@kungfu-tech/buildchain 3.0.9-alpha.8 → 4.0.0-alpha.0

package/architecture/v4-release-activation-shadow-domain.json

@@ -0,0 +1,61 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-release-activation-production-architecture",
+  "schemaAuthority": "contracts/v4-release-activation-shadow-v1.schema.json",
+  "fixtureAuthority": "contracts/fixtures/v4-release-activation-shadow-v1/shared.json",
+  "journalAuthority": "architecture/v4-provider-operation-journal-contract.json",
+  "mode": "production",
+  "authority": {
+    "productionWriter": "v4-domain",
+    "productionWriterCount": 1,
+    "planAndFoldAuthority": "rust-v4-core",
+    "planAndFoldWriterCount": 1,
+    "typescript": "byte-equivalent-provider-adapter",
+    "productionWriteChange": true
+  },
+  "implementations": {
+    "rustDomain": "crates/buildchain-v4-contracts/src/release_activation_shadow.rs",
+    "rustModel": "crates/buildchain-v4-contracts/src/release_activation_shadow/model.rs",
+    "rustJournalMaterializer": "crates/buildchain-v4-contracts/src/release_activation_shadow/journal.rs",
+    "typescript": "packages/core/v4-release-activation-shadow.js"
+  },
+  "roots": [
+    "release-activation-step",
+    "release-activation-plan",
+    "release-activation-state"
+  ],
+  "resumePolicy": {
+    "confirmed": "never-replay",
+    "attempting": "readback-before-any-retry",
+    "observed": "readback-before-any-retry",
+    "confirmable": "readback-before-any-retry",
+    "planned": "eligible-only-after-confirmed-dependencies",
+    "retryable": "eligible-only-after-confirmed-dependencies",
+    "rejected": "block-plan",
+    "terminal": "block-plan"
+  },
+  "foldRejects": [
+    "missing-qualification",
+    "dependency-cycle",
+    "unknown-or-self-dependency",
+    "logical-operation-conflict",
+    "coordinate-or-authority-mismatch",
+    "conflicting-event-ordinal",
+    "event-ordinal-gap",
+    "provider-journal-impossible-transition"
+  ],
+  "budgets": {
+    "schemaAuthorities": 1,
+    "planAndFoldWriters": 1,
+    "secondStateFoldWriters": 0,
+    "providerSdkImportsInContracts": 0,
+    "providerSdkImportsInRustDomain": 0,
+    "liveProviderMutations": 0,
+    "productionWriteAuthorityChanges": 1,
+    "v3ConsumerBehaviorChanges": 0
+  },
+  "successors": [
+    "stable-candidate-publication-fencing-shadow",
+    "partial-mutation-recovery-qualification"
+  ]
+}

