)
-  void clearCandidateCommit() => $_clearField(10);
-
-  /// A client-signed certificate the kernel may attach only to the single birth recipe produced by
-  /// this offer. It is independently verified at author, receive, replay and child materialisation.
-  @$pb.TagNumber(11)
-  BirthCertificate get birthCertificate => $_getN(10);
-  @$pb.TagNumber(11)
-  set birthCertificate(BirthCertificate value) => $_setField(11, value);
-  @$pb.TagNumber(11)
-  $core.bool hasBirthCertificate() => $_has(10);
-  @$pb.TagNumber(11)
-  void clearBirthCertificate() => $_clearField(11);
-  @$pb.TagNumber(11)
-  BirthCertificate ensureBirthCertificate() => $_ensure(10);
-
-  /// Kernel-owned lifecycle command. It lowers into canonical USDA using the CURRENT installed
-  /// controller, then passes through the ordinary identity, device and relation gates.
-  @$pb.TagNumber(12)
-  ModelLifecycleIntent get modelLifecycle => $_getN(11);
-  @$pb.TagNumber(12)
-  set modelLifecycle(ModelLifecycleIntent value) => $_setField(12, value);
-  @$pb.TagNumber(12)
-  $core.bool hasModelLifecycle() => $_has(11);
-  @$pb.TagNumber(12)
-  void clearModelLifecycle() => $_clearField(12);
-  @$pb.TagNumber(12)
-  ModelLifecycleIntent ensureModelLifecycle() => $_ensure(11);
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'DomainSupportPin',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'group')
+    ..aOS(2, _omitFieldNames ? '' : 'key')
+    ..aOS(3, _omitFieldNames ? '' : 'unitHash')
+    ..hasRequiredFields = false;
 
-  @$pb.TagNumber(13)
-  IdentityProviderWitnessAdoption get identityProviderWitnessAdoption =>
-      $_getN(12);
-  @$pb.TagNumber(13)
-  set identityProviderWitnessAdoption(IdentityProviderWitnessAdoption value) =>
-      $_setField(13, value);
-  @$pb.TagNumber(13)
-  $core.bool hasIdentityProviderWitnessAdoption() => $_has(12);
-  @$pb.TagNumber(13)
-  void clearIdentityProviderWitnessAdoption() => $_clearField(13);
-  @$pb.TagNumber(13)
-  IdentityProviderWitnessAdoption ensureIdentityProviderWitnessAdoption() =>
-      $_ensure(12);
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainSupportPin clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainSupportPin copyWith(void Function(DomainSupportPin) updates) =>
+      super.copyWith((message) => updates(message as DomainSupportPin))
+          as DomainSupportPin;
 
-  @$pb.TagNumber(14)
-  GenesisOffer get genesis => $_getN(13);
-  @$pb.TagNumber(14)
-  set genesis(GenesisOffer value) => $_setField(14, value);
-  @$pb.TagNumber(14)
-  $core.bool hasGenesis() => $_has(13);
-  @$pb.TagNumber(14)
-  void clearGenesis() => $_clearField(14);
-  @$pb.TagNumber(14)
-  GenesisOffer ensureGenesis() => $_ensure(13);
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
 
-  @$pb.TagNumber(15)
-  CarriedWorkspaceOffer get carriedWorkspaceOffer => $_getN(14);
-  @$pb.TagNumber(15)
-  set carriedWorkspaceOffer(CarriedWorkspaceOffer value) =>
-      $_setField(15, value);
-  @$pb.TagNumber(15)
-  $core.bool hasCarriedWorkspaceOffer() => $_has(14);
-  @$pb.TagNumber(15)
-  void clearCarriedWorkspaceOffer() => $_clearField(15);
-  @$pb.TagNumber(15)
-  CarriedWorkspaceOffer ensureCarriedWorkspaceOffer() => $_ensure(14);
+  @$core.pragma('dart2js:noInline')
+  static DomainSupportPin create() => DomainSupportPin._();
+  @$core.override
+  DomainSupportPin createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static DomainSupportPin getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainSupportPin>(create);
+  static DomainSupportPin? _defaultInstance;
 
-  @$pb.TagNumber(16)
-  PlacementOffer get placement => $_getN(15);
-  @$pb.TagNumber(16)
-  set placement(PlacementOffer value) => $_setField(16, value);
-  @$pb.TagNumber(16)
-  $core.bool hasPlacement() => $_has(15);
-  @$pb.TagNumber(16)
-  void clearPlacement() => $_clearField(16);
-  @$pb.TagNumber(16)
-  PlacementOffer ensurePlacement() => $_ensure(15);
+  @$pb.TagNumber(1)
+  $core.String get group => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set group($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasGroup() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearGroup() => $_clearField(1);
 
-  /// D21d unit lane: law installed as per-domain units instead of one `law_usdz` package. Valid on a
-  /// genesis or install/stage lifecycle intent, never together with `law_usdz`. The kernel admits
-  /// each unit from its content (the hash is re-derived, never trusted), places the units against
-  /// the currently selected law (a unit replaces the installed unit with the same key; a set that
-  /// carries `framework` and `composition` stands alone), composes the result and refuses the
-  /// offer if composition fails.
-  @$pb.TagNumber(17)
-  $pb.PbList<LawUnit> get lawUnits => $_getList(16);
+  @$pb.TagNumber(2)
+  $core.String get key => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set key($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasKey() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearKey() => $_clearField(2);
 
-  @$pb.TagNumber(18)
-  DetachedSignedChange get detachedSignedChange => $_getN(17);
-  @$pb.TagNumber(18)
-  set detachedSignedChange(DetachedSignedChange value) => $_setField(18, value);
-  @$pb.TagNumber(18)
-  $core.bool hasDetachedSignedChange() => $_has(17);
-  @$pb.TagNumber(18)
-  void clearDetachedSignedChange() => $_clearField(18);
-  @$pb.TagNumber(18)
-  DetachedSignedChange ensureDetachedSignedChange() => $_ensure(17);
+  @$pb.TagNumber(3)
+  $core.String get unitHash => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set unitHash($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasUnitHash() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearUnitHash() => $_clearField(3);
 }
 
-/// One law unit exactly as the compiler emits it under `build/<pkg>.units/<key>-<hash>/`: every
-/// file at its logical path, `unit.usda` among them. Typed entries rather than an archive: the
-/// kernel already treats a unit as a git tree of (path, blob) entries, so each entry maps to one
-/// tree entry with no archive parser, member-name normalisation or second transport format
-/// (architecture/law_units_format.md, "Why there is no .tar.gz per unit").
-class LawUnit extends $pb.GeneratedMessage {
-  factory LawUnit({
-    $core.Iterable<LawUnitFile>? files,
+class ResolveDomainPlanRequest extends $pb.GeneratedMessage {
+  factory ResolveDomainPlanRequest({
+    DomainPlan? plan,
+    $core.String? atHash,
+    $core.bool? judgeStaged,
+    $core.String? acknowledgementPrincipal,
+    $core.bool? qualify,
+    $core.Iterable<DomainConsumerRequirement>? consumers,
+    $core.Iterable<LawUnit>? availableUnits,
   }) {
     final result = create();
-    if (files != null) result.files.addAll(files);
+    if (plan != null) result.plan = plan;
+    if (atHash != null) result.atHash = atHash;
+    if (judgeStaged != null) result.judgeStaged = judgeStaged;
+    if (acknowledgementPrincipal != null)
+      result.acknowledgementPrincipal = acknowledgementPrincipal;
+    if (qualify != null) result.qualify = qualify;
+    if (consumers != null) result.consumers.addAll(consumers);
+    if (availableUnits != null) result.availableUnits.addAll(availableUnits);
     return result;
   }
 
-  LawUnit._();
+  ResolveDomainPlanRequest._();
 
-  factory LawUnit.fromBuffer($core.List<$core.int> data,
+  factory ResolveDomainPlanRequest.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory LawUnit.fromJson($core.String json,
+  factory ResolveDomainPlanRequest.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'LawUnit',
+      _omitMessageNames ? '' : 'ResolveDomainPlanRequest',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..pPM<LawUnitFile>(1, _omitFieldNames ? '' : 'files',
-        subBuilder: LawUnitFile.create)
+    ..aOM<DomainPlan>(1, _omitFieldNames ? '' : 'plan',
+        subBuilder: DomainPlan.create)
+    ..aOS(2, _omitFieldNames ? '' : 'atHash')
+    ..aOB(3, _omitFieldNames ? '' : 'judgeStaged')
+    ..aOS(4, _omitFieldNames ? '' : 'acknowledgementPrincipal')
+    ..aOB(5, _omitFieldNames ? '' : 'qualify')
+    ..pPM<DomainConsumerRequirement>(6, _omitFieldNames ? '' : 'consumers',
+        subBuilder: DomainConsumerRequirement.create)
+    ..pPM<LawUnit>(7, _omitFieldNames ? '' : 'availableUnits',
+        subBuilder: LawUnit.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  LawUnit clone() => deepCopy();
+  ResolveDomainPlanRequest clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  LawUnit copyWith(void Function(LawUnit) updates) =>
-      super.copyWith((message) => updates(message as LawUnit)) as LawUnit;
+  ResolveDomainPlanRequest copyWith(
+          void Function(ResolveDomainPlanRequest) updates) =>
+      super.copyWith((message) => updates(message as ResolveDomainPlanRequest))
+          as ResolveDomainPlanRequest;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static LawUnit create() => LawUnit._();
+  static ResolveDomainPlanRequest create() => ResolveDomainPlanRequest._();
   @$core.override
-  LawUnit createEmptyInstance() => create();
+  ResolveDomainPlanRequest createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static LawUnit getDefault() =>
-      _defaultInstance ??= $pb.GeneratedMessage.$_defaultFor<LawUnit>(create);
-  static LawUnit? _defaultInstance;
+  static ResolveDomainPlanRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResolveDomainPlanRequest>(create);
+  static ResolveDomainPlanRequest? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $pb.PbList<LawUnitFile> get files => $_getList(0);
+  DomainPlan get plan => $_getN(0);
+  @$pb.TagNumber(1)
+  set plan(DomainPlan value) => $_setField(1, value);
+  @$pb.TagNumber(1)
+  $core.bool hasPlan() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearPlan() => $_clearField(1);
+  @$pb.TagNumber(1)
+  DomainPlan ensurePlan() => $_ensure(0);
+
+  @$pb.TagNumber(2)
+  $core.String get atHash => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set atHash($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasAtHash() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearAtHash() => $_clearField(2);
+
+  /// Optional read-only compatibility judgment of staged results, using the admission gate.
+  /// Authority and supported-client policy remain separate qualification obligations.
+  @$pb.TagNumber(3)
+  $core.bool get judgeStaged => $_getBF(2);
+  @$pb.TagNumber(3)
+  set judgeStaged($core.bool value) => $_setBool(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasJudgeStaged() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearJudgeStaged() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $core.String get acknowledgementPrincipal => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set acknowledgementPrincipal($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasAcknowledgementPrincipal() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearAcknowledgementPrincipal() => $_clearField(4);
+
+  /// Read-only qualification of complete, already prepared resulting sets. Never STAGEs law.
+  @$pb.TagNumber(5)
+  $core.bool get qualify => $_getBF(4);
+  @$pb.TagNumber(5)
+  set qualify($core.bool value) => $_setBool(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasQualify() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearQualify() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $pb.PbList<DomainConsumerRequirement> get consumers => $_getList(5);
+
+  @$pb.TagNumber(7)
+  $pb.PbList<LawUnit> get availableUnits => $_getList(6);
 }
 
-class LawUnitFile extends $pb.GeneratedMessage {
-  factory LawUnitFile({
-    $core.String? path,
-    $core.List<$core.int>? content,
+class DomainConsumerRequirement extends $pb.GeneratedMessage {
+  factory DomainConsumerRequirement({
+    $core.String? name,
+    $core.List<$core.int>? applicationMatrixUsda,
   }) {
     final result = create();
-    if (path != null) result.path = path;
-    if (content != null) result.content = content;
+    if (name != null) result.name = name;
+    if (applicationMatrixUsda != null)
+      result.applicationMatrixUsda = applicationMatrixUsda;
     return result;
   }
 
-  LawUnitFile._();
+  DomainConsumerRequirement._();
 
-  factory LawUnitFile.fromBuffer($core.List<$core.int> data,
+  factory DomainConsumerRequirement.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory LawUnitFile.fromJson($core.String json,
+  factory DomainConsumerRequirement.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'LawUnitFile',
+      _omitMessageNames ? '' : 'DomainConsumerRequirement',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aOS(1, _omitFieldNames ? '' : 'path')
+    ..aOS(1, _omitFieldNames ? '' : 'name')
     ..a<$core.List<$core.int>>(
-        2, _omitFieldNames ? '' : 'content', $pb.PbFieldType.OY)
+        2, _omitFieldNames ? '' : 'applicationMatrixUsda', $pb.PbFieldType.OY)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  LawUnitFile clone() => deepCopy();
+  DomainConsumerRequirement clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  LawUnitFile copyWith(void Function(LawUnitFile) updates) =>
-      super.copyWith((message) => updates(message as LawUnitFile))
-          as LawUnitFile;
+  DomainConsumerRequirement copyWith(
+          void Function(DomainConsumerRequirement) updates) =>
+      super.copyWith((message) => updates(message as DomainConsumerRequirement))
+          as DomainConsumerRequirement;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static LawUnitFile create() => LawUnitFile._();
+  static DomainConsumerRequirement create() => DomainConsumerRequirement._();
   @$core.override
-  LawUnitFile createEmptyInstance() => create();
+  DomainConsumerRequirement createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static LawUnitFile getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<LawUnitFile>(create);
-  static LawUnitFile? _defaultInstance;
+  static DomainConsumerRequirement getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainConsumerRequirement>(create);
+  static DomainConsumerRequirement? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $core.String get path => $_getSZ(0);
+  $core.String get name => $_getSZ(0);
   @$pb.TagNumber(1)
-  set path($core.String value) => $_setString(0, value);
+  set name($core.String value) => $_setString(0, value);
   @$pb.TagNumber(1)
-  $core.bool hasPath() => $_has(0);
+  $core.bool hasName() => $_has(0);
   @$pb.TagNumber(1)
-  void clearPath() => $_clearField(1);
+  void clearName() => $_clearField(1);
 
   @$pb.TagNumber(2)
-  $core.List<$core.int> get content => $_getN(1);
+  $core.List<$core.int> get applicationMatrixUsda => $_getN(1);
   @$pb.TagNumber(2)
-  set content($core.List<$core.int> value) => $_setBytes(1, value);
+  set applicationMatrixUsda($core.List<$core.int> value) =>
+      $_setBytes(1, value);
   @$pb.TagNumber(2)
-  $core.bool hasContent() => $_has(1);
+  $core.bool hasApplicationMatrixUsda() => $_has(1);
   @$pb.TagNumber(2)
-  void clearContent() => $_clearField(2);
+  void clearApplicationMatrixUsda() => $_clearField(2);
 }
 
-class AttestedRead extends $pb.GeneratedMessage {
-  factory AttestedRead({
-    $core.String? queryId,
-    NomosStruct? arguments,
-    NomosValue? result,
-    ReadAttestation? evidence,
+class DomainConsumerVerdict extends $pb.GeneratedMessage {
+  factory DomainConsumerVerdict({
+    $core.String? name,
+    $core.bool? compatible,
+    $core.Iterable<$core.String>? failing,
   }) {
-    final result$ = create();
-    if (queryId != null) result$.queryId = queryId;
-    if (arguments != null) result$.arguments = arguments;
-    if (result != null) result$.result = result;
-    if (evidence != null) result$.evidence = evidence;
-    return result$;
+    final result = create();
+    if (name != null) result.name = name;
+    if (compatible != null) result.compatible = compatible;
+    if (failing != null) result.failing.addAll(failing);
+    return result;
   }
 
-  AttestedRead._();
+  DomainConsumerVerdict._();
 
-  factory AttestedRead.fromBuffer($core.List<$core.int> data,
+  factory DomainConsumerVerdict.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory AttestedRead.fromJson($core.String json,
+  factory DomainConsumerVerdict.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'AttestedRead',
+      _omitMessageNames ? '' : 'DomainConsumerVerdict',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aOS(1, _omitFieldNames ? '' : 'queryId')
-    ..aOM<NomosStruct>(2, _omitFieldNames ? '' : 'arguments',
-        subBuilder: NomosStruct.create)
-    ..aOM<NomosValue>(3, _omitFieldNames ? '' : 'result',
-        subBuilder: NomosValue.create)
-    ..aOM<ReadAttestation>(5, _omitFieldNames ? '' : 'evidence',
-        subBuilder: ReadAttestation.create)
+    ..aOS(1, _omitFieldNames ? '' : 'name')
+    ..aOB(2, _omitFieldNames ? '' : 'compatible')
+    ..pPS(3, _omitFieldNames ? '' : 'failing')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  AttestedRead clone() => deepCopy();
+  DomainConsumerVerdict clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  AttestedRead copyWith(void Function(AttestedRead) updates) =>
-      super.copyWith((message) => updates(message as AttestedRead))
-          as AttestedRead;
+  DomainConsumerVerdict copyWith(
+          void Function(DomainConsumerVerdict) updates) =>
+      super.copyWith((message) => updates(message as DomainConsumerVerdict))
+          as DomainConsumerVerdict;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static AttestedRead create() => AttestedRead._();
+  static DomainConsumerVerdict create() => DomainConsumerVerdict._();
   @$core.override
-  AttestedRead createEmptyInstance() => create();
+  DomainConsumerVerdict createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static AttestedRead getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<AttestedRead>(create);
-  static AttestedRead? _defaultInstance;
+  static DomainConsumerVerdict getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainConsumerVerdict>(create);
+  static DomainConsumerVerdict? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $core.String get queryId => $_getSZ(0);
+  $core.String get name => $_getSZ(0);
   @$pb.TagNumber(1)
-  set queryId($core.String value) => $_setString(0, value);
+  set name($core.String value) => $_setString(0, value);
   @$pb.TagNumber(1)
-  $core.bool hasQueryId() => $_has(0);
+  $core.bool hasName() => $_has(0);
   @$pb.TagNumber(1)
-  void clearQueryId() => $_clearField(1);
+  void clearName() => $_clearField(1);
 
   @$pb.TagNumber(2)
-  NomosStruct get arguments => $_getN(1);
-  @$pb.TagNumber(2)
-  set arguments(NomosStruct value) => $_setField(2, value);
+  $core.bool get compatible => $_getBF(1);
   @$pb.TagNumber(2)
-  $core.bool hasArguments() => $_has(1);
+  set compatible($core.bool value) => $_setBool(1, value);
   @$pb.TagNumber(2)
-  void clearArguments() => $_clearField(2);
+  $core.bool hasCompatible() => $_has(1);
   @$pb.TagNumber(2)
-  NomosStruct ensureArguments() => $_ensure(1);
+  void clearCompatible() => $_clearField(2);
 
   @$pb.TagNumber(3)
-  NomosValue get result => $_getN(2);
-  @$pb.TagNumber(3)
-  set result(NomosValue value) => $_setField(3, value);
-  @$pb.TagNumber(3)
-  $core.bool hasResult() => $_has(2);
-  @$pb.TagNumber(3)
-  void clearResult() => $_clearField(3);
-  @$pb.TagNumber(3)
-  NomosValue ensureResult() => $_ensure(2);
-
-  @$pb.TagNumber(5)
-  ReadAttestation get evidence => $_getN(3);
-  @$pb.TagNumber(5)
-  set evidence(ReadAttestation value) => $_setField(5, value);
-  @$pb.TagNumber(5)
-  $core.bool hasEvidence() => $_has(3);
-  @$pb.TagNumber(5)
-  void clearEvidence() => $_clearField(5);
-  @$pb.TagNumber(5)
-  ReadAttestation ensureEvidence() => $_ensure(3);
+  $pb.PbList<$core.String> get failing => $_getList(2);
 }
 
