@giveitsmaller/contracts 0.8.0 → 0.16.0

package/asyncapi/events.yaml

@@ -1,7 +1,7 @@
 asyncapi: 3.0.0
 info:
   title: GISL Compression Events
-  version: 3.3.0
+  version: 3.18.0
   description: |
     Asynchronous event contracts for the GISL (Give It Smaller) compression service.
 
@@ -21,16 +21,21 @@ info:
       video_watermark, video_text_watermark, split). Filter attribute:
       `operation_type`. Subscriptions: one queue per operation type,
       plus four thumbnail sub-type queues during the migration window.
-      `custom_luma`, `audio_overlay`, `audio_watermark`,
-      `audio_to_video`, `video_watermark`, `video_text_watermark`, and
-      `split` are `availability: planned` (per
-      [I29](https://trello.com/c/EPUE5Vs1) +
+      `custom_luma`, `audio_overlay`, `audio_watermark`, and
+      `video_text_watermark` are `availability: planned`
+      (per [I29](https://trello.com/c/EPUE5Vs1) +
       [I19](https://trello.com/c/Xr3Z4GBF) +
       [I20](https://trello.com/c/omiCq7Vn) +
-      [`SlluxMBN`](https://trello.com/c/SlluxMBN) +
-      [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) +
-      [`vKI0CFDu`](https://trello.com/c/vKI0CFDu)) — their queues are
-      declared but receive no traffic until Lambda ships.
+      [`4NrRPCgh`](https://trello.com/c/4NrRPCgh)) — their queues are
+      declared but receive no traffic until Lambda ships. `split` is
+      `availability: beta` for its `audio` and `video` mime_groups
+      (workers live on staging — [`vKI0CFDu`](https://trello.com/c/vKI0CFDu);
+      video short-form only — `long_form` / `split-video-fargate` stays
+      planned); its `image_gif` and `document_pdf` mime_groups stay
+      `availability: planned`.
+      `audio_to_video` and `video_watermark` are `availability: beta`
+      (Wave A activation [`c3uthIP4`](https://trello.com/c/c3uthIP4) —
+      backends live; the API accepts + publishes, traffic flows).
       `audio_watermark` additionally requires `enterprise` tier.
 
     **Publisher branching rule** (implemented in `compression_api`'s
@@ -54,15 +59,17 @@ info:
     **Thumbnail migration window.** The terraform topology has both the
     legacy `ops-thumbnail` queue and four new sub-type queues
     (`ops-thumbnail-{image,video,document,office}`) live simultaneously.
-    The API publisher currently emits the legacy `operation_type=thumbnail`
-    only; adoption of the four sub-type values (`thumbnail_image`,
-    `thumbnail_video`, `thumbnail_document`, `thumbnail_office`) is a
-    follow-up API PR. Both routing targets are documented in this contract
-    because both are valid during the migration.
+    The API publisher emits the four sub-type values (`thumbnail_image`,
+    `thumbnail_video`, `thumbnail_document`, `thumbnail_office`) on the
+    SNS `operation_type` attribute, resolved from each operation's
+    effective input MIME; the legacy `operation_type=thumbnail` attribute
+    is retained as a valid routing target during the migration window but
+    is no longer emitted. Both routing targets are documented in this
+    contract because both remain valid during the migration.
 
     **Notifications (Lambda -> API).** Lambda functions publish progress
     and result notifications to the FIFO SNS topic
-    `gisl-{env}-{region}-notifications-operations.fifo`. The API consumes
+    `gisl-{env}-{region}-notifications-jobs.fifo`. The API consumes
     from the corresponding FIFO SQS queue via a Raw Message Delivery
     subscription. This notification path is unchanged from previous
     releases.
@@ -191,27 +198,37 @@ channels:
         [I19](https://trello.com/c/Xr3Z4GBF) — same `feature_not_
         available` 422 gating)
       - `operation_type = audio_to_video` -> `ops-audio-to-video` queue
-        (gated by `availability: planned` until Lambda ships per
-        [`SlluxMBN`](https://trello.com/c/SlluxMBN) — same
-        `feature_not_available` 422 gating)
+        (`availability: beta` — Wave A activated per
+        [`SlluxMBN`](https://trello.com/c/SlluxMBN) +
+        [`c3uthIP4`](https://trello.com/c/c3uthIP4); backend live, traffic
+        flows)
       - `operation_type = video_watermark` -> `ops-video-watermark`
-        queue (gated by `availability: planned` until Lambda ships per
-        [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) — same gating)
+        queue (`availability: beta` — Wave A activated per
+        [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) +
+        [`c3uthIP4`](https://trello.com/c/c3uthIP4); backend live)
       - `operation_type = video_text_watermark` ->
         `ops-video-text-watermark` queue (gated by
         `availability: planned` until Lambda ships per
         [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) — same gating)
-      - `operation_type = split` -> `ops-split` queue (gated by
-        `availability: planned` until Lambda ships per
-        [`vKI0CFDu`](https://trello.com/c/vKI0CFDu) — same gating;
+      - `operation_type = split` -> `ops-split` queue (the `audio` and
+        `video` mime_groups are `availability: beta` — audio + short-form
+        video split traffic reaches this queue; `image_gif` /
+        `document_pdf` stay `availability: planned` until their Lambdas
+        ship per [`vKI0CFDu`](https://trello.com/c/vKI0CFDu);
         long-form video splits route via `processing_class` to the
-        `split-video-fargate` worker, same OperationType, different
-        worker)
+        `split-video-fargate` worker — same OperationType, different
+        worker — and stay `availability: planned` until it ships)
       - `operation_type = audio_watermark` -> `ops-audio-watermark`
         queue (gated by `availability: planned` +
         `required_tier: enterprise` per
         [I20](https://trello.com/c/omiCq7Vn) — same 422 gating, plus
         a 403 `feature_tier_restricted` for non-enterprise callers)
+      - `operation_type = render_variants` -> `ops-render-variants`
+        queue (gated by `availability: planned` until the worker +
+        SNS subscription ship per
+        [`w3EwzHYd`](https://trello.com/c/w3EwzHYd) /
+        [`MNuDYJaY`](https://trello.com/c/MNuDYJaY) — same
+        `feature_not_available` 422 gating)
 
       The API's Option A publisher sets `operation_type` as the filter
       attribute and additionally sets `media_group` as an **informational**
@@ -223,9 +240,11 @@ channels:
 
       **Thumbnail migration window.** The legacy `ops-thumbnail` queue and
       the four sub-type queues are all live simultaneously. The API
-      publisher currently emits `operation_type=thumbnail` (legacy);
-      adoption of the four sub-type values is a follow-up API PR. Both
-      paths are valid routing targets today.
+      publisher emits the four sub-type values on the SNS `operation_type`
+      attribute (resolved from effective input MIME); the legacy
+      `operation_type=thumbnail` attribute is retained as a valid routing
+      target but is no longer emitted. Both paths are valid routing
+      targets today.
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -245,6 +264,12 @@ channels:
       SQS queue for image compression jobs.
       Subscribed to the `job-requests` SNS topic with filter
       `job_type = image`. Handles `compress` only for image inputs.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-jobs-image
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -260,6 +285,12 @@ channels:
       SQS queue for video compression jobs.
       Subscribed to the `job-requests` SNS topic with filter
       `job_type = video`. Handles `compress` only for video inputs.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-jobs-video
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -275,6 +306,12 @@ channels:
       SQS queue for audio compression jobs.
       Subscribed to the `job-requests` SNS topic with filter
       `job_type = audio`. Handles `compress` only for audio inputs.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-jobs-audio
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -290,6 +327,12 @@ channels:
       SQS queue for document compression jobs.
       Subscribed to the `job-requests` SNS topic with filter
       `job_type = document`. Handles `compress` only for document inputs.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-jobs-document
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -350,12 +393,20 @@ channels:
       Subscribed to the `operations` SNS topic with filter
       `operation_type = thumbnail`.
 