package/architecture/v4-release-train-parity.json

@@ -0,0 +1,68 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-release-train-parity",
+  "sourceAuthority": {
+    "branch": "dev/v3/v3.0",
+    "familyStateRoot": "sha256:212c90214e34f41de5720452c048f342ecfd04f31e732491b51069ae52ff61f9",
+    "portableSealRoot": "sha256:dbdaa70e23bd853d865ff0c90aefa6f74bb8e043feab4faac1d486381e116261",
+    "commits": [
+      "71bf3f64f4766a339592ca35463800be19fdec2d",
+      "81455e922eb50ebbb88ac6c1fb6c051047ba36ad",
+      "ce1ca498f01c702bc70d6ac5a7788ed0c1da2ab4",
+      "590eaf9de7d9db6df341c435d42dfb616bd70bc1"
+    ]
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "capturedBase": "7149037df66555c083cf51ee5055301917026047",
+    "implementation": "exact-shared-javascript-semantics"
+  },
+  "normativeVectors": [
+    {
+      "path": "tests/release-train.test.mjs",
+      "count": 11,
+      "result": "exact"
+    },
+    {
+      "path": "tests/dev-alpha-candidate-patrol.test.mjs",
+      "count": 37,
+      "result": "exact"
+    },
+    {
+      "path": "tests/release-blocker-priority.test.mjs",
+      "count": 3,
+      "result": "exact"
+    },
+    {
+      "path": "tests/release-train-self-dogfood.test.mjs",
+      "count": 5,
+      "result": "exact"
+    }
+  ],
+  "adapterDifferences": [
+    {
+      "surface": "branch-coordinates",
+      "source": "dev/v3/v3.0 -> alpha/v3/v3.0",
+      "target": "dev/v4/v4.0 -> alpha/v4/v4.0",
+      "semanticImpact": "none"
+    },
+    {
+      "surface": "candidate-patrol-runtime-ref",
+      "source": "v3-alpha",
+      "target": "v4-alpha",
+      "semanticImpact": "none"
+    },
+    {
+      "surface": "architecture-projection",
+      "source": "architecture/v3-core-mechanism-inventory.json",
+      "target": "architecture/v4-release-train-parity.json",
+      "semanticImpact": "evidence-only"
+    }
+  ],
+  "forbidden": [
+    "v4-first-redesign",
+    "production-authority-cutover",
+    "alpha2-migration",
+    "provider-gate-bypass"
+  ]
+}