-/// The closed Protobuf projection of the canonical USDA read-attestation
-/// evidence. It is carried on an OfferRequest and has no mutation semantics of
-/// its own. The kernel verifies it before a plan may consume the read.
-class ReadAttestation extends $pb.GeneratedMessage {
-  factory ReadAttestation({
-    $fixnum.Int64? version,
-    $core.String? sourceWorkspace,
-    $core.String? sourceGenesis,
-    $core.String? sourceHead,
-    $core.String? foldRoot,
-    $fixnum.Int64? sourceEpoch,
-    $fixnum.Int64? attestedAtMillis,
-    $core.List<$core.int>? publicKey,
-    $core.List<$core.int>? signature,
+class ResolvedDomainGroup extends $pb.GeneratedMessage {
+  factory ResolvedDomainGroup({
+    $core.String? group,
+    $core.String? candidateHash,
+    $core.Iterable<DomainUnitPin>? units,
   }) {
     final result = create();
-    if (version != null) result.version = version;
-    if (sourceWorkspace != null) result.sourceWorkspace = sourceWorkspace;
-    if (sourceGenesis != null) result.sourceGenesis = sourceGenesis;
-    if (sourceHead != null) result.sourceHead = sourceHead;
-    if (foldRoot != null) result.foldRoot = foldRoot;
-    if (sourceEpoch != null) result.sourceEpoch = sourceEpoch;
-    if (attestedAtMillis != null) result.attestedAtMillis = attestedAtMillis;
-    if (publicKey != null) result.publicKey = publicKey;
-    if (signature != null) result.signature = signature;
+    if (group != null) result.group = group;
+    if (candidateHash != null) result.candidateHash = candidateHash;
+    if (units != null) result.units.addAll(units);
     return result;
   }
 
-  ReadAttestation._();
+  ResolvedDomainGroup._();
 
-  factory ReadAttestation.fromBuffer($core.List<$core.int> data,
+  factory ResolvedDomainGroup.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory ReadAttestation.fromJson($core.String json,
+  factory ResolvedDomainGroup.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'ReadAttestation',
+      _omitMessageNames ? '' : 'ResolvedDomainGroup',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aInt64(1, _omitFieldNames ? '' : 'version')
-    ..aOS(2, _omitFieldNames ? '' : 'sourceWorkspace')
-    ..aOS(3, _omitFieldNames ? '' : 'sourceGenesis')
-    ..aOS(4, _omitFieldNames ? '' : 'sourceHead')
-    ..aOS(5, _omitFieldNames ? '' : 'foldRoot')
-    ..aInt64(6, _omitFieldNames ? '' : 'sourceEpoch')
-    ..aInt64(7, _omitFieldNames ? '' : 'attestedAtMillis')
-    ..a<$core.List<$core.int>>(
-        8, _omitFieldNames ? '' : 'publicKey', $pb.PbFieldType.OY)
-    ..a<$core.List<$core.int>>(
-        9, _omitFieldNames ? '' : 'signature', $pb.PbFieldType.OY)
+    ..aOS(1, _omitFieldNames ? '' : 'group')
+    ..aOS(2, _omitFieldNames ? '' : 'candidateHash')
+    ..pPM<DomainUnitPin>(3, _omitFieldNames ? '' : 'units',
+        subBuilder: DomainUnitPin.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  ReadAttestation clone() => deepCopy();
+  ResolvedDomainGroup clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  ReadAttestation copyWith(void Function(ReadAttestation) updates) =>
-      super.copyWith((message) => updates(message as ReadAttestation))
-          as ReadAttestation;
+  ResolvedDomainGroup copyWith(void Function(ResolvedDomainGroup) updates) =>
+      super.copyWith((message) => updates(message as ResolvedDomainGroup))
+          as ResolvedDomainGroup;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static ReadAttestation create() => ReadAttestation._();
+  static ResolvedDomainGroup create() => ResolvedDomainGroup._();
   @$core.override
-  ReadAttestation createEmptyInstance() => create();
+  ResolvedDomainGroup createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static ReadAttestation getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<ReadAttestation>(create);
-  static ReadAttestation? _defaultInstance;
+  static ResolvedDomainGroup getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResolvedDomainGroup>(create);
+  static ResolvedDomainGroup? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $fixnum.Int64 get version => $_getI64(0);
+  $core.String get group => $_getSZ(0);
   @$pb.TagNumber(1)
-  set version($fixnum.Int64 value) => $_setInt64(0, value);
+  set group($core.String value) => $_setString(0, value);
   @$pb.TagNumber(1)
-  $core.bool hasVersion() => $_has(0);
+  $core.bool hasGroup() => $_has(0);
   @$pb.TagNumber(1)
-  void clearVersion() => $_clearField(1);
+  void clearGroup() => $_clearField(1);
 
   @$pb.TagNumber(2)
-  $core.String get sourceWorkspace => $_getSZ(1);
+  $core.String get candidateHash => $_getSZ(1);
   @$pb.TagNumber(2)
-  set sourceWorkspace($core.String value) => $_setString(1, value);
+  set candidateHash($core.String value) => $_setString(1, value);
   @$pb.TagNumber(2)
-  $core.bool hasSourceWorkspace() => $_has(1);
+  $core.bool hasCandidateHash() => $_has(1);
   @$pb.TagNumber(2)
-  void clearSourceWorkspace() => $_clearField(2);
+  void clearCandidateHash() => $_clearField(2);
 
   @$pb.TagNumber(3)
-  $core.String get sourceGenesis => $_getSZ(2);
-  @$pb.TagNumber(3)
-  set sourceGenesis($core.String value) => $_setString(2, value);
-  @$pb.TagNumber(3)
-  $core.bool hasSourceGenesis() => $_has(2);
-  @$pb.TagNumber(3)
-  void clearSourceGenesis() => $_clearField(3);
-
-  @$pb.TagNumber(4)
-  $core.String get sourceHead => $_getSZ(3);
-  @$pb.TagNumber(4)
-  set sourceHead($core.String value) => $_setString(3, value);
-  @$pb.TagNumber(4)
-  $core.bool hasSourceHead() => $_has(3);
-  @$pb.TagNumber(4)
-  void clearSourceHead() => $_clearField(4);
-
-  @$pb.TagNumber(5)
-  $core.String get foldRoot => $_getSZ(4);
-  @$pb.TagNumber(5)
-  set foldRoot($core.String value) => $_setString(4, value);
-  @$pb.TagNumber(5)
-  $core.bool hasFoldRoot() => $_has(4);
-  @$pb.TagNumber(5)
-  void clearFoldRoot() => $_clearField(5);
-
-  @$pb.TagNumber(6)
-  $fixnum.Int64 get sourceEpoch => $_getI64(5);
-  @$pb.TagNumber(6)
-  set sourceEpoch($fixnum.Int64 value) => $_setInt64(5, value);
-  @$pb.TagNumber(6)
-  $core.bool hasSourceEpoch() => $_has(5);
-  @$pb.TagNumber(6)
-  void clearSourceEpoch() => $_clearField(6);
-
-  @$pb.TagNumber(7)
-  $fixnum.Int64 get attestedAtMillis => $_getI64(6);
-  @$pb.TagNumber(7)
-  set attestedAtMillis($fixnum.Int64 value) => $_setInt64(6, value);
-  @$pb.TagNumber(7)
-  $core.bool hasAttestedAtMillis() => $_has(6);
-  @$pb.TagNumber(7)
-  void clearAttestedAtMillis() => $_clearField(7);
-
-  @$pb.TagNumber(8)
-  $core.List<$core.int> get publicKey => $_getN(7);
-  @$pb.TagNumber(8)
-  set publicKey($core.List<$core.int> value) => $_setBytes(7, value);
-  @$pb.TagNumber(8)
-  $core.bool hasPublicKey() => $_has(7);
-  @$pb.TagNumber(8)
-  void clearPublicKey() => $_clearField(8);
-
-  @$pb.TagNumber(9)
-  $core.List<$core.int> get signature => $_getN(8);
-  @$pb.TagNumber(9)
-  set signature($core.List<$core.int> value) => $_setBytes(8, value);
-  @$pb.TagNumber(9)
-  $core.bool hasSignature() => $_has(8);
-  @$pb.TagNumber(9)
-  void clearSignature() => $_clearField(9);
+  $pb.PbList<DomainUnitPin> get units => $_getList(2);
 }
 
-class ConflictSnapshot extends $pb.GeneratedMessage {
-  factory ConflictSnapshot({
-    $core.String? aggregateType,
-    $core.String? aggregateId,
-    $core.String? field_3,
-    $core.String? targetSchema,
-    $core.String? token,
+class DomainUnitPin extends $pb.GeneratedMessage {
+  factory DomainUnitPin({
+    $core.String? key,
+    $core.String? unitHash,
   }) {
     final result = create();
-    if (aggregateType != null) result.aggregateType = aggregateType;
-    if (aggregateId != null) result.aggregateId = aggregateId;
-    if (field_3 != null) result.field_3 = field_3;
-    if (targetSchema != null) result.targetSchema = targetSchema;
-    if (token != null) result.token = token;
+    if (key != null) result.key = key;
+    if (unitHash != null) result.unitHash = unitHash;
     return result;
   }
 
-  ConflictSnapshot._();
+  DomainUnitPin._();
 
-  factory ConflictSnapshot.fromBuffer($core.List<$core.int> data,
+  factory DomainUnitPin.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory ConflictSnapshot.fromJson($core.String json,
+  factory DomainUnitPin.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'ConflictSnapshot',
+      _omitMessageNames ? '' : 'DomainUnitPin',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aOS(1, _omitFieldNames ? '' : 'aggregateType')
-    ..aOS(2, _omitFieldNames ? '' : 'aggregateId')
-    ..aOS(3, _omitFieldNames ? '' : 'field')
-    ..aOS(4, _omitFieldNames ? '' : 'targetSchema')
-    ..aOS(5, _omitFieldNames ? '' : 'token')
+    ..aOS(1, _omitFieldNames ? '' : 'key')
+    ..aOS(2, _omitFieldNames ? '' : 'unitHash')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  ConflictSnapshot clone() => deepCopy();
+  DomainUnitPin clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  ConflictSnapshot copyWith(void Function(ConflictSnapshot) updates) =>
-      super.copyWith((message) => updates(message as ConflictSnapshot))
-          as ConflictSnapshot;
+  DomainUnitPin copyWith(void Function(DomainUnitPin) updates) =>
+      super.copyWith((message) => updates(message as DomainUnitPin))
+          as DomainUnitPin;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static ConflictSnapshot create() => ConflictSnapshot._();
+  static DomainUnitPin create() => DomainUnitPin._();
   @$core.override
-  ConflictSnapshot createEmptyInstance() => create();
+  DomainUnitPin createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static ConflictSnapshot getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<ConflictSnapshot>(create);
-  static ConflictSnapshot? _defaultInstance;
+  static DomainUnitPin getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainUnitPin>(create);
+  static DomainUnitPin? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $core.String get aggregateType => $_getSZ(0);
+  $core.String get key => $_getSZ(0);
   @$pb.TagNumber(1)
-  set aggregateType($core.String value) => $_setString(0, value);
+  set key($core.String value) => $_setString(0, value);
   @$pb.TagNumber(1)
-  $core.bool hasAggregateType() => $_has(0);
+  $core.bool hasKey() => $_has(0);
   @$pb.TagNumber(1)
-  void clearAggregateType() => $_clearField(1);
+  void clearKey() => $_clearField(1);
 
   @$pb.TagNumber(2)
-  $core.String get aggregateId => $_getSZ(1);
+  $core.String get unitHash => $_getSZ(1);
   @$pb.TagNumber(2)
-  set aggregateId($core.String value) => $_setString(1, value);
+  set unitHash($core.String value) => $_setString(1, value);
   @$pb.TagNumber(2)
-  $core.bool hasAggregateId() => $_has(1);
+  $core.bool hasUnitHash() => $_has(1);
   @$pb.TagNumber(2)
-  void clearAggregateId() => $_clearField(2);
+  void clearUnitHash() => $_clearField(2);
+}
 
-  @$pb.TagNumber(3)
-  $core.String get field_3 => $_getSZ(2);
-  @$pb.TagNumber(3)
-  set field_3($core.String value) => $_setString(2, value);
-  @$pb.TagNumber(3)
-  $core.bool hasField_3() => $_has(2);
-  @$pb.TagNumber(3)
-  void clearField_3() => $_clearField(3);
+class ResolveDomainPlanResponse extends $pb.GeneratedMessage {
+  factory ResolveDomainPlanResponse({
+    $core.String? atHash,
+    $core.String? atStateRoot,
+    $core.Iterable<ResolvedDomainGroup>? groups,
+    $core.Iterable<$core.String>? retireInstallations,
+    $core.Iterable<DomainUnitPin>? selectedDomains,
+    $core.bool? ready,
+    $core.Iterable<$core.String>? violations,
+    $core.Iterable<DomainConsumerVerdict>? consumers,
+    $core.Iterable<LawPreparationUnitSet>? unitSets,
+    $core.String? kernelGeneration,
+    $core.String? effectiveLawIdentity,
+  }) {
+    final result = create();
+    if (atHash != null) result.atHash = atHash;
+    if (atStateRoot != null) result.atStateRoot = atStateRoot;
+    if (groups != null) result.groups.addAll(groups);
+    if (retireInstallations != null)
+      result.retireInstallations.addAll(retireInstallations);
+    if (selectedDomains != null) result.selectedDomains.addAll(selectedDomains);
+    if (ready != null) result.ready = ready;
+    if (violations != null) result.violations.addAll(violations);
+    if (consumers != null) result.consumers.addAll(consumers);
+    if (unitSets != null) result.unitSets.addAll(unitSets);
+    if (kernelGeneration != null) result.kernelGeneration = kernelGeneration;
+    if (effectiveLawIdentity != null)
+      result.effectiveLawIdentity = effectiveLawIdentity;
+    return result;
+  }
 
-  @$pb.TagNumber(4)
-  $core.String get targetSchema => $_getSZ(3);
-  @$pb.TagNumber(4)
-  set targetSchema($core.String value) => $_setString(3, value);
-  @$pb.TagNumber(4)
-  $core.bool hasTargetSchema() => $_has(3);
-  @$pb.TagNumber(4)
-  void clearTargetSchema() => $_clearField(4);
+  ResolveDomainPlanResponse._();
 