-      **Migration window**: This is the legacy routing target and is
-      currently the only one the API publisher emits for (via
-      `operation_type=thumbnail`). It handles thumbnail requests for all
-      media types. Retirement is planned after the API publisher adopts
-      the four sub-type values (`thumbnail_image`, `thumbnail_video`,
-      `thumbnail_document`, `thumbnail_office`) in a follow-up API PR.
+      **Migration window**: This is the legacy routing target. It is
+      retained as a valid routing target (via `operation_type=thumbnail`)
+      and handles thumbnail requests for all media types, but the API
+      publisher no longer emits it — the publisher now emits the four
+      sub-type values (`thumbnail_image`, `thumbnail_video`,
+      `thumbnail_document`, `thumbnail_office`), resolved from each
+      operation's effective input MIME. Retirement of this legacy queue
+      follows once no traffic remains.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-thumbnail
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -373,9 +424,16 @@ channels:
       `operation_type = thumbnail_image`. Backed by the Rust image
       thumbnail Lambda (`operation-thumbnail-image`).
 
-      Not yet receiving traffic — the API publisher currently emits
-      `operation_type=thumbnail` (legacy) and will flip to
-      `thumbnail_image` after a follow-up API PR adds input-MIME dispatch.
+      Receives traffic for image inputs — the API publisher emits
+      `operation_type=thumbnail_image` on the SNS attribute (resolved from
+      the operation's effective input MIME); the payload `operation_type`
+      field stays `thumbnail`.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-thumbnail-image
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -393,9 +451,16 @@ channels:
       `operation_type = thumbnail_video`. Backed by the FFmpeg video
       thumbnail Lambda (`operation-thumbnail-video`).
 
-      Not yet receiving traffic — the API publisher currently emits
-      `operation_type=thumbnail` (legacy) and will flip to
-      `thumbnail_video` after a follow-up API PR adds input-MIME dispatch.
+      Receives traffic for video inputs — the API publisher emits
+      `operation_type=thumbnail_video` on the SNS attribute (resolved from
+      the operation's effective input MIME); the payload `operation_type`
+      field stays `thumbnail`.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-thumbnail-video
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -413,10 +478,16 @@ channels:
       `operation_type = thumbnail_document`. Backed by the Ghostscript
       document thumbnail Lambda (`operation-thumbnail-document`).
 
-      Not yet receiving traffic — the API publisher currently emits
-      `operation_type=thumbnail` (legacy) and will flip to
-      `thumbnail_document` after a follow-up API PR adds input-MIME
-      dispatch.
+      Receives traffic for PDF/EPUB inputs — the API publisher emits
+      `operation_type=thumbnail_document` on the SNS attribute (resolved
+      from the operation's effective input MIME); the payload
+      `operation_type` field stays `thumbnail`.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-thumbnail-document
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -435,10 +506,16 @@ channels:
       `operation_type = thumbnail_office`. Backed by the LibreOffice
       thumbnail Lambda (`operation-thumbnail-office`).
 
-      Not yet receiving traffic — the API publisher currently emits
-      `operation_type=thumbnail` (legacy) and will flip to
-      `thumbnail_office` after a follow-up API PR adds input-MIME
-      dispatch.
+      Receives traffic for office-document inputs — the API publisher
+      emits `operation_type=thumbnail_office` on the SNS attribute
+      (resolved from the operation's effective input MIME); the payload
+      `operation_type` field stays `thumbnail`.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-thumbnail-office
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -467,6 +544,12 @@ channels:
       queue. Video bases are NOT routed here — they go to
       `ops-video-watermark` for the dedicated `video_watermark`
       operation per ADR-0013. Per ADR-0004 + I4-CONS + I5 + ADR-0013.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-image-watermark
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -485,6 +568,12 @@ channels:
       (Liberation Sans) — supports `single` (one label at anchor) and
       `tiled` (Cinavia-style angled fill) modes. Backed by the
       operation-text-watermark Lambda. Per ADR-0004 + I4-CONS.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-text-watermark
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -504,6 +593,12 @@ channels:
       concat) — the `output_type` field on the request determines the
       encoding path internally, not the routing. Image collage and PDF
       concatenation are not supported by the V1 Lambda.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-merge
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -520,6 +615,12 @@ channels:
       Subscribed to the `operations` SNS topic with filter
       `operation_type = archive`. Media-agnostic: accepts mixed input
       types. Backed by the archive Lambda (`operation-archive`).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-archive
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -537,6 +638,12 @@ channels:
       `operation_type = convert`. Handles format conversion across all
       media types (image, video, audio, document). Backed by the convert
       Lambda (`operation-convert`).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-convert
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -562,6 +669,12 @@ channels:
       `operation-custom-luma` Lambda (cross-repo follow-up; not yet
       shipped).
       Per ADR-0004 + I29 (Trello EPUE5Vs1).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-custom-luma
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -594,6 +707,12 @@ channels:
       / "audio branding".
 
       Per ADR-0004 + I19 (Trello Xr3Z4GBF).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-audio-overlay
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -614,14 +733,20 @@ channels:
       `role: overlay` image OPTIONAL — see `per_role_cardinality`
       on the operation schema).
 
-      `availability: planned` per the operation schema; the API
-      rejects workflow-create with `feature_not_available` (422)
-      until the Lambda ships, so traffic does not reach this queue
-      today. Backed by the `operation-audio-to-video` Lambda
-      (cross-repo follow-up — lambdas pre-launch epic Wave A).
+      `availability: beta` per the operation schema (Wave A activated,
+      [`c3uthIP4`](https://trello.com/c/c3uthIP4)): the API accepts +
+      publishes, so traffic flows to this queue (MUST NOT 422). Backed
+      by the `operation-audio-to-video` Lambda (live; lambdas pre-launch
+      epic Wave A).
 
       Per ADR-0004 + ADR-0015
       ([`SlluxMBN`](https://trello.com/c/SlluxMBN)).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-audio-to-video
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -642,10 +767,13 @@ channels:
       (no operation-specific conditional needed in
       OperationRequestAttributes).
 
-      `availability: planned` per the operation schema; the API
-      rejects workflow-create with `feature_not_available` (422)
-      until the Lambda ships, so traffic does not reach this queue
-      today. Backed by the `operation-split` Lambda (cross-repo
+      `availability: beta` for the `audio` and `video` mime_groups
+      (workers live on staging — audio + short-form video split traffic
+      reaches this queue; video `long_form` / `split-video-fargate` stays
+      planned); the `image_gif` and `document_pdf` mime_groups stay
+      `availability: planned`, and the API rejects their
+      workflow-create with `feature_not_available` (422) until those
+      Lambdas ship. Backed by the `operation-split` Lambda (cross-repo
       follow-up — lambdas pre-launch epic Wave A, ticket
       [DbpJpVtm-sibling-L1](https://trello.com/c/vKI0CFDu)
       [`vKI0CFDu`](https://trello.com/c/vKI0CFDu)).
@@ -659,6 +787,12 @@ channels:
       MIME detection.
 