package/architecture/v4-rust-libnode-bridge-evaluation.json

@@ -0,0 +1,107 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-rust-libnode-bridge-evaluation",
+  "observedAt": "2026-08-07T05:50:58.385Z",
+  "baseline": {
+    "buildchainRevision": "95e7c1060cae94a38b72c5ac3d7b79cce0ad662b",
+    "libnodeRepository": "kungfu-systems/libnode",
+    "libnodeRevision": "4bef69b88a441f22024fa9f3d7bfd76a89963e8a"
+  },
+  "selection": {
+    "id": "rust-trunk-node-subprocess-host-v1",
+    "status": "selected-for-wave-0",
+    "replaceable": true,
+    "productionWriterAuthority": "typescript-v3",
+    "contract": "contracts/v4-host-contract-v1.schema.json"
+  },
+  "contractBoundary": {
+    "protocolVersion": "1.0",
+    "requestFields": [
+      "command identity",
+      "arguments",
+      "canonical base64 input bytes",
+      "required capabilities",
+      "timeout"
+    ],
+    "responseFields": [
+      "structured result",
+      "byte-exact stdout and stderr",
+      "diagnostics",
+      "exit code and signal",
+      "host capabilities"
+    ],
+    "explicitUnsupportedStatus": "unsupported",
+    "credentialSerialization": "forbidden-by-closed-request",
+    "privateRuntimeLayouts": "absent"
+  },
+  "options": [
+    {
+      "id": "rust-process-direct-libnode-cxx-api",
+      "status": "rejected-for-wave-0",
+      "prototypeDisposition": "source-grounded-infeasibility",
+      "build": "requires a new C++ shim and platform-specific Node/V8 link graph",
+      "runtime": "one process but one Node isolate and event-loop lifecycle inside the Rust host",
+      "packaging": "must ship a 110302336-byte observed dylib plus a Rust/C++ ABI-matched shim on darwin-arm64",
+      "lifecycle": "must bind InitializeOncePerProcess, CommonEnvironmentSetup, SpinEventLoop, Stop, and teardown",
+      "failure": "C++ exceptions, fatal V8 failures, and process-global initialization share the Rust failure domain",
+      "cancellation": "requires cross-thread node::Stop and isolate lifecycle ownership",
+      "portability": "separate linker and loader work is required for dylib, so, and dll targets",
+      "falsifiableReconsideration": "reconsider when libnode publishes a versioned C ABI shim that owns initialization, cancellation, teardown, and byte-oriented request-response semantics",
+      "evidence": [
+        "kungfu-systems/libnode@4bef69b88a441f22024fa9f3d7bfd76a89963e8a:README.md exposes only libpath and include compiler coordinates",
+        "kungfu-systems/libnode@4bef69b88a441f22024fa9f3d7bfd76a89963e8a:src/cpp/link.cc exports an empty N-API module, not an embedder C ABI",
+        "kungfu-systems/libnode@4bef69b88a441f22024fa9f3d7bfd76a89963e8a:node/src/node.h exposes the C++ embedding lifecycle"
+      ]
+    },
+    {
+      "id": "rust-trunk-node-subprocess-host-v1",
+      "status": "selected-for-wave-0",
+      "prototypeDisposition": "implemented-and-tested",
+      "build": "one bounded Rust binary plus an existing Node-compatible MJS host",
+      "runtime": "one child per request; no daemon, shared database, or second authority",
+      "packaging": "Rust source, lockfile, contract, and MJS host are included in the npm dry-run package",
+      "lifecycle": "Rust owns spawn, bounded input-output, timeout, termination, and reap",
+      "failure": "invalid response, host crash, controlled command failure, and unsupported capability are distinct",
+      "cancellation": "timeout and SIGINT terminate and reap the host before returning a structured cancellation",
+      "portability": "uses std::process plus the repository Node runtime; darwin-arm64 is executed and Linux/Windows remain bounded validation targets",
+      "replacementMechanism": "BUILDCHAIN_V4_HOST_COMMAND and BUILDCHAIN_V4_HOST_SCRIPT replace the host without changing the Rust domain contract",
+      "evidence": [
+        "tests/v4-bridge.test.mjs",
+        "crates/buildchain-v4-bridge/src/main.rs",
+        "scripts/v4-host-adapter.mjs"
+      ]
+    }
+  ],
+  "retainedFixtures": [
+    "architecture.list read-only JSON command",
+    "architecture.show structured JSON command",
+    "controlled failure with partial stdout, stderr, and exit 42",
+    "512 KiB canonical byte echo",
+    "unsupported capability",
+    "host crash before response",
+    "timeout cancellation",
+    "SIGINT cancellation and reap",
+    "credential field rejection"
+  ],
+  "observedMeasurements": {
+    "environment": {
+      "platform": "darwin",
+      "architecture": "arm64",
+      "node": "v24.16.0",
+      "rustc": "rustc 1.95.0 (59807616e 2026-04-14) (Homebrew)"
+    },
+    "iterations": 7,
+    "directNodeHostColdStartMedianMs": 39.215,
+    "rustSubprocessBridgeColdStartMedianMs": 58.608,
+    "rustSubprocessBridgeColdStartRangeMs": [49.582, 523.831],
+    "rustReleaseBinaryBytes": 768544,
+    "observedLibnodeArtifactBytes": 110302336,
+    "interpretation": "The subprocess boundary adds about 19.4 ms at the median in this bounded local probe; the seven-sample maximum shows cold-start variance and is not a final ABI benchmark."
+  },
+  "nonClaims": [
+    "No production state-machine writer moved from TypeScript v3.",
+    "No daemon, service database, credential broker, or second process authority was introduced.",
+    "The selected Wave 0 host is replaceable and is not the final v4 ABI.",
+    "Linux and Windows runtime parity is not claimed by the darwin-arm64 measurement."
+  ]
+}