-  @$pb.TagNumber(5)
-  $core.String get token => $_getSZ(4);
-  @$pb.TagNumber(5)
-  set token($core.String value) => $_setString(4, value);
-  @$pb.TagNumber(5)
-  $core.bool hasToken() => $_has(4);
+  factory ResolveDomainPlanResponse.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ResolveDomainPlanResponse.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ResolveDomainPlanResponse',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'atHash')
+    ..aOS(2, _omitFieldNames ? '' : 'atStateRoot')
+    ..pPM<ResolvedDomainGroup>(3, _omitFieldNames ? '' : 'groups',
+        subBuilder: ResolvedDomainGroup.create)
+    ..pPS(4, _omitFieldNames ? '' : 'retireInstallations')
+    ..pPM<DomainUnitPin>(5, _omitFieldNames ? '' : 'selectedDomains',
+        subBuilder: DomainUnitPin.create)
+    ..aOB(6, _omitFieldNames ? '' : 'ready')
+    ..pPS(7, _omitFieldNames ? '' : 'violations')
+    ..pPM<DomainConsumerVerdict>(8, _omitFieldNames ? '' : 'consumers',
+        subBuilder: DomainConsumerVerdict.create)
+    ..pPM<LawPreparationUnitSet>(9, _omitFieldNames ? '' : 'unitSets',
+        subBuilder: LawPreparationUnitSet.create)
+    ..aOS(10, _omitFieldNames ? '' : 'kernelGeneration')
+    ..aOS(11, _omitFieldNames ? '' : 'effectiveLawIdentity')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResolveDomainPlanResponse clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ResolveDomainPlanResponse copyWith(
+          void Function(ResolveDomainPlanResponse) updates) =>
+      super.copyWith((message) => updates(message as ResolveDomainPlanResponse))
+          as ResolveDomainPlanResponse;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ResolveDomainPlanResponse create() => ResolveDomainPlanResponse._();
+  @$core.override
+  ResolveDomainPlanResponse createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ResolveDomainPlanResponse getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ResolveDomainPlanResponse>(create);
+  static ResolveDomainPlanResponse? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get atHash => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set atHash($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasAtHash() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearAtHash() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get atStateRoot => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set atStateRoot($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasAtStateRoot() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearAtStateRoot() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $pb.PbList<ResolvedDomainGroup> get groups => $_getList(2);
+
+  @$pb.TagNumber(4)
+  $pb.PbList<$core.String> get retireInstallations => $_getList(3);
+
+  @$pb.TagNumber(5)
+  $pb.PbList<DomainUnitPin> get selectedDomains => $_getList(4);
+
+  @$pb.TagNumber(6)
+  $core.bool get ready => $_getBF(5);
+  @$pb.TagNumber(6)
+  set ready($core.bool value) => $_setBool(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasReady() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearReady() => $_clearField(6);
+
+  @$pb.TagNumber(7)
+  $pb.PbList<$core.String> get violations => $_getList(6);
+
+  @$pb.TagNumber(8)
+  $pb.PbList<DomainConsumerVerdict> get consumers => $_getList(7);
+
+  @$pb.TagNumber(9)
+  $pb.PbList<LawPreparationUnitSet> get unitSets => $_getList(8);
+
+  @$pb.TagNumber(10)
+  $core.String get kernelGeneration => $_getSZ(9);
+  @$pb.TagNumber(10)
+  set kernelGeneration($core.String value) => $_setString(9, value);
+  @$pb.TagNumber(10)
+  $core.bool hasKernelGeneration() => $_has(9);
+  @$pb.TagNumber(10)
+  void clearKernelGeneration() => $_clearField(10);
+
+  /// Present after exact prospective-law qualification, not a manifest-only preview.
+  @$pb.TagNumber(11)
+  $core.String get effectiveLawIdentity => $_getSZ(10);
+  @$pb.TagNumber(11)
+  set effectiveLawIdentity($core.String value) => $_setString(10, value);
+  @$pb.TagNumber(11)
+  $core.bool hasEffectiveLawIdentity() => $_has(10);
+  @$pb.TagNumber(11)
+  void clearEffectiveLawIdentity() => $_clearField(11);
+}
+
+class DomainTransitionActivation extends $pb.GeneratedMessage {
+  factory DomainTransitionActivation({
+    DomainPlan? plan,
+    ResolveDomainPlanResponse? resolved,
+  }) {
+    final result = create();
+    if (plan != null) result.plan = plan;
+    if (resolved != null) result.resolved = resolved;
+    return result;
+  }
+
+  DomainTransitionActivation._();
+
+  factory DomainTransitionActivation.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory DomainTransitionActivation.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'DomainTransitionActivation',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOM<DomainPlan>(1, _omitFieldNames ? '' : 'plan',
+        subBuilder: DomainPlan.create)
+    ..aOM<ResolveDomainPlanResponse>(2, _omitFieldNames ? '' : 'resolved',
+        subBuilder: ResolveDomainPlanResponse.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainTransitionActivation clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DomainTransitionActivation copyWith(
+          void Function(DomainTransitionActivation) updates) =>
+      super.copyWith(
+              (message) => updates(message as DomainTransitionActivation))
+          as DomainTransitionActivation;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static DomainTransitionActivation create() => DomainTransitionActivation._();
+  @$core.override
+  DomainTransitionActivation createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static DomainTransitionActivation getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DomainTransitionActivation>(create);
+  static DomainTransitionActivation? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  DomainPlan get plan => $_getN(0);
+  @$pb.TagNumber(1)
+  set plan(DomainPlan value) => $_setField(1, value);
+  @$pb.TagNumber(1)
+  $core.bool hasPlan() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearPlan() => $_clearField(1);
+  @$pb.TagNumber(1)
+  DomainPlan ensurePlan() => $_ensure(0);
+
+  /// The exact preview is signed and re-resolved by every receiving kernel.
+  @$pb.TagNumber(2)
+  ResolveDomainPlanResponse get resolved => $_getN(1);
+  @$pb.TagNumber(2)
+  set resolved(ResolveDomainPlanResponse value) => $_setField(2, value);
+  @$pb.TagNumber(2)
+  $core.bool hasResolved() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearResolved() => $_clearField(2);
+  @$pb.TagNumber(2)
+  ResolveDomainPlanResponse ensureResolved() => $_ensure(1);
+}
+
+/// Exact framework authoring request for the ordinary provider-witness adoption directive. The
+/// signed reads remain OfferRequest evidence; this message neither imports verifier material nor
+/// changes custody outside the destination workspace's normal offer gate.
+class IdentityProviderWitnessAdoption extends $pb.GeneratedMessage {
+  factory IdentityProviderWitnessAdoption({
+    $core.String? sourceWorkspace,
+  }) {
+    final result = create();
+    if (sourceWorkspace != null) result.sourceWorkspace = sourceWorkspace;
+    return result;
+  }
+
+  IdentityProviderWitnessAdoption._();
+
+  factory IdentityProviderWitnessAdoption.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory IdentityProviderWitnessAdoption.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'IdentityProviderWitnessAdoption',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'sourceWorkspace')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  IdentityProviderWitnessAdoption clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  IdentityProviderWitnessAdoption copyWith(
+          void Function(IdentityProviderWitnessAdoption) updates) =>
+      super.copyWith(
+              (message) => updates(message as IdentityProviderWitnessAdoption))
+          as IdentityProviderWitnessAdoption;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static IdentityProviderWitnessAdoption create() =>
+      IdentityProviderWitnessAdoption._();
+  @$core.override
+  IdentityProviderWitnessAdoption createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static IdentityProviderWitnessAdoption getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<IdentityProviderWitnessAdoption>(
+          create);
+  static IdentityProviderWitnessAdoption? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get sourceWorkspace => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set sourceWorkspace($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasSourceWorkspace() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearSourceWorkspace() => $_clearField(1);
+}
+
+enum OfferRequest_Intent {
+  call,
+  sealedChangeUsda,
+  modelLifecycle,
+  identityProviderWitnessAdoption,
+  genesis,
+  carriedWorkspaceOffer,
+  placement,
+  detachedSignedChange,
+  notSet
+}
+
+class OfferRequest extends $pb.GeneratedMessage {
+  factory OfferRequest({
+    WorkspaceTarget? target,
+    DirectiveCall? call,
+    AuthoringOptions? authoring,
+    $core.List<$core.int>? lawUsdz,
+    $core.Iterable<AttestedRead>? attestations,
+    $core.Iterable<ConflictSnapshot>? conflictSnapshots,
+    $core.List<$core.int>? sealedChangeUsda,
+    $core.List<$core.int>? executionLawUsdz,
+    $core.String? controllerLawHash,
+    $core.String? candidateCommit,
+    BirthCertificate? birthCertificate,
+    ModelLifecycleIntent? modelLifecycle,
+    IdentityProviderWitnessAdoption? identityProviderWitnessAdoption,
+    GenesisOffer? genesis,
+    CarriedWorkspaceOffer? carriedWorkspaceOffer,
+    PlacementOffer? placement,
+    $core.Iterable<LawUnit>? lawUnits,
+    DetachedSignedChange? detachedSignedChange,
+  }) {
+    final result = create();
+    if (target != null) result.target = target;
+    if (call != null) result.call = call;
+    if (authoring != null) result.authoring = authoring;
+    if (lawUsdz != null) result.lawUsdz = lawUsdz;
+    if (attestations != null) result.attestations.addAll(attestations);
+    if (conflictSnapshots != null)
+      result.conflictSnapshots.addAll(conflictSnapshots);
+    if (sealedChangeUsda != null) result.sealedChangeUsda = sealedChangeUsda;
+    if (executionLawUsdz != null) result.executionLawUsdz = executionLawUsdz;
+    if (controllerLawHash != null) result.controllerLawHash = controllerLawHash;
+    if (candidateCommit != null) result.candidateCommit = candidateCommit;
+    if (birthCertificate != null) result.birthCertificate = birthCertificate;
+    if (modelLifecycle != null) result.modelLifecycle = modelLifecycle;
+    if (identityProviderWitnessAdoption != null)
+      result.identityProviderWitnessAdoption = identityProviderWitnessAdoption;
+    if (genesis != null) result.genesis = genesis;
+    if (carriedWorkspaceOffer != null)
+      result.carriedWorkspaceOffer = carriedWorkspaceOffer;
+    if (placement != null) result.placement = placement;
+    if (lawUnits != null) result.lawUnits.addAll(lawUnits);
+    if (detachedSignedChange != null)
+      result.detachedSignedChange = detachedSignedChange;
+    return result;
+  }
+
+  OfferRequest._();
+
+  factory OfferRequest.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory OfferRequest.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static const $core.Map<$core.int, OfferRequest_Intent>
+      _OfferRequest_IntentByTag = {
+    2: OfferRequest_Intent.call,
+    7: OfferRequest_Intent.sealedChangeUsda,
+    12: OfferRequest_Intent.modelLifecycle,
+    13: OfferRequest_Intent.identityProviderWitnessAdoption,
+    14: OfferRequest_Intent.genesis,
+    15: OfferRequest_Intent.carriedWorkspaceOffer,
+    16: OfferRequest_Intent.placement,
+    18: OfferRequest_Intent.detachedSignedChange,
+    0: OfferRequest_Intent.notSet
+  };
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'OfferRequest',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..oo(0, [2, 7, 12, 13, 14, 15, 16, 18])
+    ..aOM<WorkspaceTarget>(1, _omitFieldNames ? '' : 'target',
+        subBuilder: WorkspaceTarget.create)
+    ..aOM<DirectiveCall>(2, _omitFieldNames ? '' : 'call',
+        subBuilder: DirectiveCall.create)
+    ..aOM<AuthoringOptions>(3, _omitFieldNames ? '' : 'authoring',
+        subBuilder: AuthoringOptions.create)
+    ..a<$core.List<$core.int>>(
+        4, _omitFieldNames ? '' : 'lawUsdz', $pb.PbFieldType.OY)
+    ..pPM<AttestedRead>(5, _omitFieldNames ? '' : 'attestations',
+        subBuilder: AttestedRead.create)
+    ..pPM<ConflictSnapshot>(6, _omitFieldNames ? '' : 'conflictSnapshots',
+        subBuilder: ConflictSnapshot.create)
+    ..a<$core.List<$core.int>>(
+        7, _omitFieldNames ? '' : 'sealedChangeUsda', $pb.PbFieldType.OY)
+    ..a<$core.List<$core.int>>(
+        8, _omitFieldNames ? '' : 'executionLawUsdz', $pb.PbFieldType.OY)
+    ..aOS(9, _omitFieldNames ? '' : 'controllerLawHash')
+    ..aOS(10, _omitFieldNames ? '' : 'candidateCommit')
+    ..aOM<BirthCertificate>(11, _omitFieldNames ? '' : 'birthCertificate',
+        subBuilder: BirthCertificate.create)
+    ..aOM<ModelLifecycleIntent>(12, _omitFieldNames ? '' : 'modelLifecycle',
+        subBuilder: ModelLifecycleIntent.create)
+    ..aOM<IdentityProviderWitnessAdoption>(
+        13, _omitFieldNames ? '' : 'identityProviderWitnessAdoption',
+        subBuilder: IdentityProviderWitnessAdoption.create)
+    ..aOM<GenesisOffer>(14, _omitFieldNames ? '' : 'genesis',
+        subBuilder: GenesisOffer.create)
+    ..aOM<CarriedWorkspaceOffer>(
+        15, _omitFieldNames ? '' : 'carriedWorkspaceOffer',
+        subBuilder: CarriedWorkspaceOffer.create)
+    ..aOM<PlacementOffer>(16, _omitFieldNames ? '' : 'placement',
+        subBuilder: PlacementOffer.create)
+    ..pPM<LawUnit>(17, _omitFieldNames ? '' : 'lawUnits',
+        subBuilder: LawUnit.create)
+    ..aOM<DetachedSignedChange>(
+        18, _omitFieldNames ? '' : 'detachedSignedChange',
+        subBuilder: DetachedSignedChange.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  OfferRequest clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  OfferRequest copyWith(void Function(OfferRequest) updates) =>
+      super.copyWith((message) => updates(message as OfferRequest))
+          as OfferRequest;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static OfferRequest create() => OfferRequest._();
+  @$core.override
+  OfferRequest createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static OfferRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<OfferRequest>(create);
+  static OfferRequest? _defaultInstance;
+
+  @$pb.TagNumber(2)
+  @$pb.TagNumber(7)
+  @$pb.TagNumber(12)
+  @$pb.TagNumber(13)
+  @$pb.TagNumber(14)
+  @$pb.TagNumber(15)
+  @$pb.TagNumber(16)
+  @$pb.TagNumber(18)
+  OfferRequest_Intent whichIntent() =>
+      _OfferRequest_IntentByTag[$_whichOneof(0)]!;
+  @$pb.TagNumber(2)
+  @$pb.TagNumber(7)
+  @$pb.TagNumber(12)
+  @$pb.TagNumber(13)
+  @$pb.TagNumber(14)
+  @$pb.TagNumber(15)
+  @$pb.TagNumber(16)
+  @$pb.TagNumber(18)
+  void clearIntent() => $_clearField($_whichOneof(0));
+
+  @$pb.TagNumber(1)
+  WorkspaceTarget get target => $_getN(0);
+  @$pb.TagNumber(1)
+  set target(WorkspaceTarget value) => $_setField(1, value);
+  @$pb.TagNumber(1)
+  $core.bool hasTarget() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearTarget() => $_clearField(1);
+  @$pb.TagNumber(1)
+  WorkspaceTarget ensureTarget() => $_ensure(0);
+
+  @$pb.TagNumber(2)
+  DirectiveCall get call => $_getN(1);
+  @$pb.TagNumber(2)
+  set call(DirectiveCall value) => $_setField(2, value);
+  @$pb.TagNumber(2)
+  $core.bool hasCall() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearCall() => $_clearField(2);
+  @$pb.TagNumber(2)
+  DirectiveCall ensureCall() => $_ensure(1);
+
+  @$pb.TagNumber(3)
+  AuthoringOptions get authoring => $_getN(2);
+  @$pb.TagNumber(3)
+  set authoring(AuthoringOptions value) => $_setField(3, value);
+  @$pb.TagNumber(3)
+  $core.bool hasAuthoring() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearAuthoring() => $_clearField(3);
+  @$pb.TagNumber(3)
+  AuthoringOptions ensureAuthoring() => $_ensure(2);
+
+  /// Opaque compiler output. The kernel validates and composes it as USDZ/USDA; Protobuf never
+  /// becomes the law identity and the host never receives a flattened law model.
+  @$pb.TagNumber(4)
+  $core.List<$core.int> get lawUsdz => $_getN(3);
+  @$pb.TagNumber(4)
+  set lawUsdz($core.List<$core.int> value) => $_setBytes(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasLawUsdz() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearLawUsdz() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $pb.PbList<AttestedRead> get attestations => $_getList(4);
+
+  @$pb.TagNumber(6)
+  $pb.PbList<ConflictSnapshot> get conflictSnapshots => $_getList(5);
+
+  /// Canonical change.usda bytes for replay/sync/admission. This is not JSON and does not grant
+  /// authority: the kernel decodes it and sends it through the same admission gate as local authoring.
+  @$pb.TagNumber(7)
+  $core.List<$core.int> get sealedChangeUsda => $_getN(6);
+  @$pb.TagNumber(7)
+  set sealedChangeUsda($core.List<$core.int> value) => $_setBytes(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasSealedChangeUsda() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearSealedChangeUsda() => $_clearField(7);
+
+  /// Stage-zero execution law is a typed USDA closure too. It is kept distinct from the law being
+  /// installed so a host cannot substitute one identity for the other.
+  @$pb.TagNumber(8)
+  $core.List<$core.int> get executionLawUsdz => $_getN(7);
+  @$pb.TagNumber(8)
+  set executionLawUsdz($core.List<$core.int> value) => $_setBytes(7, value);
+  @$pb.TagNumber(8)
+  $core.bool hasExecutionLawUsdz() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearExecutionLawUsdz() => $_clearField(8);
+
+  @$pb.TagNumber(9)
+  $core.String get controllerLawHash => $_getSZ(8);
+  @$pb.TagNumber(9)
+  set controllerLawHash($core.String value) => $_setString(8, value);
+  @$pb.TagNumber(9)
+  $core.bool hasControllerLawHash() => $_has(8);
+  @$pb.TagNumber(9)
+  void clearControllerLawHash() => $_clearField(9);
+
+  @$pb.TagNumber(10)
+  $core.String get candidateCommit => $_getSZ(9);
+  @$pb.TagNumber(10)
+  set candidateCommit($core.String value) => $_setString(9, value);
+  @$pb.TagNumber(10)
+  $core.bool hasCandidateCommit() => $_has(9);
+  @$pb.TagNumber(10)
+  void clearCandidateCommit() => $_clearField(10);
+
+  /// A client-signed certificate the kernel may attach only to the single birth recipe produced by
+  /// this offer. It is independently verified at author, receive, replay and child materialisation.
+  @$pb.TagNumber(11)
+  BirthCertificate get birthCertificate => $_getN(10);
+  @$pb.TagNumber(11)
+  set birthCertificate(BirthCertificate value) => $_setField(11, value);
+  @$pb.TagNumber(11)
+  $core.bool hasBirthCertificate() => $_has(10);
+  @$pb.TagNumber(11)
+  void clearBirthCertificate() => $_clearField(11);
+  @$pb.TagNumber(11)
+  BirthCertificate ensureBirthCertificate() => $_ensure(10);
+
+  /// Kernel-owned lifecycle command. It lowers into canonical USDA using the CURRENT installed
+  /// controller, then passes through the ordinary identity, device and relation gates.
+  @$pb.TagNumber(12)
+  ModelLifecycleIntent get modelLifecycle => $_getN(11);
+  @$pb.TagNumber(12)
+  set modelLifecycle(ModelLifecycleIntent value) => $_setField(12, value);
+  @$pb.TagNumber(12)
+  $core.bool hasModelLifecycle() => $_has(11);
+  @$pb.TagNumber(12)
+  void clearModelLifecycle() => $_clearField(12);
+  @$pb.TagNumber(12)
+  ModelLifecycleIntent ensureModelLifecycle() => $_ensure(11);
+
+  @$pb.TagNumber(13)
+  IdentityProviderWitnessAdoption get identityProviderWitnessAdoption =>
+      $_getN(12);
+  @$pb.TagNumber(13)
+  set identityProviderWitnessAdoption(IdentityProviderWitnessAdoption value) =>
+      $_setField(13, value);
+  @$pb.TagNumber(13)
+  $core.bool hasIdentityProviderWitnessAdoption() => $_has(12);
+  @$pb.TagNumber(13)
+  void clearIdentityProviderWitnessAdoption() => $_clearField(13);
+  @$pb.TagNumber(13)
+  IdentityProviderWitnessAdoption ensureIdentityProviderWitnessAdoption() =>
+      $_ensure(12);
+
+  @$pb.TagNumber(14)
+  GenesisOffer get genesis => $_getN(13);
+  @$pb.TagNumber(14)
+  set genesis(GenesisOffer value) => $_setField(14, value);
+  @$pb.TagNumber(14)
+  $core.bool hasGenesis() => $_has(13);
+  @$pb.TagNumber(14)
+  void clearGenesis() => $_clearField(14);
+  @$pb.TagNumber(14)
+  GenesisOffer ensureGenesis() => $_ensure(13);
+
+  @$pb.TagNumber(15)
+  CarriedWorkspaceOffer get carriedWorkspaceOffer => $_getN(14);
+  @$pb.TagNumber(15)
+  set carriedWorkspaceOffer(CarriedWorkspaceOffer value) =>
+      $_setField(15, value);
+  @$pb.TagNumber(15)
+  $core.bool hasCarriedWorkspaceOffer() => $_has(14);
+  @$pb.TagNumber(15)
+  void clearCarriedWorkspaceOffer() => $_clearField(15);
+  @$pb.TagNumber(15)
+  CarriedWorkspaceOffer ensureCarriedWorkspaceOffer() => $_ensure(14);
+
+  @$pb.TagNumber(16)
+  PlacementOffer get placement => $_getN(15);
+  @$pb.TagNumber(16)
+  set placement(PlacementOffer value) => $_setField(16, value);
+  @$pb.TagNumber(16)
+  $core.bool hasPlacement() => $_has(15);
+  @$pb.TagNumber(16)
+  void clearPlacement() => $_clearField(16);
+  @$pb.TagNumber(16)
+  PlacementOffer ensurePlacement() => $_ensure(15);
+
+  /// D21d unit lane: law installed as per-domain units instead of one `law_usdz` package. Valid on a
+  /// genesis or install/stage lifecycle intent, never together with `law_usdz`. The kernel admits
+  /// each unit from its content (the hash is re-derived, never trusted), places the units against
+  /// the currently selected law (a unit replaces the installed unit with the same key; a set that
+  /// carries `framework` and `composition` stands alone), composes the result and refuses the
+  /// offer if composition fails.
+  @$pb.TagNumber(17)
+  $pb.PbList<LawUnit> get lawUnits => $_getList(16);
+
+  @$pb.TagNumber(18)
+  DetachedSignedChange get detachedSignedChange => $_getN(17);
+  @$pb.TagNumber(18)
+  set detachedSignedChange(DetachedSignedChange value) => $_setField(18, value);
+  @$pb.TagNumber(18)
+  $core.bool hasDetachedSignedChange() => $_has(17);
+  @$pb.TagNumber(18)
+  void clearDetachedSignedChange() => $_clearField(18);
+  @$pb.TagNumber(18)
+  DetachedSignedChange ensureDetachedSignedChange() => $_ensure(17);
+}
+
+/// One law unit exactly as the compiler emits it under `build/<pkg>.units/<key>-<hash>/`: every
+/// file at its logical path, `unit.usda` among them. Typed entries rather than an archive: the
+/// kernel already treats a unit as a git tree of (path, blob) entries, so each entry maps to one
+/// tree entry with no archive parser, member-name normalisation or second transport format
+/// (architecture/law_units_format.md, "Why there is no .tar.gz per unit").
+class LawUnit extends $pb.GeneratedMessage {
+  factory LawUnit({
+    $core.Iterable<LawUnitFile>? files,
+  }) {
+    final result = create();
+    if (files != null) result.files.addAll(files);
+    return result;
+  }
+
+  LawUnit._();
+
+  factory LawUnit.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory LawUnit.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'LawUnit',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..pPM<LawUnitFile>(1, _omitFieldNames ? '' : 'files',
+        subBuilder: LawUnitFile.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  LawUnit clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  LawUnit copyWith(void Function(LawUnit) updates) =>
+      super.copyWith((message) => updates(message as LawUnit)) as LawUnit;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static LawUnit create() => LawUnit._();
+  @$core.override
+  LawUnit createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static LawUnit getDefault() =>
+      _defaultInstance ??= $pb.GeneratedMessage.$_defaultFor<LawUnit>(create);
+  static LawUnit? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $pb.PbList<LawUnitFile> get files => $_getList(0);
+}
+
+class LawUnitFile extends $pb.GeneratedMessage {
+  factory LawUnitFile({
+    $core.String? path,
+    $core.List<$core.int>? content,
+  }) {
+    final result = create();
+    if (path != null) result.path = path;
+    if (content != null) result.content = content;
+    return result;
+  }
+
+  LawUnitFile._();
+
+  factory LawUnitFile.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory LawUnitFile.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'LawUnitFile',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'path')
+    ..a<$core.List<$core.int>>(
+        2, _omitFieldNames ? '' : 'content', $pb.PbFieldType.OY)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  LawUnitFile clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  LawUnitFile copyWith(void Function(LawUnitFile) updates) =>
+      super.copyWith((message) => updates(message as LawUnitFile))
+          as LawUnitFile;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static LawUnitFile create() => LawUnitFile._();
+  @$core.override
+  LawUnitFile createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static LawUnitFile getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<LawUnitFile>(create);
+  static LawUnitFile? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get path => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set path($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasPath() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearPath() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.List<$core.int> get content => $_getN(1);
+  @$pb.TagNumber(2)
+  set content($core.List<$core.int> value) => $_setBytes(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasContent() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearContent() => $_clearField(2);
+}
+
+class AttestedRead extends $pb.GeneratedMessage {
+  factory AttestedRead({
+    $core.String? queryId,
+    NomosStruct? arguments,
+    NomosValue? result,
+    ReadAttestation? evidence,
+  }) {
+    final result$ = create();
+    if (queryId != null) result$.queryId = queryId;
+    if (arguments != null) result$.arguments = arguments;
+    if (result != null) result$.result = result;
+    if (evidence != null) result$.evidence = evidence;
+    return result$;
+  }
+
+  AttestedRead._();
+
+  factory AttestedRead.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory AttestedRead.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'AttestedRead',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'queryId')
+    ..aOM<NomosStruct>(2, _omitFieldNames ? '' : 'arguments',
+        subBuilder: NomosStruct.create)
+    ..aOM<NomosValue>(3, _omitFieldNames ? '' : 'result',
+        subBuilder: NomosValue.create)
+    ..aOM<ReadAttestation>(5, _omitFieldNames ? '' : 'evidence',
+        subBuilder: ReadAttestation.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  AttestedRead clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  AttestedRead copyWith(void Function(AttestedRead) updates) =>
+      super.copyWith((message) => updates(message as AttestedRead))
+          as AttestedRead;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static AttestedRead create() => AttestedRead._();
+  @$core.override
+  AttestedRead createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static AttestedRead getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<AttestedRead>(create);
+  static AttestedRead? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get queryId => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set queryId($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasQueryId() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearQueryId() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  NomosStruct get arguments => $_getN(1);
+  @$pb.TagNumber(2)
+  set arguments(NomosStruct value) => $_setField(2, value);
+  @$pb.TagNumber(2)
+  $core.bool hasArguments() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearArguments() => $_clearField(2);
+  @$pb.TagNumber(2)
+  NomosStruct ensureArguments() => $_ensure(1);
+
+  @$pb.TagNumber(3)
+  NomosValue get result => $_getN(2);
+  @$pb.TagNumber(3)
+  set result(NomosValue value) => $_setField(3, value);
+  @$pb.TagNumber(3)
+  $core.bool hasResult() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearResult() => $_clearField(3);
+  @$pb.TagNumber(3)
+  NomosValue ensureResult() => $_ensure(2);
+
+  @$pb.TagNumber(5)
+  ReadAttestation get evidence => $_getN(3);
+  @$pb.TagNumber(5)
+  set evidence(ReadAttestation value) => $_setField(5, value);
+  @$pb.TagNumber(5)
+  $core.bool hasEvidence() => $_has(3);
+  @$pb.TagNumber(5)
+  void clearEvidence() => $_clearField(5);
+  @$pb.TagNumber(5)
+  ReadAttestation ensureEvidence() => $_ensure(3);
+}
+
+/// The closed Protobuf projection of the canonical USDA read-attestation
+/// evidence. It is carried on an OfferRequest and has no mutation semantics of
+/// its own. The kernel verifies it before a plan may consume the read.
+class ReadAttestation extends $pb.GeneratedMessage {
+  factory ReadAttestation({
+    $fixnum.Int64? version,
+    $core.String? sourceWorkspace,
+    $core.String? sourceGenesis,
+    $core.String? sourceHead,
+    $core.String? foldRoot,
+    $fixnum.Int64? sourceEpoch,
+    $fixnum.Int64? attestedAtMillis,
+    $core.List<$core.int>? publicKey,
+    $core.List<$core.int>? signature,
+  }) {
+    final result = create();
+    if (version != null) result.version = version;
+    if (sourceWorkspace != null) result.sourceWorkspace = sourceWorkspace;
+    if (sourceGenesis != null) result.sourceGenesis = sourceGenesis;
+    if (sourceHead != null) result.sourceHead = sourceHead;
+    if (foldRoot != null) result.foldRoot = foldRoot;
+    if (sourceEpoch != null) result.sourceEpoch = sourceEpoch;
+    if (attestedAtMillis != null) result.attestedAtMillis = attestedAtMillis;
+    if (publicKey != null) result.publicKey = publicKey;
+    if (signature != null) result.signature = signature;
+    return result;
+  }
+
+  ReadAttestation._();
+
+  factory ReadAttestation.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ReadAttestation.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ReadAttestation',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aInt64(1, _omitFieldNames ? '' : 'version')
+    ..aOS(2, _omitFieldNames ? '' : 'sourceWorkspace')
+    ..aOS(3, _omitFieldNames ? '' : 'sourceGenesis')
+    ..aOS(4, _omitFieldNames ? '' : 'sourceHead')
+    ..aOS(5, _omitFieldNames ? '' : 'foldRoot')
+    ..aInt64(6, _omitFieldNames ? '' : 'sourceEpoch')
+    ..aInt64(7, _omitFieldNames ? '' : 'attestedAtMillis')
+    ..a<$core.List<$core.int>>(
+        8, _omitFieldNames ? '' : 'publicKey', $pb.PbFieldType.OY)
+    ..a<$core.List<$core.int>>(
+        9, _omitFieldNames ? '' : 'signature', $pb.PbFieldType.OY)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReadAttestation clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ReadAttestation copyWith(void Function(ReadAttestation) updates) =>
+      super.copyWith((message) => updates(message as ReadAttestation))
+          as ReadAttestation;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ReadAttestation create() => ReadAttestation._();
+  @$core.override
+  ReadAttestation createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ReadAttestation getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ReadAttestation>(create);
+  static ReadAttestation? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $fixnum.Int64 get version => $_getI64(0);
+  @$pb.TagNumber(1)
+  set version($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasVersion() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearVersion() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get sourceWorkspace => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set sourceWorkspace($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasSourceWorkspace() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearSourceWorkspace() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get sourceGenesis => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set sourceGenesis($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasSourceGenesis() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearSourceGenesis() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $core.String get sourceHead => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set sourceHead($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasSourceHead() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearSourceHead() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $core.String get foldRoot => $_getSZ(4);
+  @$pb.TagNumber(5)
+  set foldRoot($core.String value) => $_setString(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasFoldRoot() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearFoldRoot() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $fixnum.Int64 get sourceEpoch => $_getI64(5);
+  @$pb.TagNumber(6)
+  set sourceEpoch($fixnum.Int64 value) => $_setInt64(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasSourceEpoch() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearSourceEpoch() => $_clearField(6);
+
+  @$pb.TagNumber(7)
+  $fixnum.Int64 get attestedAtMillis => $_getI64(6);
+  @$pb.TagNumber(7)
+  set attestedAtMillis($fixnum.Int64 value) => $_setInt64(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasAttestedAtMillis() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearAttestedAtMillis() => $_clearField(7);
+
+  @$pb.TagNumber(8)
+  $core.List<$core.int> get publicKey => $_getN(7);
+  @$pb.TagNumber(8)
+  set publicKey($core.List<$core.int> value) => $_setBytes(7, value);
+  @$pb.TagNumber(8)
+  $core.bool hasPublicKey() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearPublicKey() => $_clearField(8);
+
+  @$pb.TagNumber(9)
+  $core.List<$core.int> get signature => $_getN(8);
+  @$pb.TagNumber(9)
+  set signature($core.List<$core.int> value) => $_setBytes(8, value);
+  @$pb.TagNumber(9)
+  $core.bool hasSignature() => $_has(8);
+  @$pb.TagNumber(9)
+  void clearSignature() => $_clearField(9);
+}
+
+class ConflictSnapshot extends $pb.GeneratedMessage {
+  factory ConflictSnapshot({
+    $core.String? aggregateType,
+    $core.String? aggregateId,
+    $core.String? field_3,
+    $core.String? targetSchema,
+    $core.String? token,
+  }) {
+    final result = create();
+    if (aggregateType != null) result.aggregateType = aggregateType;
+    if (aggregateId != null) result.aggregateId = aggregateId;
+    if (field_3 != null) result.field_3 = field_3;
+    if (targetSchema != null) result.targetSchema = targetSchema;
+    if (token != null) result.token = token;
+    return result;
+  }
+
+  ConflictSnapshot._();
+
+  factory ConflictSnapshot.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory ConflictSnapshot.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'ConflictSnapshot',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'aggregateType')
+    ..aOS(2, _omitFieldNames ? '' : 'aggregateId')
+    ..aOS(3, _omitFieldNames ? '' : 'field')
+    ..aOS(4, _omitFieldNames ? '' : 'targetSchema')
+    ..aOS(5, _omitFieldNames ? '' : 'token')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ConflictSnapshot clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  ConflictSnapshot copyWith(void Function(ConflictSnapshot) updates) =>
+      super.copyWith((message) => updates(message as ConflictSnapshot))
+          as ConflictSnapshot;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static ConflictSnapshot create() => ConflictSnapshot._();
+  @$core.override
+  ConflictSnapshot createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static ConflictSnapshot getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<ConflictSnapshot>(create);
+  static ConflictSnapshot? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get aggregateType => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set aggregateType($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasAggregateType() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearAggregateType() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get aggregateId => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set aggregateId($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasAggregateId() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearAggregateId() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get field_3 => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set field_3($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasField_3() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearField_3() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $core.String get targetSchema => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set targetSchema($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasTargetSchema() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearTargetSchema() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $core.String get token => $_getSZ(4);
+  @$pb.TagNumber(5)
+  set token($core.String value) => $_setString(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasToken() => $_has(4);
   @$pb.TagNumber(5)
   void clearToken() => $_clearField(5);
 }
@@ -12339,6 +13254,7 @@ enum QueryRequest_Query {
   fullHistoryAudit,
   workspaceEffectReceipt,
   installedLawDeclarations,
+  resolveDomainPlan,
   notSet
 }
 