       Per ADR-0004 + ADR-0014.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-split
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -678,11 +812,12 @@ channels:
       (Path B with `role: base` video + `role: overlay` image,
       exactly one of each per `per_role_cardinality`).
 
-      `availability: planned` per the operation schema; the API
-      rejects workflow-create with `feature_not_available` (422)
-      until the Lambda ships, so traffic does not reach this queue
-      today. Backed by the `operation-video-watermark` Lambda (cross-
-      repo follow-up — lambdas pre-launch epic Wave A, ticket
+      `availability: beta` per the operation schema (Wave A activated,
+      [`c3uthIP4`](https://trello.com/c/c3uthIP4)): the API accepts +
+      publishes, so traffic flows to this queue (MUST NOT 422). The
+      `short_form` processing class is beta; `long_form` stays planned
+      (no live Fargate worker). Backed by the `operation-video-watermark`
+      Lambda (live; lambdas pre-launch epic Wave A, ticket
       [DbpJpVtm](https://trello.com/c/DbpJpVtm)).
 
       Distinct from `image_watermark` (pure-Rust image-only) — see
@@ -690,6 +825,12 @@ channels:
 
       Per ADR-0004 + ADR-0013
       ([`4NrRPCgh`](https://trello.com/c/4NrRPCgh)).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-video-watermark
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -720,6 +861,12 @@ channels:
 
       Per ADR-0004 + ADR-0013
       ([`4NrRPCgh`](https://trello.com/c/4NrRPCgh)).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-video-text-watermark
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -754,6 +901,37 @@ channels:
       own-watermarks-only extraction (declared in `openapi/api.yaml`).
 
       Per ADR-0004 + I20 (Trello omiCq7Vn).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-audio-watermark
+          fifoQueue: false
+        bindingVersion: '0.2.0'
+    parameters:
+      env:
+        description: Environment (local, stg, prod)
+      region:
+        description: AWS region abbreviation (euw1, use1, etc.)
+    messages:
+      operationRequest:
+        $ref: '#/components/messages/OperationRequestMessage'
+
+  opsRenderVariants:
+    address: gisl-{env}-{region}-ops-render-variants
+    description: |
+      SQS queue for render_variants operations (image fan-out — one
+      source image to N resized / re-encoded variants). Subscribed to the
+      `operations` SNS topic with filter `operation_type = render_variants`.
+      Backed by the render_variants Lambda (`operation-render-variants`).
+      No traffic reaches this queue while render_variants is
+      `availability: planned` (per ticket w3EwzHYd — same `feature_not_
+      available` 422 gating until the worker + this subscription ship).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-render-variants
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -895,14 +1073,26 @@ channels:
       region:
         description: AWS region abbreviation (euw1, use1, etc.)
 
+  opsRenderVariantsDlq:
+    address: gisl-{env}-{region}-ops-render-variants-dlq
+    description: |
+      DLQ for failed render_variants operations (per ticket w3EwzHYd).
+      Messages land here after 5 failed processing attempts. No traffic
+      reaches this queue while render_variants is `availability: planned`.
+    parameters:
+      env:
+        description: Environment (local, stg, prod)
+      region:
+        description: AWS region abbreviation (euw1, use1, etc.)
+
   opsAudioToVideoDlq:
     address: gisl-{env}-{region}-ops-audio-to-video-dlq
     description: |
       DLQ for failed audio_to_video operations (per ticket
       [`SlluxMBN`](https://trello.com/c/SlluxMBN) / ADR-0015).
-      Messages land here after 5 failed processing attempts. No
-      traffic reaches this queue while audio_to_video is
-      `availability: planned`.
+      Messages land here after 5 failed processing attempts.
+      audio_to_video is `availability: beta` (Wave A activated) so
+      this queue now receives real failures.
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -914,9 +1104,9 @@ channels:
     description: |
       DLQ for failed video_watermark operations (per ticket
       [`4NrRPCgh`](https://trello.com/c/4NrRPCgh) / ADR-0013).
-      Messages land here after 5 failed processing attempts. No
-      traffic reaches this queue while video_watermark is
-      `availability: planned`.
+      Messages land here after 5 failed processing attempts.
+      video_watermark is `availability: beta` (Wave A activated) so
+      this queue now receives real failures.
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -942,9 +1132,10 @@ channels:
     description: |
       DLQ for failed split operations (per ticket
       [`vKI0CFDu`](https://trello.com/c/vKI0CFDu) / ADR-0014).
-      Messages land here after 5 failed processing attempts. No
-      traffic reaches this queue while split is `availability:
-      planned`.
+      Messages land here after 5 failed processing attempts. Live for
+      the `split` `audio` + `video` mime_groups (now `availability: beta`,
+      video short-form only); the `image_gif` and `document_pdf` groups
+      stay `availability: planned` and carry no traffic yet.
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -997,6 +1188,12 @@ channels:
 
       Standard (non-FIFO) — each probe request is independent; no
       ordering guarantees are required across uploads.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-upload-probe
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1037,6 +1234,12 @@ channels:
       The sync `POST /api/uploads/{id}/probe` path does not publish
       here — sync results are returned inline via the Lambda
       RequestResponse return value.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-upload-probe-completions
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1063,8 +1266,8 @@ channels:
   # NOTIFICATIONS (Lambda -> API)
   # ============================================
 
-  notificationsOperationsTopic:
-    address: gisl-{env}-{region}-notifications-operations.fifo
+  notificationsJobsTopic:
+    address: gisl-{env}-{region}-notifications-jobs.fifo
     description: |
       FIFO SNS topic where Lambdas publish all operation notifications (progress and results).
       API subscribes via FIFO SQS with Raw Message Delivery enabled.
@@ -1072,6 +1275,13 @@ channels:
       **FIFO Publishing Requirements:**
       - MessageGroupId: Use operation_id (ensures ordering per operation)
       - MessageDeduplicationId: Not required (content-based deduplication enabled)
+    bindings:
+      sns:
+        name: gisl-{env}-{region}-notifications-jobs.fifo
+        ordering:
+          type: FIFO
+          contentBasedDeduplication: true
+        bindingVersion: '0.1.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1083,15 +1293,21 @@ channels:
       operationResult:
         $ref: '#/components/messages/OperationResultMessage'
 
-  notificationsOperationsQueue:
-    address: gisl-{env}-{region}-notifications-operations.fifo
+  notificationsJobsQueue:
+    address: gisl-{env}-{region}-notifications-jobs.fifo
     description: |
-      FIFO SQS queue subscribed to notifications-operations SNS topic.
+      FIFO SQS queue subscribed to notifications-jobs SNS topic.
       Receives both OperationProgress and OperationResult messages.
       Raw Message Delivery enabled (no SNS envelope).
 