package/architecture/v4-rust-libnode-bridge-spike.md

@@ -0,0 +1,85 @@
+---
+status: draft
+period: 2026-08-07
+theme: buildchain-v4-rust-libnode-bridge
+doc_type: architecture-evaluation
+source_level: local-files + protected-git-evidence
+confidence: high
+sensitivity: public
+evidence_grade: A
+review_state: unreviewed
+last_reviewed: 2026-08-07
+ai_provenance:
+  model_family: GPT-5
+  product: Codex
+  generated_at: 2026-08-07
+  boundary: Uses repository source, executable fixtures, and a local darwin-arm64 measurement; it does not claim unexecuted platform parity or a final v4 ABI.
+---
+
+# Buildchain v4 Rust/libnode bridge spike
+
+## Decision
+
+Wave 0 selects a Rust-trunk to Node-compatible subprocess host behind the
+closed, versioned
+[`v4-host-contract-v1.schema.json`](../contracts/v4-host-contract-v1.schema.json).
+The Rust trunk owns transport bounds, correlation, timeout, cancellation,
+child cleanup, crash classification, and compatibility output. The MJS adapter
+continues to call the existing read-only TypeScript implementation. All
+production writers remain TypeScript v3.
+
+The host is replaceable through explicit executable and adapter coordinates;
+the Rust code does not import libnode, Node, V8, provider SDK, or private
+runtime types. The exact option matrix, retained fixtures, source revisions,
+and captured measurements are machine-readable in
+[`v4-rust-libnode-bridge-evaluation.json`](v4-rust-libnode-bridge-evaluation.json).
+
+## Contract
+
+Requests carry only a command identity, string arguments, canonical base64
+input bytes, required capabilities, a timeout, and a correlation id. Responses
+carry a structured result, byte-exact stdout and stderr, typed diagnostics,
+exit code and signal semantics, and the capabilities actually offered by the
+host. Both documents are closed objects. Credential fields and private runtime
+layouts therefore fail before host execution.
+
+Unsupported commands, capabilities, and protocol versions are explicit rather
+than silently downgraded. `compat` mode unwraps the response and reproduces the
+legacy process stdout, stderr, and exit code; `exchange` mode returns the full
+structured response.
+
+## Compared boundaries
+
+| Boundary | Wave 0 result | Evidence |
+| --- | --- | --- |
+| Rust process directly embeds libnode's C++ API | Rejected for Wave 0 | The exact libnode source exposes compiler `libpath`/`include` coordinates and Node's C++ embedding lifecycle, but no versioned C ABI that owns initialization, event-loop execution, cancellation, and teardown. A new shim would bind Rust to Node/V8 ABI and failure-domain details. |
+| Rust process spawns a Node-compatible contract host | Selected | Implemented with bounded pipes and a closed protocol; the retained suite proves CLI/JSON parity, structured results, controlled failure, large input, unsupported behavior, timeout, signal cancellation, cleanup, and host crash classification. |
+
+The in-process result is falsifiable: reconsider it when libnode publishes a
+versioned C ABI shim that owns the complete lifecycle and accepts and returns
+only the frozen byte-oriented host contract. A benchmark alone is insufficient
+because it would not remove the ABI, teardown, crash-domain, and portability
+risks.
+
+## Reproduce
+
+```bash
+pnpm bridge:v4:build
+pnpm bridge:v4:run -- architecture.list -- --json
+pnpm run bridge:v4:evidence -- --iterations 7
+pnpm run check:v4-bridge
+node --test tests/v4-bridge.test.mjs
+```
+
+Set `BUILDCHAIN_LIBNODE_ROOT` only when collecting optional local libnode
+revision and artifact-size evidence. Its path is never written into the
+contract or committed evaluation.
+
+## Limits
+
+The darwin-arm64 probe observed a roughly 19.4 ms median increment over direct
+Node host startup and a 768,544-byte release Rust binary. These seven samples
+are a boundary cost observation, not a final performance or ABI decision.
+Linux and Windows remain required validation targets before any consumer or
+writer migration. This spike creates no daemon, credential broker, mutable
+cross-machine store, or second state authority.