@@ -12375,6 +13291,7 @@ class QueryRequest extends $pb.GeneratedMessage {
     FullHistoryAuditQuery? fullHistoryAudit,
     WorkspaceEffectReceiptQuery? workspaceEffectReceipt,
     InstalledLawDeclarationsQuery? installedLawDeclarations,
+    ResolveDomainPlanRequest? resolveDomainPlan,
   }) {
     final result = create();
     if (target != null) result.target = target;
@@ -12421,6 +13338,7 @@ class QueryRequest extends $pb.GeneratedMessage {
       result.workspaceEffectReceipt = workspaceEffectReceipt;
     if (installedLawDeclarations != null)
       result.installedLawDeclarations = installedLawDeclarations;
+    if (resolveDomainPlan != null) result.resolveDomainPlan = resolveDomainPlan;
     return result;
   }
 
@@ -12461,6 +13379,7 @@ class QueryRequest extends $pb.GeneratedMessage {
     33: QueryRequest_Query.fullHistoryAudit,
     34: QueryRequest_Query.workspaceEffectReceipt,
     35: QueryRequest_Query.installedLawDeclarations,
+    36: QueryRequest_Query.resolveDomainPlan,
     0: QueryRequest_Query.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -12494,7 +13413,8 @@ class QueryRequest extends $pb.GeneratedMessage {
       32,
       33,
       34,
-      35
+      35,
+      36
     ])
     ..aOM<WorkspaceTarget>(1, _omitFieldNames ? '' : 'target',
         subBuilder: WorkspaceTarget.create)
@@ -12570,6 +13490,9 @@ class QueryRequest extends $pb.GeneratedMessage {
     ..aOM<InstalledLawDeclarationsQuery>(
         35, _omitFieldNames ? '' : 'installedLawDeclarations',
         subBuilder: InstalledLawDeclarationsQuery.create)
+    ..aOM<ResolveDomainPlanRequest>(
+        36, _omitFieldNames ? '' : 'resolveDomainPlan',
+        subBuilder: ResolveDomainPlanRequest.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -12617,6 +13540,7 @@ class QueryRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(33)
   @$pb.TagNumber(34)
   @$pb.TagNumber(35)
+  @$pb.TagNumber(36)
   QueryRequest_Query whichQuery() => _QueryRequest_QueryByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
   @$pb.TagNumber(11)
@@ -12644,6 +13568,7 @@ class QueryRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(33)
   @$pb.TagNumber(34)
   @$pb.TagNumber(35)
+  @$pb.TagNumber(36)
   void clearQuery() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(1)
@@ -13001,6 +13926,18 @@ class QueryRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(35)
   InstalledLawDeclarationsQuery ensureInstalledLawDeclarations() =>
       $_ensure(30);
+
+  @$pb.TagNumber(36)
+  ResolveDomainPlanRequest get resolveDomainPlan => $_getN(31);
+  @$pb.TagNumber(36)
+  set resolveDomainPlan(ResolveDomainPlanRequest value) =>
+      $_setField(36, value);
+  @$pb.TagNumber(36)
+  $core.bool hasResolveDomainPlan() => $_has(31);
+  @$pb.TagNumber(36)
+  void clearResolveDomainPlan() => $_clearField(36);
+  @$pb.TagNumber(36)
+  ResolveDomainPlanRequest ensureResolveDomainPlan() => $_ensure(31);
 }
 
 /// Completion is a kernel observation of the target's admitted main history. An
@@ -18825,6 +19762,8 @@ enum CustodyRequest_Operation {
   auditCustody,
   exportLawProducts,
   importLawProducts,
+  prepareLawProducts,
+  recoverDetachedReceipt,
   notSet
 }
 
@@ -18862,6 +19801,8 @@ class CustodyRequest extends $pb.GeneratedMessage {
     AuditCustodyRequest? auditCustody,
     ExportLawProductsRequest? exportLawProducts,
     ImportLawProductsRequest? importLawProducts,
+    PrepareLawProductsRequest? prepareLawProducts,
+    RecoverDetachedReceiptRequest? recoverDetachedReceipt,
   }) {
     final result = create();
     if (packDelta != null) result.packDelta = packDelta;
@@ -18905,6 +19846,10 @@ class CustodyRequest extends $pb.GeneratedMessage {
     if (auditCustody != null) result.auditCustody = auditCustody;
     if (exportLawProducts != null) result.exportLawProducts = exportLawProducts;
     if (importLawProducts != null) result.importLawProducts = importLawProducts;
+    if (prepareLawProducts != null)
+      result.prepareLawProducts = prepareLawProducts;
+    if (recoverDetachedReceipt != null)
+      result.recoverDetachedReceipt = recoverDetachedReceipt;
     return result;
   }
 
@@ -18951,6 +19896,8 @@ class CustodyRequest extends $pb.GeneratedMessage {
     40: CustodyRequest_Operation.auditCustody,
     41: CustodyRequest_Operation.exportLawProducts,
     42: CustodyRequest_Operation.importLawProducts,
+    43: CustodyRequest_Operation.prepareLawProducts,
+    44: CustodyRequest_Operation.recoverDetachedReceipt,
     0: CustodyRequest_Operation.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -18990,7 +19937,9 @@ class CustodyRequest extends $pb.GeneratedMessage {
       39,
       40,
       41,
-      42
+      42,
+      43,
+      44
     ])
     ..aOM<PackDeltaRequest>(10, _omitFieldNames ? '' : 'packDelta',
         subBuilder: PackDeltaRequest.create)
@@ -19070,6 +20019,12 @@ class CustodyRequest extends $pb.GeneratedMessage {
     ..aOM<ImportLawProductsRequest>(
         42, _omitFieldNames ? '' : 'importLawProducts',
         subBuilder: ImportLawProductsRequest.create)
+    ..aOM<PrepareLawProductsRequest>(
+        43, _omitFieldNames ? '' : 'prepareLawProducts',
+        subBuilder: PrepareLawProductsRequest.create)
+    ..aOM<RecoverDetachedReceiptRequest>(
+        44, _omitFieldNames ? '' : 'recoverDetachedReceipt',
+        subBuilder: RecoverDetachedReceiptRequest.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -19123,6 +20078,8 @@ class CustodyRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(40)
   @$pb.TagNumber(41)
   @$pb.TagNumber(42)
+  @$pb.TagNumber(43)
+  @$pb.TagNumber(44)
   CustodyRequest_Operation whichOperation() =>
       _CustodyRequest_OperationByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -19157,6 +20114,8 @@ class CustodyRequest extends $pb.GeneratedMessage {
   @$pb.TagNumber(40)
   @$pb.TagNumber(41)
   @$pb.TagNumber(42)
+  @$pb.TagNumber(43)
+  @$pb.TagNumber(44)
   void clearOperation() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(10)
@@ -19541,6 +20500,31 @@ class CustodyRequest extends $pb.GeneratedMessage {
   void clearImportLawProducts() => $_clearField(42);
   @$pb.TagNumber(42)
   ImportLawProductsRequest ensureImportLawProducts() => $_ensure(31);
+
+  @$pb.TagNumber(43)
+  PrepareLawProductsRequest get prepareLawProducts => $_getN(32);
+  @$pb.TagNumber(43)
+  set prepareLawProducts(PrepareLawProductsRequest value) =>
+      $_setField(43, value);
+  @$pb.TagNumber(43)
+  $core.bool hasPrepareLawProducts() => $_has(32);
+  @$pb.TagNumber(43)
+  void clearPrepareLawProducts() => $_clearField(43);
+  @$pb.TagNumber(43)
+  PrepareLawProductsRequest ensurePrepareLawProducts() => $_ensure(32);
+
+  /// Read only: recover an exact signed admission, never admit an unheld intent.
+  @$pb.TagNumber(44)
+  RecoverDetachedReceiptRequest get recoverDetachedReceipt => $_getN(33);
+  @$pb.TagNumber(44)
+  set recoverDetachedReceipt(RecoverDetachedReceiptRequest value) =>
+      $_setField(44, value);
+  @$pb.TagNumber(44)
+  $core.bool hasRecoverDetachedReceipt() => $_has(33);
+  @$pb.TagNumber(44)
+  void clearRecoverDetachedReceipt() => $_clearField(44);
+  @$pb.TagNumber(44)
+  RecoverDetachedReceiptRequest ensureRecoverDetachedReceipt() => $_ensure(33);
 }
 
 /// OPERATOR TELEMETRY, never law. How much state a workspace holds, and of what.
@@ -25160,6 +26144,8 @@ enum CustodyResponse_Operation {
   auditCustody,
   exportLawProducts,
   importLawProducts,
+  prepareLawProducts,
+  recoverDetachedReceipt,
   notSet
 }
 
@@ -25197,6 +26183,8 @@ class CustodyResponse extends $pb.GeneratedMessage {
     AuditCustodyResponse? auditCustody,
     ExportLawProductsResponse? exportLawProducts,
     ImportLawProductsResponse? importLawProducts,
+    PrepareLawProductsResponse? prepareLawProducts,
+    OfferResponse? recoverDetachedReceipt,
   }) {
     final result = create();
     if (packDelta != null) result.packDelta = packDelta;
@@ -25240,6 +26228,10 @@ class CustodyResponse extends $pb.GeneratedMessage {
     if (auditCustody != null) result.auditCustody = auditCustody;
     if (exportLawProducts != null) result.exportLawProducts = exportLawProducts;
     if (importLawProducts != null) result.importLawProducts = importLawProducts;
+    if (prepareLawProducts != null)
+      result.prepareLawProducts = prepareLawProducts;
+    if (recoverDetachedReceipt != null)
+      result.recoverDetachedReceipt = recoverDetachedReceipt;
     return result;
   }
 