       FIFO ensures message ordering per operation (operation_id used as MessageGroupId).
       This guarantees OperationProgress messages arrive before OperationResult.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-notifications-jobs.fifo
+          fifoQueue: true
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1103,8 +1319,8 @@ channels:
       operationResult:
         $ref: '#/components/messages/OperationResultMessage'
 
-  notificationsOperationsDlq:
-    address: gisl-{env}-{region}-notifications-operations-dlq.fifo
+  notificationsJobsDlq:
+    address: gisl-{env}-{region}-notifications-jobs-dlq.fifo
     description: DLQ for failed notification processing. Messages land here after 5 failed processing attempts.
     parameters:
       env:
@@ -1137,6 +1353,12 @@ channels:
       shared `JobRequestMessage` across the per-media `jobs-*` queues); per-queue
       `operation_type` is a publisher invariant documented here, not a separate
       message schema.
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-compress-video-longform
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1167,6 +1389,12 @@ channels:
       `LongFormJobMessage` enum permits `{compress, merge}`; per-queue
       `operation_type` is a publisher invariant documented here, not a separate
       schema).
+    bindings:
+      sqs:
+        queue:
+          name: gisl-{env}-{region}-ops-merge-video-longform-reencode
+          fifoQueue: false
+        bindingVersion: '0.2.0'
     parameters:
       env:
         description: Environment (local, stg, prod)
@@ -1247,6 +1475,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/jobsImage'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-jobs-image
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process image compression job
     description: |
       The image compression Lambda consumes jobs for image inputs.
@@ -1261,6 +1495,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/jobsVideo'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-jobs-video
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process video compression job
     description: |
       The video compression Lambda consumes jobs for video inputs.
@@ -1274,6 +1514,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/jobsAudio'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-jobs-audio
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process audio compression job
     description: |
       The audio compression Lambda consumes jobs for audio inputs.
@@ -1287,6 +1533,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/jobsDocument'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-jobs-document
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process document compression job
     description: |
       The document compression Lambda consumes jobs for document inputs.
@@ -1304,13 +1556,20 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsThumbnail'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-thumbnail
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process legacy thumbnail operation
     description: |
       The legacy thumbnail Lambda consumes thumbnail requests routed
       by `operation_type=thumbnail`. Handles thumbnail generation for
-      all media types in a single Lambda. This is the current live
-      routing target for the API publisher; it will be retired after
-      the publisher adopts the four sub-type values.
+      all media types in a single Lambda. Retained as a valid routing
+      target during the migration window, but the API publisher no
+      longer emits `operation_type=thumbnail` (it emits the four
+      sub-type values); this queue is retired once no traffic remains.
     messages:
       - $ref: '#/channels/opsThumbnail/messages/operationRequest'
 
@@ -1318,11 +1577,17 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsThumbnailImage'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-thumbnail-image
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process image thumbnail operation
     description: |
       The image thumbnail Lambda consumes thumbnail requests routed by
       `operation_type=thumbnail_image`. Backed by a Rust image crate.
-      Not yet receiving traffic — see channel description.
+      Receives traffic for image inputs — see channel description.
     messages:
       - $ref: '#/channels/opsThumbnailImage/messages/operationRequest'
 
@@ -1330,11 +1595,17 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsThumbnailVideo'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-thumbnail-video
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process video thumbnail operation
     description: |
       The video thumbnail Lambda consumes thumbnail requests routed by
-      `operation_type=thumbnail_video`. Backed by FFmpeg. Not yet
-      receiving traffic — see channel description.
+      `operation_type=thumbnail_video`. Backed by FFmpeg. Receives
+      traffic for video inputs — see channel description.
     messages:
       - $ref: '#/channels/opsThumbnailVideo/messages/operationRequest'
 
@@ -1342,11 +1613,18 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsThumbnailDocument'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-thumbnail-document
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process document thumbnail operation
     description: |
       The document (PDF/EPUB) thumbnail Lambda consumes thumbnail
       requests routed by `operation_type=thumbnail_document`. Backed by
-      Ghostscript. Not yet receiving traffic — see channel description.
+      Ghostscript. Receives traffic for PDF/EPUB inputs — see channel
+      description.
     messages:
       - $ref: '#/channels/opsThumbnailDocument/messages/operationRequest'
 
@@ -1354,12 +1632,18 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsThumbnailOffice'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-thumbnail-office
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process office document thumbnail operation
     description: |
       The office document (DOCX/XLSX/PPTX/ODT/ODS/ODP) thumbnail Lambda
       consumes thumbnail requests routed by
-      `operation_type=thumbnail_office`. Backed by LibreOffice. Not yet
-      receiving traffic — see channel description.
+      `operation_type=thumbnail_office`. Backed by LibreOffice. Receives
+      traffic for office-document inputs — see channel description.
     messages:
       - $ref: '#/channels/opsThumbnailOffice/messages/operationRequest'
 
@@ -1367,6 +1651,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsImageWatermark'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-image-watermark
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process image_watermark operation
     description: |
       The operation-image-watermark Lambda consumes image_watermark
@@ -1385,6 +1675,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsTextWatermark'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-text-watermark
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process text_watermark operation
     description: |
       The operation-text-watermark Lambda consumes text_watermark
@@ -1398,6 +1694,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsMerge'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-merge
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process merge operation
     description: |
       The merge Lambda consumes merge requests routed by
@@ -1413,6 +1715,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsArchive'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-archive
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process archive operation
     description: |
       The archive Lambda consumes archive requests routed by
@@ -1425,6 +1733,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsConvert'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-convert
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process convert operation
     description: |
       The convert Lambda consumes convert requests routed by
@@ -1437,6 +1751,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsCustomLuma'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-custom-luma
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process custom_luma operation
     description: |
       The `operation-custom-luma` Lambda (cross-repo follow-up — not
@@ -1454,6 +1774,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsAudioOverlay'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-audio-overlay
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process audio_overlay operation
     description: |
       The `operation-audio-overlay` Lambda (cross-repo follow-up —
@@ -1472,16 +1798,27 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsSplit'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-split
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process split operation
     description: |
-      The `operation-split` Lambda (cross-repo follow-up — lambdas
-      pre-launch epic Wave A, not yet shipped) consumes split
-      requests routed by `operation_type=split`. Single-input —
+      The `operation-split` Lambda (lambdas pre-launch epic Wave A)
+      consumes split requests routed by `operation_type=split`. Its
+      `audio` + short-form `video` paths are live on staging (lambdas
+      #161 / [`vKI0CFDu`](https://trello.com/c/vKI0CFDu)); the
+      `image_gif` / `document_pdf` workers (and video `long_form` via
+      `split-video-fargate`) remain a cross-repo follow-up. Single-input —
       `media_group` derives from the input MIME prefix per the
-      existing single-input rule. `availability: planned`; the API
-      rejects workflow-create with `feature_not_available` (422)
-      until the Lambda ships, so traffic does not reach this channel
-      today. Long-form video splits route to a separate
+      existing single-input rule. `availability: beta` for the `audio`
+      and `video` (short-form) mime_groups (workers live on staging); the
+      `image_gif` and `document_pdf` mime_groups stay `availability:
+      planned`, and the API rejects their workflow-create with
+      `feature_not_available` (422) until those Lambdas ship.
+      Long-form video splits route to a separate
       `split-video-fargate` worker via `processing_class`.
       Per ADR-0004 + ADR-0014
       ([`vKI0CFDu`](https://trello.com/c/vKI0CFDu)).
@@ -1492,17 +1829,23 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsVideoWatermark'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-video-watermark
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process video_watermark operation
     description: |
       The `operation-video-watermark` Lambda (cross-repo follow-up —
-      lambdas pre-launch epic Wave A, not yet shipped) consumes
+      lambdas pre-launch epic Wave A, live) consumes
       video_watermark requests routed by
       `operation_type=video_watermark`. Multi-input role-based with
       `role: base` video + `role: overlay` image (exactly one of
-      each per `per_role_cardinality`). `availability: planned`; the
-      API rejects workflow-create with `feature_not_available` (422)
-      until the Lambda ships, so traffic does not reach this channel
-      today.
+      each per `per_role_cardinality`). `availability: beta` (Wave A
+      activated, [`c3uthIP4`](https://trello.com/c/c3uthIP4)): the API
+      accepts + publishes (MUST NOT 422), so traffic flows to this
+      channel. `short_form` is beta; `long_form` stays planned.
       Per ADR-0004 + ADR-0013
       ([`4NrRPCgh`](https://trello.com/c/4NrRPCgh)).
     messages:
@@ -1512,6 +1855,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsVideoTextWatermark'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-video-text-watermark
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process video_text_watermark operation
     description: |
       The `operation-video-text-watermark` Lambda (cross-repo
@@ -1531,17 +1880,23 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsAudioToVideo'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-audio-to-video
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process audio_to_video operation
     description: |
       The `operation-audio-to-video` Lambda (cross-repo follow-up —
-      lambdas pre-launch epic Wave A, not yet shipped) consumes
+      lambdas pre-launch epic Wave A, live) consumes
       audio_to_video requests routed by
       `operation_type=audio_to_video`. Multi-input role-based with
       role asymmetry (Path B with `role: base` audio REQUIRED +
       `role: overlay` image OPTIONAL per `per_role_cardinality`).
-      `availability: planned`; the API rejects workflow-create with
-      `feature_not_available` (422) until the Lambda ships, so
-      traffic does not reach this channel today.
+      `availability: beta` (Wave A activated,
+      [`c3uthIP4`](https://trello.com/c/c3uthIP4)): the API accepts +
+      publishes (MUST NOT 422), so traffic flows to this channel.
       Per ADR-0004 + ADR-0015
       ([`SlluxMBN`](https://trello.com/c/SlluxMBN)).
     messages:
@@ -1551,6 +1906,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/opsAudioWatermark'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-audio-watermark
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Process audio_watermark operation
     description: |
       The `operation-audio-watermark` Lambda (cross-repo follow-up —
@@ -1565,6 +1926,29 @@ operations:
     messages:
       - $ref: '#/channels/opsAudioWatermark/messages/operationRequest'
 
+  consumeRenderVariantsOperation:
+    action: receive
+    channel:
+      $ref: '#/channels/opsRenderVariants'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-render-variants
+            fifoQueue: false
+        bindingVersion: '0.2.0'
+    summary: Process render_variants operation
+    description: |
+      The `operation-render-variants` Lambda (cross-repo follow-up —
+      not yet shipped) consumes render_variants requests routed by
+      `operation_type=render_variants`. Single-input image fan-out (one
+      source image to N resized / re-encoded variants). `availability:
+      planned`; the API rejects workflow-create with
+      `feature_not_available` (422) until the Lambda + this subscription
+      ship, so traffic does not reach this channel today. Per ticket
+      w3EwzHYd.
+    messages:
+      - $ref: '#/channels/opsRenderVariants/messages/operationRequest'
+
   # ============================================
   # NOTIFICATION OPERATIONS
   # ============================================
@@ -1572,37 +1956,67 @@ operations:
   publishOperationProgress:
     action: send
     channel:
-      $ref: '#/channels/notificationsOperationsTopic'
+      $ref: '#/channels/notificationsJobsTopic'
+    # Operation-level SNS binding: Microcks reads OPERATION bindings (not
+    # the channel binding) for protocol detection — without it the SEND op
+    # registers under Microcks' Kafka default and SNS conformance can't
+    # bind. The cli@6.0.0-bundled SNS 0.1.0 schema requires a non-empty
+    # consumers[] EVEN on send ops (the "consumers only for receive" rule
+    # is 1.0.0, which cli rejects), so we declare the topic's real consumer
+    # — the API FIFO SQS queue with raw message delivery. bindingVersion
+    # 0.1.0 mirrors the channel pin. Per z7VkTNmN producer pillar.
+    bindings:
+      sns:
+        consumers:
+          - protocol: sqs
+            endpoint:
+              name: gisl-{env}-{region}-notifications-jobs.fifo
+            rawMessageDelivery: true
+        bindingVersion: '0.1.0'
     summary: Publish operation progress update
     description: |
       Lambda publishes progress updates during operation processing.
       These are lightweight messages for real-time status tracking.
     messages:
-      - $ref: '#/channels/notificationsOperationsTopic/messages/operationProgress'
+      - $ref: '#/channels/notificationsJobsTopic/messages/operationProgress'
 
   publishOperationResult:
     action: send
     channel:
-      $ref: '#/channels/notificationsOperationsTopic'
+      $ref: '#/channels/notificationsJobsTopic'
+    bindings:
+      sns:
+        consumers:
+          - protocol: sqs
+            endpoint:
+              name: gisl-{env}-{region}-notifications-jobs.fifo
+            rawMessageDelivery: true
+        bindingVersion: '0.1.0'
     summary: Publish operation result
     description: |
       Lambda publishes the final result when operation completes or fails.
       This is a terminal message with full details.
     messages:
-      - $ref: '#/channels/notificationsOperationsTopic/messages/operationResult'
+      - $ref: '#/channels/notificationsJobsTopic/messages/operationResult'
 
   consumeOperationNotifications:
     action: receive
     channel:
-      $ref: '#/channels/notificationsOperationsQueue'
+      $ref: '#/channels/notificationsJobsQueue'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-notifications-jobs.fifo
+            fifoQueue: true
+        bindingVersion: '0.2.0'
     summary: Consume operation notifications
     description: |
       API worker consumes both progress and result notifications from SQS.
       - OperationProgress: Update Redis cache for real-time status (forwarded to frontend via SSE)
       - OperationResult: Update database Operation entity, derive Job/Workflow status
     messages:
-      - $ref: '#/channels/notificationsOperationsQueue/messages/operationProgress'
-      - $ref: '#/channels/notificationsOperationsQueue/messages/operationResult'
+      - $ref: '#/channels/notificationsJobsQueue/messages/operationProgress'
+      - $ref: '#/channels/notificationsJobsQueue/messages/operationResult'
 