@@ -25286,6 +26278,8 @@ class CustodyResponse extends $pb.GeneratedMessage {
     40: CustodyResponse_Operation.auditCustody,
     41: CustodyResponse_Operation.exportLawProducts,
     42: CustodyResponse_Operation.importLawProducts,
+    43: CustodyResponse_Operation.prepareLawProducts,
+    44: CustodyResponse_Operation.recoverDetachedReceipt,
     0: CustodyResponse_Operation.notSet
   };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
@@ -25325,7 +26319,9 @@ class CustodyResponse extends $pb.GeneratedMessage {
       39,
       40,
       41,
-      42
+      42,
+      43,
+      44
     ])
     ..aOM<PackDeltaResponse>(10, _omitFieldNames ? '' : 'packDelta',
         subBuilder: PackDeltaResponse.create)
@@ -25405,6 +26401,11 @@ class CustodyResponse extends $pb.GeneratedMessage {
     ..aOM<ImportLawProductsResponse>(
         42, _omitFieldNames ? '' : 'importLawProducts',
         subBuilder: ImportLawProductsResponse.create)
+    ..aOM<PrepareLawProductsResponse>(
+        43, _omitFieldNames ? '' : 'prepareLawProducts',
+        subBuilder: PrepareLawProductsResponse.create)
+    ..aOM<OfferResponse>(44, _omitFieldNames ? '' : 'recoverDetachedReceipt',
+        subBuilder: OfferResponse.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -25458,6 +26459,8 @@ class CustodyResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(40)
   @$pb.TagNumber(41)
   @$pb.TagNumber(42)
+  @$pb.TagNumber(43)
+  @$pb.TagNumber(44)
   CustodyResponse_Operation whichOperation() =>
       _CustodyResponse_OperationByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(10)
@@ -25492,6 +26495,8 @@ class CustodyResponse extends $pb.GeneratedMessage {
   @$pb.TagNumber(40)
   @$pb.TagNumber(41)
   @$pb.TagNumber(42)
+  @$pb.TagNumber(43)
+  @$pb.TagNumber(44)
   void clearOperation() => $_clearField($_whichOneof(0));
 
   @$pb.TagNumber(10)
@@ -25861,6 +26866,29 @@ class CustodyResponse extends $pb.GeneratedMessage {
   void clearImportLawProducts() => $_clearField(42);
   @$pb.TagNumber(42)
   ImportLawProductsResponse ensureImportLawProducts() => $_ensure(31);
+
+  @$pb.TagNumber(43)
+  PrepareLawProductsResponse get prepareLawProducts => $_getN(32);
+  @$pb.TagNumber(43)
+  set prepareLawProducts(PrepareLawProductsResponse value) =>
+      $_setField(43, value);
+  @$pb.TagNumber(43)
+  $core.bool hasPrepareLawProducts() => $_has(32);
+  @$pb.TagNumber(43)
+  void clearPrepareLawProducts() => $_clearField(43);
+  @$pb.TagNumber(43)
+  PrepareLawProductsResponse ensurePrepareLawProducts() => $_ensure(32);
+
+  @$pb.TagNumber(44)
+  OfferResponse get recoverDetachedReceipt => $_getN(33);
+  @$pb.TagNumber(44)
+  set recoverDetachedReceipt(OfferResponse value) => $_setField(44, value);
+  @$pb.TagNumber(44)
+  $core.bool hasRecoverDetachedReceipt() => $_has(33);
+  @$pb.TagNumber(44)
+  void clearRecoverDetachedReceipt() => $_clearField(44);
+  @$pb.TagNumber(44)
+  OfferResponse ensureRecoverDetachedReceipt() => $_ensure(33);
 }
 
 class PackDeltaResponse extends $pb.GeneratedMessage {
@@ -28589,942 +29617,1393 @@ class PlacementAdopted extends $pb.GeneratedMessage {
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static PlacementAdopted create() => PlacementAdopted._();
+  static PlacementAdopted create() => PlacementAdopted._();
+  @$core.override
+  PlacementAdopted createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static PlacementAdopted getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<PlacementAdopted>(create);
+  static PlacementAdopted? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get frontier => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set frontier($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasFrontier() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearFrontier() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  CustodyPlacementPolicy get policy => $_getN(1);
+  @$pb.TagNumber(2)
+  set policy(CustodyPlacementPolicy value) => $_setField(2, value);
+  @$pb.TagNumber(2)
+  $core.bool hasPolicy() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearPolicy() => $_clearField(2);
+  @$pb.TagNumber(2)
+  CustodyPlacementPolicy ensurePolicy() => $_ensure(1);
+}
+
+class InspectCustodyPlacementResponse extends $pb.GeneratedMessage {
+  factory InspectCustodyPlacementResponse({
+    CustodyPlacementPolicy? policy,
+  }) {
+    final result = create();
+    if (policy != null) result.policy = policy;
+    return result;
+  }
+
+  InspectCustodyPlacementResponse._();
+
+  factory InspectCustodyPlacementResponse.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory InspectCustodyPlacementResponse.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'InspectCustodyPlacementResponse',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..aOM<CustodyPlacementPolicy>(1, _omitFieldNames ? '' : 'policy',
+        subBuilder: CustodyPlacementPolicy.create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  InspectCustodyPlacementResponse clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  InspectCustodyPlacementResponse copyWith(
+          void Function(InspectCustodyPlacementResponse) updates) =>
+      super.copyWith(
+              (message) => updates(message as InspectCustodyPlacementResponse))
+          as InspectCustodyPlacementResponse;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static InspectCustodyPlacementResponse create() =>
+      InspectCustodyPlacementResponse._();
+  @$core.override
+  InspectCustodyPlacementResponse createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static InspectCustodyPlacementResponse getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<InspectCustodyPlacementResponse>(
+          create);
+  static InspectCustodyPlacementResponse? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  CustodyPlacementPolicy get policy => $_getN(0);
+  @$pb.TagNumber(1)
+  set policy(CustodyPlacementPolicy value) => $_setField(1, value);
+  @$pb.TagNumber(1)
+  $core.bool hasPolicy() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearPolicy() => $_clearField(1);
+  @$pb.TagNumber(1)
+  CustodyPlacementPolicy ensurePolicy() => $_ensure(0);
+}
+
+class CapacityReserveResponse extends $pb.GeneratedMessage {
+  factory CapacityReserveResponse({
+    $fixnum.Int64? aggregateCount,
+    $fixnum.Int64? reservedBytes,
+  }) {
+    final result = create();
+    if (aggregateCount != null) result.aggregateCount = aggregateCount;
+    if (reservedBytes != null) result.reservedBytes = reservedBytes;
+    return result;
+  }
+
+  CapacityReserveResponse._();
+
+  factory CapacityReserveResponse.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory CapacityReserveResponse.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'CapacityReserveResponse',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..a<$fixnum.Int64>(
+        1, _omitFieldNames ? '' : 'aggregateCount', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'reservedBytes', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  CapacityReserveResponse clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  CapacityReserveResponse copyWith(
+          void Function(CapacityReserveResponse) updates) =>
+      super.copyWith((message) => updates(message as CapacityReserveResponse))
+          as CapacityReserveResponse;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static CapacityReserveResponse create() => CapacityReserveResponse._();
   @$core.override
-  PlacementAdopted createEmptyInstance() => create();
+  CapacityReserveResponse createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static PlacementAdopted getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<PlacementAdopted>(create);
-  static PlacementAdopted? _defaultInstance;
+  static CapacityReserveResponse getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<CapacityReserveResponse>(create);
+  static CapacityReserveResponse? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $core.String get frontier => $_getSZ(0);
+  $fixnum.Int64 get aggregateCount => $_getI64(0);
   @$pb.TagNumber(1)
-  set frontier($core.String value) => $_setString(0, value);
+  set aggregateCount($fixnum.Int64 value) => $_setInt64(0, value);
   @$pb.TagNumber(1)
-  $core.bool hasFrontier() => $_has(0);
+  $core.bool hasAggregateCount() => $_has(0);
   @$pb.TagNumber(1)
-  void clearFrontier() => $_clearField(1);
+  void clearAggregateCount() => $_clearField(1);
 
   @$pb.TagNumber(2)
-  CustodyPlacementPolicy get policy => $_getN(1);
-  @$pb.TagNumber(2)
-  set policy(CustodyPlacementPolicy value) => $_setField(2, value);
+  $fixnum.Int64 get reservedBytes => $_getI64(1);
   @$pb.TagNumber(2)
-  $core.bool hasPolicy() => $_has(1);
+  set reservedBytes($fixnum.Int64 value) => $_setInt64(1, value);
   @$pb.TagNumber(2)
-  void clearPolicy() => $_clearField(2);
+  $core.bool hasReservedBytes() => $_has(1);
   @$pb.TagNumber(2)
-  CustodyPlacementPolicy ensurePolicy() => $_ensure(1);
+  void clearReservedBytes() => $_clearField(2);
 }
 
-class InspectCustodyPlacementResponse extends $pb.GeneratedMessage {
-  factory InspectCustodyPlacementResponse({
-    CustodyPlacementPolicy? policy,
+/// One typed breakdown of custody admission. Zero means that phase was not needed
+/// (for example, an already-mounted frontier only performs the live-ref lookup).
+class RestoreMainSpans extends $pb.GeneratedMessage {
+  factory RestoreMainSpans({
+    $fixnum.Int64? totalUs,
+    $fixnum.Int64? liveRefLookupUs,
+    $fixnum.Int64? targetDecodeUs,
+    $fixnum.Int64? custodyCompletenessReadUs,
+    $fixnum.Int64? quarantineRefUs,
+    $fixnum.Int64? chainSignatureLawReplayUs,
+    $fixnum.Int64? verdictDecodeUs,
+    $fixnum.Int64? promoteAndCleanupRefsUs,
+    $fixnum.Int64? frontierRebuildUs,
+    $fixnum.Int64? frontierStoreUs,
+    VerifyChainDiagnostics? verification,
   }) {
     final result = create();
-    if (policy != null) result.policy = policy;
+    if (totalUs != null) result.totalUs = totalUs;
+    if (liveRefLookupUs != null) result.liveRefLookupUs = liveRefLookupUs;
+    if (targetDecodeUs != null) result.targetDecodeUs = targetDecodeUs;
+    if (custodyCompletenessReadUs != null)
+      result.custodyCompletenessReadUs = custodyCompletenessReadUs;
+    if (quarantineRefUs != null) result.quarantineRefUs = quarantineRefUs;
+    if (chainSignatureLawReplayUs != null)
+      result.chainSignatureLawReplayUs = chainSignatureLawReplayUs;
+    if (verdictDecodeUs != null) result.verdictDecodeUs = verdictDecodeUs;
+    if (promoteAndCleanupRefsUs != null)
+      result.promoteAndCleanupRefsUs = promoteAndCleanupRefsUs;
+    if (frontierRebuildUs != null) result.frontierRebuildUs = frontierRebuildUs;
+    if (frontierStoreUs != null) result.frontierStoreUs = frontierStoreUs;
+    if (verification != null) result.verification = verification;
     return result;
   }
 
-  InspectCustodyPlacementResponse._();
+  RestoreMainSpans._();
 
-  factory InspectCustodyPlacementResponse.fromBuffer($core.List<$core.int> data,
+  factory RestoreMainSpans.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory InspectCustodyPlacementResponse.fromJson($core.String json,
+  factory RestoreMainSpans.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'InspectCustodyPlacementResponse',
+      _omitMessageNames ? '' : 'RestoreMainSpans',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aOM<CustodyPlacementPolicy>(1, _omitFieldNames ? '' : 'policy',
-        subBuilder: CustodyPlacementPolicy.create)
+    ..a<$fixnum.Int64>(1, _omitFieldNames ? '' : 'totalUs', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        2, _omitFieldNames ? '' : 'liveRefLookupUs', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        3, _omitFieldNames ? '' : 'targetDecodeUs', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(4, _omitFieldNames ? '' : 'custodyCompletenessReadUs',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        5, _omitFieldNames ? '' : 'quarantineRefUs', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(6, _omitFieldNames ? '' : 'chainSignatureLawReplayUs',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        7, _omitFieldNames ? '' : 'verdictDecodeUs', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(8, _omitFieldNames ? '' : 'promoteAndCleanupRefsUs',
+        $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        9, _omitFieldNames ? '' : 'frontierRebuildUs', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        10, _omitFieldNames ? '' : 'frontierStoreUs', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOM<VerifyChainDiagnostics>(11, _omitFieldNames ? '' : 'verification',
+        subBuilder: VerifyChainDiagnostics.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  InspectCustodyPlacementResponse clone() => deepCopy();
+  RestoreMainSpans clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  InspectCustodyPlacementResponse copyWith(
-          void Function(InspectCustodyPlacementResponse) updates) =>
-      super.copyWith(
-              (message) => updates(message as InspectCustodyPlacementResponse))
-          as InspectCustodyPlacementResponse;
+  RestoreMainSpans copyWith(void Function(RestoreMainSpans) updates) =>
+      super.copyWith((message) => updates(message as RestoreMainSpans))
+          as RestoreMainSpans;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static InspectCustodyPlacementResponse create() =>
-      InspectCustodyPlacementResponse._();
+  static RestoreMainSpans create() => RestoreMainSpans._();
   @$core.override
-  InspectCustodyPlacementResponse createEmptyInstance() => create();
+  RestoreMainSpans createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static InspectCustodyPlacementResponse getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<InspectCustodyPlacementResponse>(
-          create);
-  static InspectCustodyPlacementResponse? _defaultInstance;
+  static RestoreMainSpans getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RestoreMainSpans>(create);
+  static RestoreMainSpans? _defaultInstance;
 
   @$pb.TagNumber(1)
-  CustodyPlacementPolicy get policy => $_getN(0);
-  @$pb.TagNumber(1)
-  set policy(CustodyPlacementPolicy value) => $_setField(1, value);
+  $fixnum.Int64 get totalUs => $_getI64(0);
   @$pb.TagNumber(1)
-  $core.bool hasPolicy() => $_has(0);
+  set totalUs($fixnum.Int64 value) => $_setInt64(0, value);
   @$pb.TagNumber(1)
-  void clearPolicy() => $_clearField(1);
+  $core.bool hasTotalUs() => $_has(0);
   @$pb.TagNumber(1)
-  CustodyPlacementPolicy ensurePolicy() => $_ensure(0);
+  void clearTotalUs() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $fixnum.Int64 get liveRefLookupUs => $_getI64(1);
+  @$pb.TagNumber(2)
+  set liveRefLookupUs($fixnum.Int64 value) => $_setInt64(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasLiveRefLookupUs() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearLiveRefLookupUs() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $fixnum.Int64 get targetDecodeUs => $_getI64(2);
+  @$pb.TagNumber(3)
+  set targetDecodeUs($fixnum.Int64 value) => $_setInt64(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasTargetDecodeUs() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearTargetDecodeUs() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $fixnum.Int64 get custodyCompletenessReadUs => $_getI64(3);
+  @$pb.TagNumber(4)
+  set custodyCompletenessReadUs($fixnum.Int64 value) => $_setInt64(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasCustodyCompletenessReadUs() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearCustodyCompletenessReadUs() => $_clearField(4);
+
+  @$pb.TagNumber(5)
+  $fixnum.Int64 get quarantineRefUs => $_getI64(4);
+  @$pb.TagNumber(5)
+  set quarantineRefUs($fixnum.Int64 value) => $_setInt64(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasQuarantineRefUs() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearQuarantineRefUs() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $fixnum.Int64 get chainSignatureLawReplayUs => $_getI64(5);
+  @$pb.TagNumber(6)
+  set chainSignatureLawReplayUs($fixnum.Int64 value) => $_setInt64(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasChainSignatureLawReplayUs() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearChainSignatureLawReplayUs() => $_clearField(6);
+
+  @$pb.TagNumber(7)
+  $fixnum.Int64 get verdictDecodeUs => $_getI64(6);
+  @$pb.TagNumber(7)
+  set verdictDecodeUs($fixnum.Int64 value) => $_setInt64(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasVerdictDecodeUs() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearVerdictDecodeUs() => $_clearField(7);
+
+  @$pb.TagNumber(8)
+  $fixnum.Int64 get promoteAndCleanupRefsUs => $_getI64(7);
+  @$pb.TagNumber(8)
+  set promoteAndCleanupRefsUs($fixnum.Int64 value) => $_setInt64(7, value);
+  @$pb.TagNumber(8)
+  $core.bool hasPromoteAndCleanupRefsUs() => $_has(7);
+  @$pb.TagNumber(8)
+  void clearPromoteAndCleanupRefsUs() => $_clearField(8);
+
+  @$pb.TagNumber(9)
+  $fixnum.Int64 get frontierRebuildUs => $_getI64(8);
+  @$pb.TagNumber(9)
+  set frontierRebuildUs($fixnum.Int64 value) => $_setInt64(8, value);
+  @$pb.TagNumber(9)
+  $core.bool hasFrontierRebuildUs() => $_has(8);
+  @$pb.TagNumber(9)
+  void clearFrontierRebuildUs() => $_clearField(9);
+
+  @$pb.TagNumber(10)
+  $fixnum.Int64 get frontierStoreUs => $_getI64(9);
+  @$pb.TagNumber(10)
+  set frontierStoreUs($fixnum.Int64 value) => $_setInt64(9, value);
+  @$pb.TagNumber(10)
+  $core.bool hasFrontierStoreUs() => $_has(9);
+  @$pb.TagNumber(10)
+  void clearFrontierStoreUs() => $_clearField(10);
+
+  /// The replay phase is itself structured. Keeping that structure nested avoids another
+  /// host-side profiler and makes restore_main attributable down to the historical intent.
+  @$pb.TagNumber(11)
+  VerifyChainDiagnostics get verification => $_getN(10);
+  @$pb.TagNumber(11)
+  set verification(VerifyChainDiagnostics value) => $_setField(11, value);
+  @$pb.TagNumber(11)
+  $core.bool hasVerification() => $_has(10);
+  @$pb.TagNumber(11)
+  void clearVerification() => $_clearField(11);
+  @$pb.TagNumber(11)
+  VerifyChainDiagnostics ensureVerification() => $_ensure(10);
 }
 
-class CapacityReserveResponse extends $pb.GeneratedMessage {
-  factory CapacityReserveResponse({
-    $fixnum.Int64? aggregateCount,
-    $fixnum.Int64? reservedBytes,
+class RestoreMainResponse extends $pb.GeneratedMessage {
+  factory RestoreMainResponse({
+    $core.String? head,
+    $core.bool? verified,
+    $core.String? walk,
+    RestoreMainSpans? spans,
+    NomosStruct? verdict,
+    CheckpointAssurance? assurance,
+    $core.bool? accepted,
   }) {
     final result = create();
-    if (aggregateCount != null) result.aggregateCount = aggregateCount;
-    if (reservedBytes != null) result.reservedBytes = reservedBytes;
+    if (head != null) result.head = head;
+    if (verified != null) result.verified = verified;
+    if (walk != null) result.walk = walk;
+    if (spans != null) result.spans = spans;
+    if (verdict != null) result.verdict = verdict;
+    if (assurance != null) result.assurance = assurance;
+    if (accepted != null) result.accepted = accepted;
     return result;
   }
 
-  CapacityReserveResponse._();
+  RestoreMainResponse._();
 