   # ============================================
   # UPLOAD-PROBE OPERATIONS (per ticket vBlEurU7)
@@ -1631,6 +2045,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/uploadProbeQueue'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-upload-probe
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Consume an upload-probe request (async branch)
     description: |
       The upload-probe Lambda consumes from the SQS queue subscribed
@@ -1648,6 +2068,12 @@ operations:
     action: send
     channel:
       $ref: '#/channels/uploadProbeCompletionsQueue'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-upload-probe-completions
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Publish an upload-probe completion (async branch)
     description: |
       The upload-probe Lambda publishes the result of the async
@@ -1669,6 +2095,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/uploadProbeCompletionsQueue'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-upload-probe-completions
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Consume an upload-probe completion (async branch)
     description: |
       The API consumer worker reads completions from this queue and
@@ -1687,6 +2119,12 @@ operations:
     action: send
     channel:
       $ref: '#/channels/longformCompressVideo'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-compress-video-longform
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Publish a long-form video compression claim-check.
     description: |
       The API (`SqsLongFormOperationPublisherAdapter`) writes the full job
@@ -1700,6 +2138,12 @@ operations:
     action: send
     channel:
       $ref: '#/channels/longformMergeVideoReencode'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-merge-video-longform-reencode
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Publish a long-form merge re-encode claim-check.
     description: |
       As `publishLongFormCompressVideo`, for `operation_type = merge`
@@ -1715,6 +2159,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/longformCompressVideo'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-compress-video-longform
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Consume a long-form video compression claim-check.
     description: |
       A terraform-owned launcher (EventBridge Pipe, filter=none -> launcher
@@ -1729,6 +2179,12 @@ operations:
     action: receive
     channel:
       $ref: '#/channels/longformMergeVideoReencode'
+    bindings:
+      sqs:
+        queues:
+          - name: gisl-{env}-{region}-ops-merge-video-longform-reencode
+            fifoQueue: false
+        bindingVersion: '0.2.0'
     summary: Consume a long-form merge re-encode claim-check.
     description: |
       As `consumeLongFormCompressVideo`, for `operation_type = merge`
@@ -1820,7 +2276,7 @@ components:
         **non-compression** operation (thumbnail, image_watermark,
         text_watermark, merge, archive, convert, custom_luma,
         audio_overlay, audio_watermark, audio_to_video,
-        video_watermark, video_text_watermark). Published to the
+        video_watermark, video_text_watermark, split). Published to the
         `operations` SNS topic; routed by the single-attribute
         filter `operation_type` to one of the ops-family queues.
 
@@ -1830,8 +2286,8 @@ components:
           `thumbnail_office`, `image_watermark`, `text_watermark`,
           `merge`, `archive`, `convert`, `custom_luma`,
           `audio_overlay`, `audio_watermark`, `audio_to_video`,
-          `video_watermark`, `video_text_watermark`. Used by SNS as
-          the filter attribute on the `operations` topic.
+          `video_watermark`, `video_text_watermark`, `split`. Used by
+          SNS as the filter attribute on the `operations` topic.
         - `media_group`: informational metadata, present for every
           operation except `archive` (which is media-agnostic). Values:
           `image`, `video`, `audio`, `document`. **Not** used by SNS as
@@ -1840,7 +2296,8 @@ components:
 
         **Input models:**
         - Single-input operations (thumbnail, text_watermark, convert,
-          audio_watermark): use `source_bucket` + `source_key`.
+          audio_watermark, video_text_watermark, split): use
+          `source_bucket` + `source_key`.
           `file_type` required. For `thumbnail`, the SNS
           `operation_type` attribute is permitted to carry a per-media
           sub-type value for routing (see `OperationRequestAttributes`
@@ -1850,23 +2307,29 @@ components:
           `required_tier: enterprise` so workflow-create rejects with
           422 + 403 today.
         - Multi-input operations (merge, archive, image_watermark,
-          custom_luma, audio_overlay, audio_to_video): use `sources`
-          array. Merge additionally requires `output_type`.
-          image_watermark, custom_luma, audio_overlay, and
-          audio_to_video use `role` per `JobInputV2.role`.
+          custom_luma, audio_overlay, audio_to_video, video_watermark):
+          use `sources` array. Merge additionally requires `output_type`.
+          image_watermark, custom_luma, audio_overlay, audio_to_video,
+          and video_watermark use `role` per `JobInputV2.role`.
           audio_to_video has role asymmetry — REQUIRED `base` (audio)
           + OPTIONAL `overlay` (image 0..1) per
           `per_role_cardinality`; sum-of-role-minima drives the
           minimum `sources` count (1 for audio_to_video; 2 for all
-          other role-based ops today). custom_luma, audio_overlay,
-          and audio_to_video are `availability: planned` so
-          workflow-create rejects with 422 today.
+          other role-based ops today). custom_luma and audio_overlay
+          are `availability: planned` so workflow-create rejects with
+          422 today (audio_to_video and video_watermark are now `beta` —
+          Wave A activated).
 
         **Migration window note.** During the thumbnail sub-type
         migration, both `operation_type=thumbnail` (legacy) and
         `operation_type=thumbnail_{image,video,document,office}` (new)
-        are valid routing targets. The API publisher currently emits
-        the legacy value only; sub-type adoption is a follow-up API PR.
+        are valid routing targets. The API publisher emits the per-media
+        sub-type value on the SNS `operation_type` attribute (resolved
+        from the operation's effective input MIME); the payload
+        `operation_type` field always remains `thumbnail`. The legacy
+        bare `thumbnail` attribute value is retained as a valid routing
+        target during the migration window but is no longer emitted by
+        the publisher.
       contentType: application/json
       headers:
         $ref: '#/components/schemas/OperationRequestAttributes'
@@ -2623,9 +3086,10 @@ components:
           prefix per ADR-0015 — the operation is multi-input
           role-based with role asymmetry: required audio base +
           optional image overlay; routing follows the `base` role).
-          The operation is `availability: planned` per
-          [`SlluxMBN`](https://trello.com/c/SlluxMBN), so this
-          constraint is contract-defined but not exercised today.
+          The operation is `availability: beta` per
+          [`SlluxMBN`](https://trello.com/c/SlluxMBN) +
+          [`c3uthIP4`](https://trello.com/c/c3uthIP4) (Wave A activated),
+          so this constraint is exercised on live traffic.
         - For `operation_type = image_watermark`, `media_group` must
           equal `image` while only the stable `image` mime_group is
           dispatchable. The schema declares `image_gif` and `video`
@@ -2651,6 +3115,13 @@ components:
             Operation type used as the SNS filter attribute on the
             `operations` topic. The sole routing key for non-compression
             traffic.
+
+            **`passthrough` is deliberately excluded** from this enum: a
+            `passthrough` operation never goes on the wire. The API
+            self-completes a passthrough source job at publish (terminal
+            output = the upload bytes unchanged), so nothing is published
+            to SNS and there is no `ops-passthrough` queue. Per ticket
+            `4som89Uh`.
           enum:
             - thumbnail
             - thumbnail_image
@@ -2669,6 +3140,7 @@ components:
             - video_watermark
             - video_text_watermark
             - split
+            - render_variants
         media_group:
           type: string
           description: |
@@ -2803,17 +3275,18 @@ components:
         API to SNS, consumed by Lambda from SQS.
 
         **Single-input operations** (compress, thumbnail, text_watermark,
-        convert): use `source_bucket` + `source_key` for the input file.
-        `file_type` is required.
+        convert, audio_watermark, video_text_watermark, split): use
+        `source_bucket` + `source_key` for the input file. `file_type` is
+        required.
 
         **Multi-input operations** (merge, archive, image_watermark,
-        custom_luma, audio_overlay, audio_to_video): use `sources`
-        array. Each entry has `bucket` + `key`. Merge entries may
-        include per-input overrides (e.g. transition type). Merge
-        also requires `output_type`. custom_luma, audio_overlay, and
-        audio_to_video are
-        `availability: planned` so workflow-create rejects with 422
-        today; the wire shape is contract-defined.
+        custom_luma, audio_overlay, audio_to_video, video_watermark):
+        use `sources` array. Each entry has `bucket` + `key`. Merge
+        entries may include per-input overrides (e.g. transition type).
+        Merge also requires `output_type`. custom_luma and audio_overlay
+        are `availability: planned` so workflow-create rejects with 422
+        today (audio_to_video + video_watermark are now `beta` — Wave A
+        activated, backends live); the wire shape is contract-defined.
 
         Note: `media_group` is **not** a field in this payload. It exists
         only as an SNS MessageAttribute on the non-compression branch; on
@@ -2825,6 +3298,11 @@ components:
         - operation_type
         - output_bucket
         - output_key_prefix
+      # No `passthrough` branch below: a passthrough source job is
+      # self-completed by the API at publish (output = upload bytes
+      # unchanged) and is never published as an OperationRequest message,
+      # so it has no single-input/multi-input required-field branch here.
+      # Per ticket 4som89Uh.
       allOf:
         - if:
             properties:
@@ -2837,6 +3315,7 @@ components:
                   - audio_watermark
                   - video_text_watermark
                   - split
+                  - render_variants
           then:
             required:
               - file_type
@@ -2911,12 +3390,13 @@ components:
           description: |
             Input files for multi-input operations (merge, archive,
             image_watermark, custom_luma, audio_overlay,
-            audio_to_video). Each entry specifies an S3 location.
-            Order matters for merge (concatenation order). Per-input
-            overrides (e.g. transition) can be inlined on each entry.
-            Role-based multi-input operations (image_watermark,
-            custom_luma, audio_overlay, audio_to_video) require a
-            `role` discriminator on each entry — see `SourceEntry.role`.
+            audio_to_video, video_watermark). Each entry specifies an
+            S3 location. Order matters for merge (concatenation order).
+            Per-input overrides (e.g. transition) can be inlined on each
+            entry. Role-based multi-input operations (image_watermark,
+            custom_luma, audio_overlay, audio_to_video, video_watermark)
+            require a `role` discriminator on each entry — see
+            `SourceEntry.role`.
 
             **Minimum source count = sum of role minima** declared in
             the operation's `per_role_cardinality` (per ticket
@@ -3036,30 +3516,16 @@ components:
           description: Unique operation identifier (UUID v7).
           example: "018f9c42-5d6b-7481-b3df-9fd0a0a5e200"
         operation_type:
-          type: string
-          enum:
-            - compress
-            - merge
-          description: |
-            Coarse operation verb for the long-form job. Deliberately a
-            call-site subset of `OperationType` — only the long-form classes
-            the API actually publishes today (`compress`, `merge`). NOT the
-            full `OperationType` enum (which would over-promise the wire).
+          $ref: '#/components/schemas/LongFormOperationType'
         processing_class:
-          type: string
-          const: long_form
-          description: |
-            Logical processing class — always the literal `long_form` on this
-            wire (never `short_form` / `blocked`; those exist only on the
-            upload-probe response and HTTP plan surfaces). The launcher forks
-            on this field; do not confuse it with the backend worker identity,
-            which stays off the wire per `schemas/FORMAT.md` §F8.
+          $ref: '#/components/schemas/LongFormProcessingClass'
 
     SourceEntry:
       type: object
       description: |
         A single source file for multi-input operations (merge,
-        archive, image_watermark, custom_luma, audio_overlay).
+        archive, image_watermark, custom_luma, audio_overlay,
+        audio_to_video, video_watermark).
         Provides the S3 location, optional per-input overrides, and
         the `role` discriminator for role-based multi-input
         operations.
@@ -3082,9 +3548,79 @@ components:
         transition:
           type: string
           description: |
-            Per-input transition override for video merge.
-            Overrides the global transition option for the join point before this input.
+            Per-input transition override for the join point before this
+            input. Applies to both video and audio merge — see the
+            per-media per-input transition catalogs in
+            `schemas/operations/merge.yaml`
+            (`merge.video.per_input_options` / `merge.audio.per_input_options`),
+            which the API validates against. Overrides the global
+            `options.transition` for this join point.
           example: "none"
+        crossfade_duration:
+          type: number
+          minimum: 0
+          maximum: 10.0
+          description: |
+            Per-input crossfade duration override, in seconds, for the
+            join point before this input. Overrides the global
+            `options.crossfade_duration` for this join point. Per the
+            `depends_on` on `merge.*.per_input_options.crossfade_duration`
+            (which resolves against the sibling per-input option, see
+            FORMAT.md), this takes effect only when this input's own
+            `transition` override is `crossfade` — pair it with
+            `transition: crossfade` on the same entry; it does NOT key off
+            the global `options.transition`. Mirrors
+            `merge.*.per_input_options.crossfade_duration` in
+            `schemas/operations/merge.yaml` — the API validates this
+            per-input value but, until this slot existed, dropped it at the
+            wire boundary (the slot lets the merge Lambda's audio path
+            honour it). The 0–10s bound here is a broad transport envelope;
+            the effective per-media limits (video crossfade `0.1`–`5.0`,
+            audio `0`–`10`) are enforced by the per-mime-group
+            operation-options schema in `merge.yaml`, which the API
+            validates against before publishing.
+          example: 1.0
+        gap_duration:
+          type: number
+          minimum: 0
+          maximum: 10.0
+          description: |
+            Per-input silence/gap duration override, in seconds, inserted
+            before this input at the join point. Overrides the global
+            `options.gap_duration` for this join point. Mirrors
+            `merge.audio.per_input_options.gap_duration` in
+            `schemas/operations/merge.yaml` (no transition dependency) —
+            added alongside `crossfade_duration` so the API does not
+            silently drop this sibling per-input audio override at the wire
+            boundary.
+          example: 0.5
+        trim_start:
+          type: number
+          minimum: 0
+          description: |
+            Per-input trim from the beginning, in seconds, applied to
+            this input BEFORE the transition/crossfade step. Mirrors
+            `merge.{video,audio}.per_input_options.trim_start` in
+            `schemas/operations/merge.yaml`; same "trim from beginning"
+            semantic as `compress` trim. No `maximum` — the upper bound
+            is the input's own duration, enforced by the worker, not
+            statically bounded at the wire. Wire slot added so the API
+            does not drop this per-input override at the boundary
+            (mirrors the crossfade_duration/gap_duration precedent).
+          example: 1.5
+        trim_end:
+          type: number
+          minimum: 0
+          description: |
+            Per-input trim from the end, in seconds, applied to this
+            input BEFORE the transition/crossfade step. Mirrors
+            `merge.{video,audio}.per_input_options.trim_end` in
+            `schemas/operations/merge.yaml`; same "trim from end"
+            semantic as `compress` trim. No `maximum` — bounded by the
+            input's own duration at the worker, not statically. Wire
+            slot added so the API does not drop this per-input override
+            at the boundary.
+          example: 2.0
 
     # ============================================
     # OPERATION PROGRESS SCHEMA
@@ -3151,8 +3687,9 @@ components:
             `phase_input_index`. For single-input operations (most
             ops) `phase_total_inputs: 1` and `phase_input_index: 1`
             during the relevant phase. For multi-input merge,
-            archive, image_watermark, custom_luma, and audio_overlay,
-            this matches the inputs[] count. Per ticket I27.
+            archive, image_watermark, custom_luma, audio_overlay,
+            audio_to_video, and video_watermark, this matches the
+            inputs[] count. Per ticket I27.
           example: 4
 
     # ============================================
@@ -3329,6 +3866,8 @@ components:
 
         metrics:
           $ref: '#/components/schemas/OperationMetrics'
+        result_metadata:
+          $ref: '#/components/schemas/OperationResultMetadata'
 
         # Failure fields
         error_code:
@@ -3348,6 +3887,32 @@ components:
           description: Progress percentage when the operation failed (failed only)
           example: 10
 