-  factory CapacityReserveResponse.fromBuffer($core.List<$core.int> data,
+  factory RestoreMainResponse.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory CapacityReserveResponse.fromJson($core.String json,
+  factory RestoreMainResponse.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'CapacityReserveResponse',
+      _omitMessageNames ? '' : 'RestoreMainResponse',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..a<$fixnum.Int64>(
-        1, _omitFieldNames ? '' : 'aggregateCount', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(
-        2, _omitFieldNames ? '' : 'reservedBytes', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..aOS(1, _omitFieldNames ? '' : 'head')
+    ..aOB(2, _omitFieldNames ? '' : 'verified')
+    ..aOS(3, _omitFieldNames ? '' : 'walk')
+    ..aOM<RestoreMainSpans>(4, _omitFieldNames ? '' : 'spans',
+        subBuilder: RestoreMainSpans.create)
+    ..aOM<NomosStruct>(5, _omitFieldNames ? '' : 'verdict',
+        subBuilder: NomosStruct.create)
+    ..aE<CheckpointAssurance>(6, _omitFieldNames ? '' : 'assurance',
+        enumValues: CheckpointAssurance.values)
+    ..aOB(7, _omitFieldNames ? '' : 'accepted')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  CapacityReserveResponse clone() => deepCopy();
+  RestoreMainResponse clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  CapacityReserveResponse copyWith(
-          void Function(CapacityReserveResponse) updates) =>
-      super.copyWith((message) => updates(message as CapacityReserveResponse))
-          as CapacityReserveResponse;
+  RestoreMainResponse copyWith(void Function(RestoreMainResponse) updates) =>
+      super.copyWith((message) => updates(message as RestoreMainResponse))
+          as RestoreMainResponse;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static CapacityReserveResponse create() => CapacityReserveResponse._();
+  static RestoreMainResponse create() => RestoreMainResponse._();
   @$core.override
-  CapacityReserveResponse createEmptyInstance() => create();
+  RestoreMainResponse createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static CapacityReserveResponse getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<CapacityReserveResponse>(create);
-  static CapacityReserveResponse? _defaultInstance;
+  static RestoreMainResponse getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RestoreMainResponse>(create);
+  static RestoreMainResponse? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $fixnum.Int64 get aggregateCount => $_getI64(0);
+  $core.String get head => $_getSZ(0);
   @$pb.TagNumber(1)
-  set aggregateCount($fixnum.Int64 value) => $_setInt64(0, value);
+  set head($core.String value) => $_setString(0, value);
   @$pb.TagNumber(1)
-  $core.bool hasAggregateCount() => $_has(0);
+  $core.bool hasHead() => $_has(0);
   @$pb.TagNumber(1)
-  void clearAggregateCount() => $_clearField(1);
+  void clearHead() => $_clearField(1);
 
   @$pb.TagNumber(2)
-  $fixnum.Int64 get reservedBytes => $_getI64(1);
+  $core.bool get verified => $_getBF(1);
   @$pb.TagNumber(2)
-  set reservedBytes($fixnum.Int64 value) => $_setInt64(1, value);
+  set verified($core.bool value) => $_setBool(1, value);
   @$pb.TagNumber(2)
-  $core.bool hasReservedBytes() => $_has(1);
+  $core.bool hasVerified() => $_has(1);
   @$pb.TagNumber(2)
-  void clearReservedBytes() => $_clearField(2);
+  void clearVerified() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.String get walk => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set walk($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasWalk() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearWalk() => $_clearField(3);
+
+  /// Observability-only kernel timings for the cold custody admission. These never
+  /// participate in the verdict and let every host report the same typed phase data.
+  @$pb.TagNumber(4)
+  RestoreMainSpans get spans => $_getN(3);
+  @$pb.TagNumber(4)
+  set spans(RestoreMainSpans value) => $_setField(4, value);
+  @$pb.TagNumber(4)
+  $core.bool hasSpans() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearSpans() => $_clearField(4);
+  @$pb.TagNumber(4)
+  RestoreMainSpans ensureSpans() => $_ensure(3);
+
+  /// The exact kernel replay verdict which authorized promotion. Hosts relay this; they never
+  /// synthesize a second "valid" decision or replay the same chain merely to recover its shape.
+  @$pb.TagNumber(5)
+  NomosStruct get verdict => $_getN(4);
+  @$pb.TagNumber(5)
+  set verdict(NomosStruct value) => $_setField(5, value);
+  @$pb.TagNumber(5)
+  $core.bool hasVerdict() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearVerdict() => $_clearField(5);
+  @$pb.TagNumber(5)
+  NomosStruct ensureVerdict() => $_ensure(4);
+
+  /// VERIFIED means this kernel recomputed the canonical prefix (or retained its own in-process
+  /// proof). TRUSTED means the caller explicitly accepted a previously verified custody receipt.
+  @$pb.TagNumber(6)
+  CheckpointAssurance get assurance => $_getN(5);
+  @$pb.TagNumber(6)
+  set assurance(CheckpointAssurance value) => $_setField(6, value);
+  @$pb.TagNumber(6)
+  $core.bool hasAssurance() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearAssurance() => $_clearField(6);
+
+  /// True when the custody was lawfully promoted under either explicit assurance policy.
+  @$pb.TagNumber(7)
+  $core.bool get accepted => $_getBF(6);
+  @$pb.TagNumber(7)
+  set accepted($core.bool value) => $_setBool(6, value);
+  @$pb.TagNumber(7)
+  $core.bool hasAccepted() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearAccepted() => $_clearField(7);
 }
 
-/// One typed breakdown of custody admission. Zero means that phase was not needed
-/// (for example, an already-mounted frontier only performs the live-ref lookup).
-class RestoreMainSpans extends $pb.GeneratedMessage {
-  factory RestoreMainSpans({
-    $fixnum.Int64? totalUs,
-    $fixnum.Int64? liveRefLookupUs,
-    $fixnum.Int64? targetDecodeUs,
-    $fixnum.Int64? custodyCompletenessReadUs,
-    $fixnum.Int64? quarantineRefUs,
-    $fixnum.Int64? chainSignatureLawReplayUs,
-    $fixnum.Int64? verdictDecodeUs,
-    $fixnum.Int64? promoteAndCleanupRefsUs,
-    $fixnum.Int64? frontierRebuildUs,
-    $fixnum.Int64? frontierStoreUs,
-    VerifyChainDiagnostics? verification,
+enum NomosValue_Kind {
+  null_1,
+  boolean,
+  signedInteger,
+  unsignedInteger,
+  floatingPoint,
+  text,
+  bytes,
+  list,
+  object,
+  notSet
+}
+
+/// Nomos' dynamic tenant value is deliberately not google.protobuf.Value: that standard helper
+/// stores every number as double and cannot represent the exact i64/u64 values used by HLCs,
+/// replica ids, counters and custody metadata.
+class NomosValue extends $pb.GeneratedMessage {
+  factory NomosValue({
+    Null? null_1,
+    $core.bool? boolean,
+    $fixnum.Int64? signedInteger,
+    $fixnum.Int64? unsignedInteger,
+    $core.double? floatingPoint,
+    $core.String? text,
+    $core.List<$core.int>? bytes,
+    NomosList? list,
+    NomosStruct? object,
   }) {
     final result = create();
-    if (totalUs != null) result.totalUs = totalUs;
-    if (liveRefLookupUs != null) result.liveRefLookupUs = liveRefLookupUs;
-    if (targetDecodeUs != null) result.targetDecodeUs = targetDecodeUs;
-    if (custodyCompletenessReadUs != null)
-      result.custodyCompletenessReadUs = custodyCompletenessReadUs;
-    if (quarantineRefUs != null) result.quarantineRefUs = quarantineRefUs;
-    if (chainSignatureLawReplayUs != null)
-      result.chainSignatureLawReplayUs = chainSignatureLawReplayUs;
-    if (verdictDecodeUs != null) result.verdictDecodeUs = verdictDecodeUs;
-    if (promoteAndCleanupRefsUs != null)
-      result.promoteAndCleanupRefsUs = promoteAndCleanupRefsUs;
-    if (frontierRebuildUs != null) result.frontierRebuildUs = frontierRebuildUs;
-    if (frontierStoreUs != null) result.frontierStoreUs = frontierStoreUs;
-    if (verification != null) result.verification = verification;
+    if (null_1 != null) result.null_1 = null_1;
+    if (boolean != null) result.boolean = boolean;
+    if (signedInteger != null) result.signedInteger = signedInteger;
+    if (unsignedInteger != null) result.unsignedInteger = unsignedInteger;
+    if (floatingPoint != null) result.floatingPoint = floatingPoint;
+    if (text != null) result.text = text;
+    if (bytes != null) result.bytes = bytes;
+    if (list != null) result.list = list;
+    if (object != null) result.object = object;
     return result;
   }
 
-  RestoreMainSpans._();
+  NomosValue._();
 
-  factory RestoreMainSpans.fromBuffer($core.List<$core.int> data,
+  factory NomosValue.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory RestoreMainSpans.fromJson($core.String json,
+  factory NomosValue.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
+  static const $core.Map<$core.int, NomosValue_Kind> _NomosValue_KindByTag = {
+    1: NomosValue_Kind.null_1,
+    2: NomosValue_Kind.boolean,
+    3: NomosValue_Kind.signedInteger,
+    4: NomosValue_Kind.unsignedInteger,
+    5: NomosValue_Kind.floatingPoint,
+    6: NomosValue_Kind.text,
+    7: NomosValue_Kind.bytes,
+    8: NomosValue_Kind.list,
+    9: NomosValue_Kind.object,
+    0: NomosValue_Kind.notSet
+  };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'RestoreMainSpans',
+      _omitMessageNames ? '' : 'NomosValue',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..a<$fixnum.Int64>(1, _omitFieldNames ? '' : 'totalUs', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(
-        2, _omitFieldNames ? '' : 'liveRefLookupUs', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(
-        3, _omitFieldNames ? '' : 'targetDecodeUs', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(4, _omitFieldNames ? '' : 'custodyCompletenessReadUs',
-        $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(
-        5, _omitFieldNames ? '' : 'quarantineRefUs', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(6, _omitFieldNames ? '' : 'chainSignatureLawReplayUs',
-        $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(
-        7, _omitFieldNames ? '' : 'verdictDecodeUs', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(8, _omitFieldNames ? '' : 'promoteAndCleanupRefsUs',
-        $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..oo(0, [1, 2, 3, 4, 5, 6, 7, 8, 9])
+    ..aOM<Null>(1, _omitFieldNames ? '' : 'null', subBuilder: Null.create)
+    ..aOB(2, _omitFieldNames ? '' : 'boolean')
     ..a<$fixnum.Int64>(
-        9, _omitFieldNames ? '' : 'frontierRebuildUs', $pb.PbFieldType.OU6,
+        3, _omitFieldNames ? '' : 'signedInteger', $pb.PbFieldType.OS6,
         defaultOrMaker: $fixnum.Int64.ZERO)
     ..a<$fixnum.Int64>(
-        10, _omitFieldNames ? '' : 'frontierStoreUs', $pb.PbFieldType.OU6,
+        4, _omitFieldNames ? '' : 'unsignedInteger', $pb.PbFieldType.OU6,
         defaultOrMaker: $fixnum.Int64.ZERO)
-    ..aOM<VerifyChainDiagnostics>(11, _omitFieldNames ? '' : 'verification',
-        subBuilder: VerifyChainDiagnostics.create)
+    ..aD(5, _omitFieldNames ? '' : 'floatingPoint')
+    ..aOS(6, _omitFieldNames ? '' : 'text')
+    ..a<$core.List<$core.int>>(
+        7, _omitFieldNames ? '' : 'bytes', $pb.PbFieldType.OY)
+    ..aOM<NomosList>(8, _omitFieldNames ? '' : 'list',
+        subBuilder: NomosList.create)
+    ..aOM<NomosStruct>(9, _omitFieldNames ? '' : 'object',
+        subBuilder: NomosStruct.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  RestoreMainSpans clone() => deepCopy();
+  NomosValue clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  RestoreMainSpans copyWith(void Function(RestoreMainSpans) updates) =>
-      super.copyWith((message) => updates(message as RestoreMainSpans))
-          as RestoreMainSpans;
+  NomosValue copyWith(void Function(NomosValue) updates) =>
+      super.copyWith((message) => updates(message as NomosValue)) as NomosValue;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static RestoreMainSpans create() => RestoreMainSpans._();
+  static NomosValue create() => NomosValue._();
   @$core.override
-  RestoreMainSpans createEmptyInstance() => create();
+  NomosValue createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static RestoreMainSpans getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<RestoreMainSpans>(create);
-  static RestoreMainSpans? _defaultInstance;
+  static NomosValue getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<NomosValue>(create);
+  static NomosValue? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $fixnum.Int64 get totalUs => $_getI64(0);
+  @$pb.TagNumber(2)
+  @$pb.TagNumber(3)
+  @$pb.TagNumber(4)
+  @$pb.TagNumber(5)
+  @$pb.TagNumber(6)
+  @$pb.TagNumber(7)
+  @$pb.TagNumber(8)
+  @$pb.TagNumber(9)
+  NomosValue_Kind whichKind() => _NomosValue_KindByTag[$_whichOneof(0)]!;
   @$pb.TagNumber(1)
-  set totalUs($fixnum.Int64 value) => $_setInt64(0, value);
+  @$pb.TagNumber(2)
+  @$pb.TagNumber(3)
+  @$pb.TagNumber(4)
+  @$pb.TagNumber(5)
+  @$pb.TagNumber(6)
+  @$pb.TagNumber(7)
+  @$pb.TagNumber(8)
+  @$pb.TagNumber(9)
+  void clearKind() => $_clearField($_whichOneof(0));
+
   @$pb.TagNumber(1)
-  $core.bool hasTotalUs() => $_has(0);
+  Null get null_1 => $_getN(0);
   @$pb.TagNumber(1)
-  void clearTotalUs() => $_clearField(1);
+  set null_1(Null value) => $_setField(1, value);
+  @$pb.TagNumber(1)
+  $core.bool hasNull_1() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearNull_1() => $_clearField(1);
+  @$pb.TagNumber(1)
+  Null ensureNull_1() => $_ensure(0);
 
   @$pb.TagNumber(2)
-  $fixnum.Int64 get liveRefLookupUs => $_getI64(1);
+  $core.bool get boolean => $_getBF(1);
   @$pb.TagNumber(2)
-  set liveRefLookupUs($fixnum.Int64 value) => $_setInt64(1, value);
+  set boolean($core.bool value) => $_setBool(1, value);
   @$pb.TagNumber(2)
-  $core.bool hasLiveRefLookupUs() => $_has(1);
+  $core.bool hasBoolean() => $_has(1);
   @$pb.TagNumber(2)
-  void clearLiveRefLookupUs() => $_clearField(2);
+  void clearBoolean() => $_clearField(2);
 
   @$pb.TagNumber(3)
-  $fixnum.Int64 get targetDecodeUs => $_getI64(2);
+  $fixnum.Int64 get signedInteger => $_getI64(2);
   @$pb.TagNumber(3)
-  set targetDecodeUs($fixnum.Int64 value) => $_setInt64(2, value);
+  set signedInteger($fixnum.Int64 value) => $_setInt64(2, value);
   @$pb.TagNumber(3)
-  $core.bool hasTargetDecodeUs() => $_has(2);
+  $core.bool hasSignedInteger() => $_has(2);
   @$pb.TagNumber(3)
-  void clearTargetDecodeUs() => $_clearField(3);
+  void clearSignedInteger() => $_clearField(3);
 
   @$pb.TagNumber(4)
-  $fixnum.Int64 get custodyCompletenessReadUs => $_getI64(3);
+  $fixnum.Int64 get unsignedInteger => $_getI64(3);
   @$pb.TagNumber(4)
-  set custodyCompletenessReadUs($fixnum.Int64 value) => $_setInt64(3, value);
+  set unsignedInteger($fixnum.Int64 value) => $_setInt64(3, value);
   @$pb.TagNumber(4)
-  $core.bool hasCustodyCompletenessReadUs() => $_has(3);
+  $core.bool hasUnsignedInteger() => $_has(3);
   @$pb.TagNumber(4)
-  void clearCustodyCompletenessReadUs() => $_clearField(4);
+  void clearUnsignedInteger() => $_clearField(4);
 
   @$pb.TagNumber(5)
-  $fixnum.Int64 get quarantineRefUs => $_getI64(4);
+  $core.double get floatingPoint => $_getN(4);
   @$pb.TagNumber(5)
-  set quarantineRefUs($fixnum.Int64 value) => $_setInt64(4, value);
+  set floatingPoint($core.double value) => $_setDouble(4, value);
   @$pb.TagNumber(5)
-  $core.bool hasQuarantineRefUs() => $_has(4);
+  $core.bool hasFloatingPoint() => $_has(4);
   @$pb.TagNumber(5)
-  void clearQuarantineRefUs() => $_clearField(5);
+  void clearFloatingPoint() => $_clearField(5);
 
   @$pb.TagNumber(6)
-  $fixnum.Int64 get chainSignatureLawReplayUs => $_getI64(5);
+  $core.String get text => $_getSZ(5);
   @$pb.TagNumber(6)
-  set chainSignatureLawReplayUs($fixnum.Int64 value) => $_setInt64(5, value);
+  set text($core.String value) => $_setString(5, value);
   @$pb.TagNumber(6)
-  $core.bool hasChainSignatureLawReplayUs() => $_has(5);
+  $core.bool hasText() => $_has(5);
   @$pb.TagNumber(6)
-  void clearChainSignatureLawReplayUs() => $_clearField(6);
+  void clearText() => $_clearField(6);
 
   @$pb.TagNumber(7)
-  $fixnum.Int64 get verdictDecodeUs => $_getI64(6);
+  $core.List<$core.int> get bytes => $_getN(6);
   @$pb.TagNumber(7)
-  set verdictDecodeUs($fixnum.Int64 value) => $_setInt64(6, value);
+  set bytes($core.List<$core.int> value) => $_setBytes(6, value);
   @$pb.TagNumber(7)
-  $core.bool hasVerdictDecodeUs() => $_has(6);
+  $core.bool hasBytes() => $_has(6);
   @$pb.TagNumber(7)
-  void clearVerdictDecodeUs() => $_clearField(7);
+  void clearBytes() => $_clearField(7);
 
   @$pb.TagNumber(8)
-  $fixnum.Int64 get promoteAndCleanupRefsUs => $_getI64(7);
+  NomosList get list => $_getN(7);
   @$pb.TagNumber(8)
-  set promoteAndCleanupRefsUs($fixnum.Int64 value) => $_setInt64(7, value);
+  set list(NomosList value) => $_setField(8, value);
   @$pb.TagNumber(8)
-  $core.bool hasPromoteAndCleanupRefsUs() => $_has(7);
+  $core.bool hasList() => $_has(7);
   @$pb.TagNumber(8)
-  void clearPromoteAndCleanupRefsUs() => $_clearField(8);
+  void clearList() => $_clearField(8);
+  @$pb.TagNumber(8)
+  NomosList ensureList() => $_ensure(7);
 
   @$pb.TagNumber(9)
-  $fixnum.Int64 get frontierRebuildUs => $_getI64(8);
+  NomosStruct get object => $_getN(8);
   @$pb.TagNumber(9)
-  set frontierRebuildUs($fixnum.Int64 value) => $_setInt64(8, value);
+  set object(NomosStruct value) => $_setField(9, value);
   @$pb.TagNumber(9)
-  $core.bool hasFrontierRebuildUs() => $_has(8);
+  $core.bool hasObject() => $_has(8);
   @$pb.TagNumber(9)
-  void clearFrontierRebuildUs() => $_clearField(9);
+  void clearObject() => $_clearField(9);
+  @$pb.TagNumber(9)
+  NomosStruct ensureObject() => $_ensure(8);
+}
 