+    OperationResultMetadata:
+      type: object
+      additionalProperties: false
+      description: |
+        Whitelisted, named operation-level result metadata — a **CLOSED**
+        set of declared keys carried on the wire result (Lambda → API). The
+        API persists only declared keys and serves only declared keys (a
+        whitelist projection on the read side), never the raw bag, so
+        internal diagnostics never leak. New keys are **additive named
+        cuts**. Twin of the OpenAPI `OperationResultMetadata` (wire ↔ read
+        parity — same named-prop shape). Distinct from the deliverable
+        output (`output_key` / `outputs[]`): small per-operation metadata,
+        not the file. Per ticket EurbZLMH (B1).
+      properties:
+        watermark_id:
+          type: string
+          format: uuid
+          description: |
+            UUIDv7 of the watermark embedded by an `audio_watermark`
+            operation (for later decode/verify). **Display-only / not yet
+            populated** — gated on the audio_watermark Lambda (EvPl5fkH, B3)
+            + the watermark registry (B2, deferred). The field + whitelist
+            ship now (additive) so the pipeline + read projection land
+            without a later contract bump; absent until B3 is live.
+          example: "018f9c42-5d6b-7481-b3df-9fd0a0a5e112"
+
     OperationResultOutputEntry:
       type: object
       description: |
@@ -3373,9 +3938,11 @@ components:
           not: { required: [page_index] }
         - title: Unindexed
           description: |
-            Output without an explicit indexing field. Reserved for future
-            operations that index by something other than page/position.
-            Schema-valid but not currently emitted by any operation.
+            Output without a page/position indexing field. Covers legacy
+            single-output entries AND `render_variants` variant outputs (the
+            latter carry the optional `target_id` correlation field — the
+            image-fan-out addressing contract — but are not page/position
+            indexed). Per ADR-0009 §D2.
           not:
             anyOf:
               - required: [page_index]
@@ -3412,6 +3979,18 @@ components:
             strip, chapter split). Mutually exclusive with `page_index`.
             Per ADR-0009 §D2.
           example: 0
+        target_id:
+          type: string
+          pattern: '^[A-Za-z0-9._-]+$'
+          maxLength: 64
+          description: |
+            The caller-assigned `id` of the `render_variants` target that
+            produced this output, echoed verbatim — the addressing contract
+            for image fan-out. Carried on the `Unindexed` branch (variant
+            outputs are not page/position indexed); no operation emits
+            `target_id` together with `page_index` / `position`. Per ticket
+            `w3EwzHYd`.
+          example: "thumb-2x"
 
     # ============================================
     # WORKFLOW STATE CHANGED (per ticket I24)
@@ -4033,10 +4612,10 @@ components:
           the first OPTIONAL role on the contract — `role: base`
           audio required, `role: overlay` image 0..1 per
           `per_role_cardinality`). When overlay is omitted, the video
-          uses a solid background colour. `availability: planned` per
-          the operation schema; the API rejects workflow-create with
-          `feature_not_available` (422) until the Lambda ships, so
-          traffic does not reach SNS today. `media_group` is derived
+          uses a solid background colour. `availability: beta` (Wave A,
+          [`c3uthIP4`](https://trello.com/c/c3uthIP4)) — the Lambda
+          backend is live, so the API accepts + publishes (MUST NOT 422);
+          traffic flows to SNS. `media_group` is derived
           from the `base` role input MIME prefix per ADR-0015 (always
           `audio` for audio_to_video). Routes via
           `operation_type=audio_to_video` to `ops-audio-to-video`.
@@ -4047,7 +4626,9 @@ components:
           of each per `per_role_cardinality { base: 1/1, overlay:
           1/1 }`). Re-encode required; audio stream-copy passthrough.
           Distinct from `image_watermark` (pure-Rust/image-only —
-          see ADR-0013). `availability: planned`; routes via
+          see ADR-0013). `availability: beta` (Wave A, `c3uthIP4` —
+          Lambda backend live; `short_form` beta, `long_form` stays
+          `planned`); routes via
           `operation_type=video_watermark` to `ops-video-watermark`.
           Per ADR-0004 + ADR-0013
           ([`4NrRPCgh`](https://trello.com/c/4NrRPCgh)).
@@ -4069,10 +4650,20 @@ components:
           a separate `split-video-fargate` worker via
           `processing_class`. `media_group` derives from the input
           MIME prefix per the existing single-input rule (no
-          operation-specific conditional needed). `availability:
-          planned`; routes via `operation_type=split` to `ops-split`.
+          operation-specific conditional needed). `availability: beta`
+          for the `audio` and `video` (short-form) mime_groups
+          (`image_gif` / `document_pdf` and video `long_form` stay
+          `planned`); routes via `operation_type=split`
+          to `ops-split`.
           Per ADR-0004 + ADR-0014
           ([`vKI0CFDu`](https://trello.com/c/vKI0CFDu)).
+
+        Note: the `passthrough` OpenAPI operation is **deliberately
+        absent** from this payload enum. A passthrough source job is
+        self-completed by the API at publish (its output is the upload
+        bytes unchanged) and is never dispatched as an
+        `OperationRequest` message — so it carries no wire payload and
+        needs no SNS routing value. Per ticket `4som89Uh`.
       enum:
         - compress
         - thumbnail
@@ -4088,6 +4679,7 @@ components:
         - video_watermark
         - video_text_watermark
         - split
+        - render_variants
 
     MediaGroup:
       type: string
@@ -4208,6 +4800,47 @@ components:
         - stream_copy
         - re_encode
 
+    LongFormOperationType:
+      type: string
+      description: |
+        Coarse operation verb for the long-form claim-check job
+        (`LongFormJobMessage.operation_type`). Deliberately a call-site
+        **subset** of `OperationType` — only the long-form classes the API
+        actually publishes today (`compress`, `merge`). NOT the full
+        `OperationType` enum (which would over-promise the wire). Future
+        long-form publishers (e.g. `split` per
+        [`rcwvUKhI`](https://trello.com/c/rcwvUKhI)) widen this enum when
+        they ship.
+
+        Named-schema form lifted from inline at
+        `LongFormJobMessage.operation_type` per ticket
+        [`A3DyuYUd`](https://trello.com/c/A3DyuYUd) — generated SDK bindings
+        emit a stable typed name instead of an `AnonymousSchema_N`
+        placeholder.
+      enum:
+        - compress
+        - merge
+
+    LongFormProcessingClass:
+      type: string
+      description: |
+        Logical processing class on the long-form claim-check wire
+        (`LongFormJobMessage.processing_class`) — always the literal
+        `long_form` (never `short_form` / `blocked`; those exist only on the
+        upload-probe response and HTTP plan surfaces). The launcher forks on
+        this field; do not confuse it with the backend worker identity, which
+        stays off the wire per `schemas/FORMAT.md` §F8.
+
+        A single-value enum (not a JSON-Schema `const`): named + `enum` is the
+        repo's proven typed-codegen form (mirrors `JobInputRole` /
+        `ReEncodeDecision`), whereas `const` degraded to an unconstrained
+        `String` in SDK generators. Lifted from inline at
+        `LongFormJobMessage.processing_class` per ticket
+        [`A3DyuYUd`](https://trello.com/c/A3DyuYUd). Single-member enum
+        validates identically to the prior `const long_form`.
+      enum:
+        - long_form
+
     ProgressStatus:
       type: string
       description: |