-  @$pb.TagNumber(10)
-  $fixnum.Int64 get frontierStoreUs => $_getI64(9);
-  @$pb.TagNumber(10)
-  set frontierStoreUs($fixnum.Int64 value) => $_setInt64(9, value);
-  @$pb.TagNumber(10)
-  $core.bool hasFrontierStoreUs() => $_has(9);
-  @$pb.TagNumber(10)
-  void clearFrontierStoreUs() => $_clearField(10);
+class Null extends $pb.GeneratedMessage {
+  factory Null() => create();
 
-  /// The replay phase is itself structured. Keeping that structure nested avoids another
-  /// host-side profiler and makes restore_main attributable down to the historical intent.
-  @$pb.TagNumber(11)
-  VerifyChainDiagnostics get verification => $_getN(10);
-  @$pb.TagNumber(11)
-  set verification(VerifyChainDiagnostics value) => $_setField(11, value);
-  @$pb.TagNumber(11)
-  $core.bool hasVerification() => $_has(10);
-  @$pb.TagNumber(11)
-  void clearVerification() => $_clearField(11);
-  @$pb.TagNumber(11)
-  VerifyChainDiagnostics ensureVerification() => $_ensure(10);
+  Null._();
+
+  factory Null.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory Null.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'Null',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  Null clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  Null copyWith(void Function(Null) updates) =>
+      super.copyWith((message) => updates(message as Null)) as Null;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static Null create() => Null._();
+  @$core.override
+  Null createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static Null getDefault() =>
+      _defaultInstance ??= $pb.GeneratedMessage.$_defaultFor<Null>(create);
+  static Null? _defaultInstance;
 }
 
-class RestoreMainResponse extends $pb.GeneratedMessage {
-  factory RestoreMainResponse({
-    $core.String? head,
-    $core.bool? verified,
-    $core.String? walk,
-    RestoreMainSpans? spans,
-    NomosStruct? verdict,
-    CheckpointAssurance? assurance,
-    $core.bool? accepted,
+class NomosList extends $pb.GeneratedMessage {
+  factory NomosList({
+    $core.Iterable<NomosValue>? values,
   }) {
     final result = create();
-    if (head != null) result.head = head;
-    if (verified != null) result.verified = verified;
-    if (walk != null) result.walk = walk;
-    if (spans != null) result.spans = spans;
-    if (verdict != null) result.verdict = verdict;
-    if (assurance != null) result.assurance = assurance;
-    if (accepted != null) result.accepted = accepted;
+    if (values != null) result.values.addAll(values);
     return result;
   }
 
-  RestoreMainResponse._();
+  NomosList._();
 
-  factory RestoreMainResponse.fromBuffer($core.List<$core.int> data,
+  factory NomosList.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory RestoreMainResponse.fromJson($core.String json,
+  factory NomosList.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'RestoreMainResponse',
+      _omitMessageNames ? '' : 'NomosList',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aOS(1, _omitFieldNames ? '' : 'head')
-    ..aOB(2, _omitFieldNames ? '' : 'verified')
-    ..aOS(3, _omitFieldNames ? '' : 'walk')
-    ..aOM<RestoreMainSpans>(4, _omitFieldNames ? '' : 'spans',
-        subBuilder: RestoreMainSpans.create)
-    ..aOM<NomosStruct>(5, _omitFieldNames ? '' : 'verdict',
-        subBuilder: NomosStruct.create)
-    ..aE<CheckpointAssurance>(6, _omitFieldNames ? '' : 'assurance',
-        enumValues: CheckpointAssurance.values)
-    ..aOB(7, _omitFieldNames ? '' : 'accepted')
+    ..pPM<NomosValue>(1, _omitFieldNames ? '' : 'values',
+        subBuilder: NomosValue.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  RestoreMainResponse clone() => deepCopy();
+  NomosList clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  RestoreMainResponse copyWith(void Function(RestoreMainResponse) updates) =>
-      super.copyWith((message) => updates(message as RestoreMainResponse))
-          as RestoreMainResponse;
+  NomosList copyWith(void Function(NomosList) updates) =>
+      super.copyWith((message) => updates(message as NomosList)) as NomosList;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static NomosList create() => NomosList._();
+  @$core.override
+  NomosList createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static NomosList getDefault() =>
+      _defaultInstance ??= $pb.GeneratedMessage.$_defaultFor<NomosList>(create);
+  static NomosList? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $pb.PbList<NomosValue> get values => $_getList(0);
+}
+
+class NomosStruct extends $pb.GeneratedMessage {
+  factory NomosStruct({
+    $core.Iterable<$core.MapEntry<$core.String, NomosValue>>? fields,
+  }) {
+    final result = create();
+    if (fields != null) result.fields.addEntries(fields);
+    return result;
+  }
+
+  NomosStruct._();
+
+  factory NomosStruct.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory NomosStruct.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'NomosStruct',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..m<$core.String, NomosValue>(1, _omitFieldNames ? '' : 'fields',
+        entryClassName: 'NomosStruct.FieldsEntry',
+        keyFieldType: $pb.PbFieldType.OS,
+        valueFieldType: $pb.PbFieldType.OM,
+        valueCreator: NomosValue.create,
+        valueDefaultOrMaker: NomosValue.getDefault,
+        packageName: const $pb.PackageName('nomos.kernel.v1'))
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  NomosStruct clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  NomosStruct copyWith(void Function(NomosStruct) updates) =>
+      super.copyWith((message) => updates(message as NomosStruct))
+          as NomosStruct;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static RestoreMainResponse create() => RestoreMainResponse._();
+  static NomosStruct create() => NomosStruct._();
   @$core.override
-  RestoreMainResponse createEmptyInstance() => create();
+  NomosStruct createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static RestoreMainResponse getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<RestoreMainResponse>(create);
-  static RestoreMainResponse? _defaultInstance;
+  static NomosStruct getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<NomosStruct>(create);
+  static NomosStruct? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $core.String get head => $_getSZ(0);
-  @$pb.TagNumber(1)
-  set head($core.String value) => $_setString(0, value);
-  @$pb.TagNumber(1)
-  $core.bool hasHead() => $_has(0);
-  @$pb.TagNumber(1)
-  void clearHead() => $_clearField(1);
-
-  @$pb.TagNumber(2)
-  $core.bool get verified => $_getBF(1);
-  @$pb.TagNumber(2)
-  set verified($core.bool value) => $_setBool(1, value);
-  @$pb.TagNumber(2)
-  $core.bool hasVerified() => $_has(1);
-  @$pb.TagNumber(2)
-  void clearVerified() => $_clearField(2);
-
-  @$pb.TagNumber(3)
-  $core.String get walk => $_getSZ(2);
-  @$pb.TagNumber(3)
-  set walk($core.String value) => $_setString(2, value);
-  @$pb.TagNumber(3)
-  $core.bool hasWalk() => $_has(2);
-  @$pb.TagNumber(3)
-  void clearWalk() => $_clearField(3);
-
-  /// Observability-only kernel timings for the cold custody admission. These never
-  /// participate in the verdict and let every host report the same typed phase data.
-  @$pb.TagNumber(4)
-  RestoreMainSpans get spans => $_getN(3);
-  @$pb.TagNumber(4)
-  set spans(RestoreMainSpans value) => $_setField(4, value);
-  @$pb.TagNumber(4)
-  $core.bool hasSpans() => $_has(3);
-  @$pb.TagNumber(4)
-  void clearSpans() => $_clearField(4);
-  @$pb.TagNumber(4)
-  RestoreMainSpans ensureSpans() => $_ensure(3);
-
-  /// The exact kernel replay verdict which authorized promotion. Hosts relay this; they never
-  /// synthesize a second "valid" decision or replay the same chain merely to recover its shape.
-  @$pb.TagNumber(5)
-  NomosStruct get verdict => $_getN(4);
-  @$pb.TagNumber(5)
-  set verdict(NomosStruct value) => $_setField(5, value);
-  @$pb.TagNumber(5)
-  $core.bool hasVerdict() => $_has(4);
-  @$pb.TagNumber(5)
-  void clearVerdict() => $_clearField(5);
-  @$pb.TagNumber(5)
-  NomosStruct ensureVerdict() => $_ensure(4);
-
-  /// VERIFIED means this kernel recomputed the canonical prefix (or retained its own in-process
-  /// proof). TRUSTED means the caller explicitly accepted a previously verified custody receipt.
-  @$pb.TagNumber(6)
-  CheckpointAssurance get assurance => $_getN(5);
-  @$pb.TagNumber(6)
-  set assurance(CheckpointAssurance value) => $_setField(6, value);
-  @$pb.TagNumber(6)
-  $core.bool hasAssurance() => $_has(5);
-  @$pb.TagNumber(6)
-  void clearAssurance() => $_clearField(6);
-
-  /// True when the custody was lawfully promoted under either explicit assurance policy.
-  @$pb.TagNumber(7)
-  $core.bool get accepted => $_getBF(6);
-  @$pb.TagNumber(7)
-  set accepted($core.bool value) => $_setBool(6, value);
-  @$pb.TagNumber(7)
-  $core.bool hasAccepted() => $_has(6);
-  @$pb.TagNumber(7)
-  void clearAccepted() => $_clearField(7);
-}
-
-enum NomosValue_Kind {
-  null_1,
-  boolean,
-  signedInteger,
-  unsignedInteger,
-  floatingPoint,
-  text,
-  bytes,
-  list,
-  object,
-  notSet
+  $pb.PbMap<$core.String, NomosValue> get fields => $_getMap(0);
 }
 
-/// Nomos' dynamic tenant value is deliberately not google.protobuf.Value: that standard helper
-/// stores every number as double and cannot represent the exact i64/u64 values used by HLCs,
-/// replica ids, counters and custody metadata.
-class NomosValue extends $pb.GeneratedMessage {
-  factory NomosValue({
-    Null? null_1,
-    $core.bool? boolean,
-    $fixnum.Int64? signedInteger,
-    $fixnum.Int64? unsignedInteger,
-    $core.double? floatingPoint,
-    $core.String? text,
-    $core.List<$core.int>? bytes,
-    NomosList? list,
-    NomosStruct? object,
+/// Kept at the end of the ABI declaration so introducing this typed failure
+/// detail does not renumber generated descriptor indexes for every existing
+/// kernel message.
+class HistoryRequired extends $pb.GeneratedMessage {
+  factory HistoryRequired({
+    $core.String? workspace,
+    $core.String? untilCommit,
   }) {
     final result = create();
-    if (null_1 != null) result.null_1 = null_1;
-    if (boolean != null) result.boolean = boolean;
-    if (signedInteger != null) result.signedInteger = signedInteger;
-    if (unsignedInteger != null) result.unsignedInteger = unsignedInteger;
-    if (floatingPoint != null) result.floatingPoint = floatingPoint;
-    if (text != null) result.text = text;
-    if (bytes != null) result.bytes = bytes;
-    if (list != null) result.list = list;
-    if (object != null) result.object = object;
+    if (workspace != null) result.workspace = workspace;
+    if (untilCommit != null) result.untilCommit = untilCommit;
     return result;
   }
 
-  NomosValue._();
+  HistoryRequired._();
 
-  factory NomosValue.fromBuffer($core.List<$core.int> data,
+  factory HistoryRequired.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory NomosValue.fromJson($core.String json,
+  factory HistoryRequired.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
-  static const $core.Map<$core.int, NomosValue_Kind> _NomosValue_KindByTag = {
-    1: NomosValue_Kind.null_1,
-    2: NomosValue_Kind.boolean,
-    3: NomosValue_Kind.signedInteger,
-    4: NomosValue_Kind.unsignedInteger,
-    5: NomosValue_Kind.floatingPoint,
-    6: NomosValue_Kind.text,
-    7: NomosValue_Kind.bytes,
-    8: NomosValue_Kind.list,
-    9: NomosValue_Kind.object,
-    0: NomosValue_Kind.notSet
-  };
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'NomosValue',
+      _omitMessageNames ? '' : 'HistoryRequired',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..oo(0, [1, 2, 3, 4, 5, 6, 7, 8, 9])
-    ..aOM<Null>(1, _omitFieldNames ? '' : 'null', subBuilder: Null.create)
-    ..aOB(2, _omitFieldNames ? '' : 'boolean')
-    ..a<$fixnum.Int64>(
-        3, _omitFieldNames ? '' : 'signedInteger', $pb.PbFieldType.OS6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..a<$fixnum.Int64>(
-        4, _omitFieldNames ? '' : 'unsignedInteger', $pb.PbFieldType.OU6,
-        defaultOrMaker: $fixnum.Int64.ZERO)
-    ..aD(5, _omitFieldNames ? '' : 'floatingPoint')
-    ..aOS(6, _omitFieldNames ? '' : 'text')
-    ..a<$core.List<$core.int>>(
-        7, _omitFieldNames ? '' : 'bytes', $pb.PbFieldType.OY)
-    ..aOM<NomosList>(8, _omitFieldNames ? '' : 'list',
-        subBuilder: NomosList.create)
-    ..aOM<NomosStruct>(9, _omitFieldNames ? '' : 'object',
-        subBuilder: NomosStruct.create)
+    ..aOS(1, _omitFieldNames ? '' : 'workspace')
+    ..aOS(2, _omitFieldNames ? '' : 'untilCommit')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  NomosValue clone() => deepCopy();
+  HistoryRequired clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  NomosValue copyWith(void Function(NomosValue) updates) =>
-      super.copyWith((message) => updates(message as NomosValue)) as NomosValue;
+  HistoryRequired copyWith(void Function(HistoryRequired) updates) =>
+      super.copyWith((message) => updates(message as HistoryRequired))
+          as HistoryRequired;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static NomosValue create() => NomosValue._();
+  static HistoryRequired create() => HistoryRequired._();
   @$core.override
-  NomosValue createEmptyInstance() => create();
+  HistoryRequired createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static NomosValue getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<NomosValue>(create);
-  static NomosValue? _defaultInstance;
-
-  @$pb.TagNumber(1)
-  @$pb.TagNumber(2)
-  @$pb.TagNumber(3)
-  @$pb.TagNumber(4)
-  @$pb.TagNumber(5)
-  @$pb.TagNumber(6)
-  @$pb.TagNumber(7)
-  @$pb.TagNumber(8)
-  @$pb.TagNumber(9)
-  NomosValue_Kind whichKind() => _NomosValue_KindByTag[$_whichOneof(0)]!;
-  @$pb.TagNumber(1)
-  @$pb.TagNumber(2)
-  @$pb.TagNumber(3)
-  @$pb.TagNumber(4)
-  @$pb.TagNumber(5)
-  @$pb.TagNumber(6)
-  @$pb.TagNumber(7)
-  @$pb.TagNumber(8)
-  @$pb.TagNumber(9)
-  void clearKind() => $_clearField($_whichOneof(0));
+  static HistoryRequired getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<HistoryRequired>(create);
+  static HistoryRequired? _defaultInstance;
 
+  /// Logical dependency only. This identifies which workspace capability is
+  /// missing; it does not expose depth, shallow boundaries, remotes or policy.
   @$pb.TagNumber(1)
-  Null get null_1 => $_getN(0);
-  @$pb.TagNumber(1)
-  set null_1(Null value) => $_setField(1, value);
+  $core.String get workspace => $_getSZ(0);
   @$pb.TagNumber(1)
-  $core.bool hasNull_1() => $_has(0);
+  set workspace($core.String value) => $_setString(0, value);
   @$pb.TagNumber(1)
-  void clearNull_1() => $_clearField(1);
+  $core.bool hasWorkspace() => $_has(0);
   @$pb.TagNumber(1)
-  Null ensureNull_1() => $_ensure(0);
+  void clearWorkspace() => $_clearField(1);
 
+  /// The oldest commit the operation still has to read, when the kernel knows it
+  /// (architecture/lazy_history.md): deepen until it is present, then retry. Empty
+  /// means the whole history.
   @$pb.TagNumber(2)
-  $core.bool get boolean => $_getBF(1);
+  $core.String get untilCommit => $_getSZ(1);
   @$pb.TagNumber(2)
-  set boolean($core.bool value) => $_setBool(1, value);
+  set untilCommit($core.String value) => $_setString(1, value);
   @$pb.TagNumber(2)
-  $core.bool hasBoolean() => $_has(1);
+  $core.bool hasUntilCommit() => $_has(1);
   @$pb.TagNumber(2)
-  void clearBoolean() => $_clearField(2);
+  void clearUntilCommit() => $_clearField(2);
+}
 
-  @$pb.TagNumber(3)
-  $fixnum.Int64 get signedInteger => $_getI64(2);
-  @$pb.TagNumber(3)
-  set signedInteger($fixnum.Int64 value) => $_setInt64(2, value);
-  @$pb.TagNumber(3)
-  $core.bool hasSignedInteger() => $_has(2);
-  @$pb.TagNumber(3)
-  void clearSignedInteger() => $_clearField(3);
+/// CAP-986: isolated preparation only. No install, stage, author or admission permission.
+class LawPreparationUnitSet extends $pb.GeneratedMessage {
+  factory LawPreparationUnitSet({
+    $core.Iterable<LawUnit>? units,
+  }) {
+    final result = create();
+    if (units != null) result.units.addAll(units);
+    return result;
+  }
 
-  @$pb.TagNumber(4)
-  $fixnum.Int64 get unsignedInteger => $_getI64(3);
-  @$pb.TagNumber(4)
-  set unsignedInteger($fixnum.Int64 value) => $_setInt64(3, value);
-  @$pb.TagNumber(4)
-  $core.bool hasUnsignedInteger() => $_has(3);
-  @$pb.TagNumber(4)
-  void clearUnsignedInteger() => $_clearField(4);
+  LawPreparationUnitSet._();
+
+  factory LawPreparationUnitSet.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory LawPreparationUnitSet.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
 
-  @$pb.TagNumber(5)
-  $core.double get floatingPoint => $_getN(4);
-  @$pb.TagNumber(5)
-  set floatingPoint($core.double value) => $_setDouble(4, value);
-  @$pb.TagNumber(5)
-  $core.bool hasFloatingPoint() => $_has(4);
-  @$pb.TagNumber(5)
-  void clearFloatingPoint() => $_clearField(5);
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'LawPreparationUnitSet',
+      package:
+          const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
+      createEmptyInstance: create)
+    ..pPM<LawUnit>(1, _omitFieldNames ? '' : 'units',
+        subBuilder: LawUnit.create)
+    ..hasRequiredFields = false;
 
-  @$pb.TagNumber(6)
-  $core.String get text => $_getSZ(5);
-  @$pb.TagNumber(6)
-  set text($core.String value) => $_setString(5, value);
-  @$pb.TagNumber(6)
-  $core.bool hasText() => $_has(5);
-  @$pb.TagNumber(6)
-  void clearText() => $_clearField(6);
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  LawPreparationUnitSet clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  LawPreparationUnitSet copyWith(
+          void Function(LawPreparationUnitSet) updates) =>
+      super.copyWith((message) => updates(message as LawPreparationUnitSet))
+          as LawPreparationUnitSet;
 
-  @$pb.TagNumber(7)
-  $core.List<$core.int> get bytes => $_getN(6);
-  @$pb.TagNumber(7)
-  set bytes($core.List<$core.int> value) => $_setBytes(6, value);
-  @$pb.TagNumber(7)
-  $core.bool hasBytes() => $_has(6);
-  @$pb.TagNumber(7)
-  void clearBytes() => $_clearField(7);
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
 
-  @$pb.TagNumber(8)
-  NomosList get list => $_getN(7);
-  @$pb.TagNumber(8)
-  set list(NomosList value) => $_setField(8, value);
-  @$pb.TagNumber(8)
-  $core.bool hasList() => $_has(7);
-  @$pb.TagNumber(8)
-  void clearList() => $_clearField(8);
-  @$pb.TagNumber(8)
-  NomosList ensureList() => $_ensure(7);
+  @$core.pragma('dart2js:noInline')
+  static LawPreparationUnitSet create() => LawPreparationUnitSet._();
+  @$core.override
+  LawPreparationUnitSet createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static LawPreparationUnitSet getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<LawPreparationUnitSet>(create);
+  static LawPreparationUnitSet? _defaultInstance;
 
-  @$pb.TagNumber(9)
-  NomosStruct get object => $_getN(8);
-  @$pb.TagNumber(9)
-  set object(NomosStruct value) => $_setField(9, value);
-  @$pb.TagNumber(9)
-  $core.bool hasObject() => $_has(8);
-  @$pb.TagNumber(9)
-  void clearObject() => $_clearField(9);
-  @$pb.TagNumber(9)
-  NomosStruct ensureObject() => $_ensure(8);
+  @$pb.TagNumber(1)
+  $pb.PbList<LawUnit> get units => $_getList(0);
 }
 
-class Null extends $pb.GeneratedMessage {
-  factory Null() => create();
+class PreparedLawLayer extends $pb.GeneratedMessage {
+  factory PreparedLawLayer({
+    $core.String? input,
+    $core.String? key,
+    $core.List<$core.int>? layer,
+    $core.String? sha256,
+  }) {
+    final result = create();
+    if (input != null) result.input = input;
+    if (key != null) result.key = key;
+    if (layer != null) result.layer = layer;
+    if (sha256 != null) result.sha256 = sha256;
+    return result;
+  }
 
-  Null._();
+  PreparedLawLayer._();
 
-  factory Null.fromBuffer($core.List<$core.int> data,
+  factory PreparedLawLayer.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory Null.fromJson($core.String json,
+  factory PreparedLawLayer.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'Null',
+      _omitMessageNames ? '' : 'PreparedLawLayer',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'input')
+    ..aOS(2, _omitFieldNames ? '' : 'key')
+    ..a<$core.List<$core.int>>(
+        3, _omitFieldNames ? '' : 'layer', $pb.PbFieldType.OY)
+    ..aOS(4, _omitFieldNames ? '' : 'sha256')
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  Null clone() => deepCopy();
+  PreparedLawLayer clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  Null copyWith(void Function(Null) updates) =>
-      super.copyWith((message) => updates(message as Null)) as Null;
+  PreparedLawLayer copyWith(void Function(PreparedLawLayer) updates) =>
+      super.copyWith((message) => updates(message as PreparedLawLayer))
+          as PreparedLawLayer;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static Null create() => Null._();
+  static PreparedLawLayer create() => PreparedLawLayer._();
   @$core.override
-  Null createEmptyInstance() => create();
+  PreparedLawLayer createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static Null getDefault() =>
-      _defaultInstance ??= $pb.GeneratedMessage.$_defaultFor<Null>(create);
-  static Null? _defaultInstance;
+  static PreparedLawLayer getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<PreparedLawLayer>(create);
+  static PreparedLawLayer? _defaultInstance;
+
+  @$pb.TagNumber(1)
+  $core.String get input => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set input($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasInput() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearInput() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $core.String get key => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set key($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasKey() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearKey() => $_clearField(2);
+
+  @$pb.TagNumber(3)
+  $core.List<$core.int> get layer => $_getN(2);
+  @$pb.TagNumber(3)
+  set layer($core.List<$core.int> value) => $_setBytes(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasLayer() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearLayer() => $_clearField(3);
+
+  @$pb.TagNumber(4)
+  $core.String get sha256 => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set sha256($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasSha256() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearSha256() => $_clearField(4);
 }
 
-class NomosList extends $pb.GeneratedMessage {
-  factory NomosList({
-    $core.Iterable<NomosValue>? values,
+class PrepareLawProductsRequest extends $pb.GeneratedMessage {
+  factory PrepareLawProductsRequest({
+    WorkspaceTarget? target,
+    $core.Iterable<LawPreparationUnitSet>? unitSets,
+    PrepareLawProductsResponse? expected,
+    $core.Iterable<LawUnit>? candidateUnits,
+    $core.bool? coverageOnly,
+    $core.Iterable<$core.String>? custodyHeads,
+    ResolveDomainPlanRequest? domainPlan,
   }) {
     final result = create();
-    if (values != null) result.values.addAll(values);
+    if (target != null) result.target = target;
+    if (unitSets != null) result.unitSets.addAll(unitSets);
+    if (expected != null) result.expected = expected;
+    if (candidateUnits != null) result.candidateUnits.addAll(candidateUnits);
+    if (coverageOnly != null) result.coverageOnly = coverageOnly;
+    if (custodyHeads != null) result.custodyHeads.addAll(custodyHeads);
+    if (domainPlan != null) result.domainPlan = domainPlan;
     return result;
   }
 
-  NomosList._();
+  PrepareLawProductsRequest._();
 
-  factory NomosList.fromBuffer($core.List<$core.int> data,
+  factory PrepareLawProductsRequest.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory NomosList.fromJson($core.String json,
+  factory PrepareLawProductsRequest.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'NomosList',
+      _omitMessageNames ? '' : 'PrepareLawProductsRequest',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..pPM<NomosValue>(1, _omitFieldNames ? '' : 'values',
-        subBuilder: NomosValue.create)
+    ..aOM<WorkspaceTarget>(1, _omitFieldNames ? '' : 'target',
+        subBuilder: WorkspaceTarget.create)
+    ..pPM<LawPreparationUnitSet>(2, _omitFieldNames ? '' : 'unitSets',
+        subBuilder: LawPreparationUnitSet.create)
+    ..aOM<PrepareLawProductsResponse>(3, _omitFieldNames ? '' : 'expected',
+        subBuilder: PrepareLawProductsResponse.create)
+    ..pPM<LawUnit>(4, _omitFieldNames ? '' : 'candidateUnits',
+        subBuilder: LawUnit.create)
+    ..aOB(5, _omitFieldNames ? '' : 'coverageOnly')
+    ..pPS(6, _omitFieldNames ? '' : 'custodyHeads')
+    ..aOM<ResolveDomainPlanRequest>(7, _omitFieldNames ? '' : 'domainPlan',
+        subBuilder: ResolveDomainPlanRequest.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  NomosList clone() => deepCopy();
+  PrepareLawProductsRequest clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  NomosList copyWith(void Function(NomosList) updates) =>
-      super.copyWith((message) => updates(message as NomosList)) as NomosList;
+  PrepareLawProductsRequest copyWith(
+          void Function(PrepareLawProductsRequest) updates) =>
+      super.copyWith((message) => updates(message as PrepareLawProductsRequest))
+          as PrepareLawProductsRequest;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static NomosList create() => NomosList._();
+  static PrepareLawProductsRequest create() => PrepareLawProductsRequest._();
   @$core.override
-  NomosList createEmptyInstance() => create();
+  PrepareLawProductsRequest createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static NomosList getDefault() =>
-      _defaultInstance ??= $pb.GeneratedMessage.$_defaultFor<NomosList>(create);
-  static NomosList? _defaultInstance;
+  static PrepareLawProductsRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<PrepareLawProductsRequest>(create);
+  static PrepareLawProductsRequest? _defaultInstance;
 
+  /// Retained custody to prepare (all current and historical law), when supplied.
   @$pb.TagNumber(1)
-  $pb.PbList<NomosValue> get values => $_getList(0);
+  WorkspaceTarget get target => $_getN(0);
+  @$pb.TagNumber(1)
+  set target(WorkspaceTarget value) => $_setField(1, value);
+  @$pb.TagNumber(1)
+  $core.bool hasTarget() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearTarget() => $_clearField(1);
+  @$pb.TagNumber(1)
+  WorkspaceTarget ensureTarget() => $_ensure(0);
+
+  /// Complete kernel-resolved sets: candidates, retirement residuals and current-law sets.
+  @$pb.TagNumber(2)
+  $pb.PbList<LawPreparationUnitSet> get unitSets => $_getList(1);
+
+  /// A provider's claim is compared with independent local derivation, never trusted on its digest.
+  @$pb.TagNumber(3)
+  PrepareLawProductsResponse get expected => $_getN(2);
+  @$pb.TagNumber(3)
+  set expected(PrepareLawProductsResponse value) => $_setField(3, value);
+  @$pb.TagNumber(3)
+  $core.bool hasExpected() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearExpected() => $_clearField(3);
+  @$pb.TagNumber(3)
+  PrepareLawProductsResponse ensureExpected() => $_ensure(2);
+
+  /// Legacy carried-candidate placement is resolved by the same kernel desk, off lane.
+  @$pb.TagNumber(4)
+  $pb.PbList<LawUnit> get candidateUnits => $_getList(3);
+
+  @$pb.TagNumber(5)
+  $core.bool get coverageOnly => $_getBF(4);
+  @$pb.TagNumber(5)
+  set coverageOnly($core.bool value) => $_setBool(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasCoverageOnly() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearCoverageOnly() => $_clearField(5);
+
+  /// Incoming retained heads can be prepared before admission moves a live ref.
+  @$pb.TagNumber(6)
+  $pb.PbList<$core.String> get custodyHeads => $_getList(5);
+
+  /// Exact per-domain plan at an approved baseline. Resolve and fill retained units in isolation.
+  @$pb.TagNumber(7)
+  ResolveDomainPlanRequest get domainPlan => $_getN(6);
+  @$pb.TagNumber(7)
+  set domainPlan(ResolveDomainPlanRequest value) => $_setField(7, value);
+  @$pb.TagNumber(7)
+  $core.bool hasDomainPlan() => $_has(6);
+  @$pb.TagNumber(7)
+  void clearDomainPlan() => $_clearField(7);
+  @$pb.TagNumber(7)
+  ResolveDomainPlanRequest ensureDomainPlan() => $_ensure(6);
 }
 
-class NomosStruct extends $pb.GeneratedMessage {
-  factory NomosStruct({
-    $core.Iterable<$core.MapEntry<$core.String, NomosValue>>? fields,
+class PrepareLawProductsResponse extends $pb.GeneratedMessage {
+  factory PrepareLawProductsResponse({
+    $core.String? kernelGeneration,
+    $core.Iterable<$core.String>? unitSets,
+    $core.Iterable<$core.String>? preparationKeys,
+    $core.Iterable<PreparedLawLayer>? layers,
+    $fixnum.Int64? derivations,
+    $fixnum.Int64? preparationMicros,
   }) {
     final result = create();
-    if (fields != null) result.fields.addEntries(fields);
+    if (kernelGeneration != null) result.kernelGeneration = kernelGeneration;
+    if (unitSets != null) result.unitSets.addAll(unitSets);
+    if (preparationKeys != null) result.preparationKeys.addAll(preparationKeys);
+    if (layers != null) result.layers.addAll(layers);
+    if (derivations != null) result.derivations = derivations;
+    if (preparationMicros != null) result.preparationMicros = preparationMicros;
     return result;
   }
 
-  NomosStruct._();
+  PrepareLawProductsResponse._();
 
-  factory NomosStruct.fromBuffer($core.List<$core.int> data,
+  factory PrepareLawProductsResponse.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory NomosStruct.fromJson($core.String json,
+  factory PrepareLawProductsResponse.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'NomosStruct',
+      _omitMessageNames ? '' : 'PrepareLawProductsResponse',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..m<$core.String, NomosValue>(1, _omitFieldNames ? '' : 'fields',
-        entryClassName: 'NomosStruct.FieldsEntry',
-        keyFieldType: $pb.PbFieldType.OS,
-        valueFieldType: $pb.PbFieldType.OM,
-        valueCreator: NomosValue.create,
-        valueDefaultOrMaker: NomosValue.getDefault,
-        packageName: const $pb.PackageName('nomos.kernel.v1'))
+    ..aOS(1, _omitFieldNames ? '' : 'kernelGeneration')
+    ..pPS(2, _omitFieldNames ? '' : 'unitSets')
+    ..pPS(3, _omitFieldNames ? '' : 'preparationKeys')
+    ..pPM<PreparedLawLayer>(4, _omitFieldNames ? '' : 'layers',
+        subBuilder: PreparedLawLayer.create)
+    ..a<$fixnum.Int64>(
+        5, _omitFieldNames ? '' : 'derivations', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
+    ..a<$fixnum.Int64>(
+        6, _omitFieldNames ? '' : 'preparationMicros', $pb.PbFieldType.OU6,
+        defaultOrMaker: $fixnum.Int64.ZERO)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  NomosStruct clone() => deepCopy();
+  PrepareLawProductsResponse clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  NomosStruct copyWith(void Function(NomosStruct) updates) =>
-      super.copyWith((message) => updates(message as NomosStruct))
-          as NomosStruct;
+  PrepareLawProductsResponse copyWith(
+          void Function(PrepareLawProductsResponse) updates) =>
+      super.copyWith(
+              (message) => updates(message as PrepareLawProductsResponse))
+          as PrepareLawProductsResponse;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static NomosStruct create() => NomosStruct._();
+  static PrepareLawProductsResponse create() => PrepareLawProductsResponse._();
   @$core.override
-  NomosStruct createEmptyInstance() => create();
+  PrepareLawProductsResponse createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static NomosStruct getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<NomosStruct>(create);
-  static NomosStruct? _defaultInstance;
+  static PrepareLawProductsResponse getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<PrepareLawProductsResponse>(create);
+  static PrepareLawProductsResponse? _defaultInstance;
 
   @$pb.TagNumber(1)
-  $pb.PbMap<$core.String, NomosValue> get fields => $_getMap(0);
+  $core.String get kernelGeneration => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set kernelGeneration($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasKernelGeneration() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearKernelGeneration() => $_clearField(1);
+
+  @$pb.TagNumber(2)
+  $pb.PbList<$core.String> get unitSets => $_getList(1);
+
+  @$pb.TagNumber(3)
+  $pb.PbList<$core.String> get preparationKeys => $_getList(2);
+
+  @$pb.TagNumber(4)
+  $pb.PbList<PreparedLawLayer> get layers => $_getList(3);
+
+  @$pb.TagNumber(5)
+  $fixnum.Int64 get derivations => $_getI64(4);
+  @$pb.TagNumber(5)
+  set derivations($fixnum.Int64 value) => $_setInt64(4, value);
+  @$pb.TagNumber(5)
+  $core.bool hasDerivations() => $_has(4);
+  @$pb.TagNumber(5)
+  void clearDerivations() => $_clearField(5);
+
+  @$pb.TagNumber(6)
+  $fixnum.Int64 get preparationMicros => $_getI64(5);
+  @$pb.TagNumber(6)
+  set preparationMicros($fixnum.Int64 value) => $_setInt64(5, value);
+  @$pb.TagNumber(6)
+  $core.bool hasPreparationMicros() => $_has(5);
+  @$pb.TagNumber(6)
+  void clearPreparationMicros() => $_clearField(6);
 }
 
-/// Kept at the end of the ABI declaration so introducing this typed failure
-/// detail does not renumber generated descriptor indexes for every existing
-/// kernel message.
-class HistoryRequired extends $pb.GeneratedMessage {
-  factory HistoryRequired({
-    $core.String? workspace,
-    $core.String? untilCommit,
+class RecoverDetachedReceiptRequest extends $pb.GeneratedMessage {
+  factory RecoverDetachedReceiptRequest({
+    WorkspaceTarget? target,
+    DetachedSignedChange? change,
   }) {
     final result = create();
-    if (workspace != null) result.workspace = workspace;
-    if (untilCommit != null) result.untilCommit = untilCommit;
+    if (target != null) result.target = target;
+    if (change != null) result.change = change;
     return result;
   }
 
-  HistoryRequired._();
+  RecoverDetachedReceiptRequest._();
 
-  factory HistoryRequired.fromBuffer($core.List<$core.int> data,
+  factory RecoverDetachedReceiptRequest.fromBuffer($core.List<$core.int> data,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromBuffer(data, registry);
-  factory HistoryRequired.fromJson($core.String json,
+  factory RecoverDetachedReceiptRequest.fromJson($core.String json,
           [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
       create()..mergeFromJson(json, registry);
 
   static final $pb.BuilderInfo _i = $pb.BuilderInfo(
-      _omitMessageNames ? '' : 'HistoryRequired',
+      _omitMessageNames ? '' : 'RecoverDetachedReceiptRequest',
       package:
           const $pb.PackageName(_omitMessageNames ? '' : 'nomos.kernel.v1'),
       createEmptyInstance: create)
-    ..aOS(1, _omitFieldNames ? '' : 'workspace')
-    ..aOS(2, _omitFieldNames ? '' : 'untilCommit')
+    ..aOM<WorkspaceTarget>(1, _omitFieldNames ? '' : 'target',
+        subBuilder: WorkspaceTarget.create)
+    ..aOM<DetachedSignedChange>(2, _omitFieldNames ? '' : 'change',
+        subBuilder: DetachedSignedChange.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  HistoryRequired clone() => deepCopy();
+  RecoverDetachedReceiptRequest clone() => deepCopy();
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
-  HistoryRequired copyWith(void Function(HistoryRequired) updates) =>
-      super.copyWith((message) => updates(message as HistoryRequired))
-          as HistoryRequired;
+  RecoverDetachedReceiptRequest copyWith(
+          void Function(RecoverDetachedReceiptRequest) updates) =>
+      super.copyWith(
+              (message) => updates(message as RecoverDetachedReceiptRequest))
+          as RecoverDetachedReceiptRequest;
 
   @$core.override
   $pb.BuilderInfo get info_ => _i;
 
   @$core.pragma('dart2js:noInline')
-  static HistoryRequired create() => HistoryRequired._();
+  static RecoverDetachedReceiptRequest create() =>
+      RecoverDetachedReceiptRequest._();
   @$core.override
-  HistoryRequired createEmptyInstance() => create();
+  RecoverDetachedReceiptRequest createEmptyInstance() => create();
   @$core.pragma('dart2js:noInline')
-  static HistoryRequired getDefault() => _defaultInstance ??=
-      $pb.GeneratedMessage.$_defaultFor<HistoryRequired>(create);
-  static HistoryRequired? _defaultInstance;
+  static RecoverDetachedReceiptRequest getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<RecoverDetachedReceiptRequest>(create);
+  static RecoverDetachedReceiptRequest? _defaultInstance;
 
-  /// Logical dependency only. This identifies which workspace capability is
-  /// missing; it does not expose depth, shallow boundaries, remotes or policy.
   @$pb.TagNumber(1)
-  $core.String get workspace => $_getSZ(0);
+  WorkspaceTarget get target => $_getN(0);
   @$pb.TagNumber(1)
-  set workspace($core.String value) => $_setString(0, value);
+  set target(WorkspaceTarget value) => $_setField(1, value);
   @$pb.TagNumber(1)
-  $core.bool hasWorkspace() => $_has(0);
+  $core.bool hasTarget() => $_has(0);
   @$pb.TagNumber(1)
-  void clearWorkspace() => $_clearField(1);
+  void clearTarget() => $_clearField(1);
+  @$pb.TagNumber(1)
+  WorkspaceTarget ensureTarget() => $_ensure(0);
 
-  /// The oldest commit the operation still has to read, when the kernel knows it
-  /// (architecture/lazy_history.md): deepen until it is present, then retry. Empty
-  /// means the whole history.
   @$pb.TagNumber(2)
-  $core.String get untilCommit => $_getSZ(1);
+  DetachedSignedChange get change => $_getN(1);
   @$pb.TagNumber(2)
-  set untilCommit($core.String value) => $_setString(1, value);
+  set change(DetachedSignedChange value) => $_setField(2, value);
   @$pb.TagNumber(2)
-  $core.bool hasUntilCommit() => $_has(1);
+  $core.bool hasChange() => $_has(1);
   @$pb.TagNumber(2)
-  void clearUntilCommit() => $_clearField(2);
+  void clearChange() => $_clearField(2);
+  @$pb.TagNumber(2)
+  DetachedSignedChange ensureChange() => $_ensure(1);
 }
 
 /// The host and kernel share one unary protocol. WASI transports the encoded messages through