package/architecture/v4-stable-publication-fence.json

@@ -0,0 +1,66 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-stable-publication-fence-architecture",
+  "schemaAuthority": "contracts/v4-stable-publication-fence-v1.schema.json",
+  "fixtureAuthority": "contracts/fixtures/v4-stable-publication-fence-v1/shared.json",
+  "activationPredecessor": "architecture/v4-release-activation-shadow-domain.json",
+  "mode": "production",
+  "authority": {
+    "productionWriter": "v4-domain",
+    "productionWriterCount": 1,
+    "fenceAuthority": "rust-v4-core",
+    "fenceWriterCount": 1,
+    "typescript": "byte-equivalent-provider-adapter",
+    "candidateSelfQualification": false,
+    "productionWriteChange": true
+  },
+  "qualificationPolicies": {
+    "n-minus-one": "authority-generation-must-immediately-precede-candidate",
+    "independent-seal": "qualifier-authority-must-differ-from-publisher-authority",
+    "candidateRoot": "exact-content-root",
+    "coordinates": [
+      "source-root",
+      "metadata-root",
+      "journal-root",
+      "protected-ancestry-root",
+      "provider-confirmation-roots"
+    ]
+  },
+  "publicationTargets": ["stable-ref", "npm-tag", "oci-tag", "github-release"],
+  "implementations": {
+    "rustDomain": "crates/buildchain-v4-contracts/src/stable_publication_fence.rs",
+    "typescript": "packages/core/v4-stable-publication-fence.js"
+  },
+  "roots": [
+    "stable-publication-candidate",
+    "stable-publication-qualification",
+    "stable-publication-target",
+    "stable-publication-plan",
+    "stable-publication-fence"
+  ],
+  "rejects": [
+    "candidate-self-qualification",
+    "candidate-root-mismatch",
+    "qualification-publication-authority-collision",
+    "protected-ancestry-mismatch",
+    "source-mismatch",
+    "metadata-mismatch",
+    "journal-mismatch",
+    "provider-confirmation-mismatch",
+    "conflicting-publication-target"
+  ],
+  "budgets": {
+    "schemaAuthorities": 1,
+    "fenceWriters": 1,
+    "secondStateFoldWriters": 0,
+    "providerSdkImportsInContracts": 0,
+    "providerSdkImportsInRustDomain": 0,
+    "liveProviderMutations": 0,
+    "networkWrites": 0,
+    "credentialReads": 0,
+    "publicOrProtectedRefChanges": 0,
+    "productionWriteAuthorityChanges": 1,
+    "v3ConsumerBehaviorChanges": 0
+  },
+  "successor": "partial-mutation-recovery-qualification"
+}

package/architecture/v4-stage-capsule-contract.json

@@ -0,0 +1,90 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-stage-capsule-architecture",
+  "schemaAuthority": "contracts/v4-stage-capsule-v1.schema.json",
+  "fixtureAuthority": "contracts/fixtures/v4-stage-capsule-v1/shared.json",
+  "storeSuccessor": "architecture/v4-stage-capsule-store-contract.json",
+  "authority": {
+    "writer": "typescript-v3",
+    "writerCount": 1,
+    "rust": "validation-only",
+    "productionWriteChange": false
+  },
+  "roots": {
+    "identity": "stage-capsule-identity",
+    "capsule": "stage-capsule",
+    "availability": "stage-capsule-availability"
+  },
+  "identityIncludes": [
+    "sourceRoot",
+    "platform",
+    "platformRoot",
+    "stage",
+    "toolchainRoots",
+    "runtimeRoot",
+    "policyRoot",
+    "declaredInputs",
+    "transformationRoot",
+    "outputManifestRoot",
+    "qualificationRoot",
+    "observationRoots"
+  ],
+  "identityExcludes": [
+    "providerRunId",
+    "providerArtifactId",
+    "runnerPath",
+    "credential",
+    "ambientClock",
+    "networkObservation",
+    "transportLocation",
+    "currentAvailability"
+  ],
+  "templateGuidance": {
+    "source": "contracts/fixtures/v4-stage-capsule-v1/shared.json",
+    "requiredRootOnlyFields": [
+      "toolchainRoots",
+      "declaredInputs",
+      "observationRoots",
+      "transports"
+    ],
+    "forbiddenRawFields": [
+      "providerRunId",
+      "providerArtifactId",
+      "runnerPath",
+      "credential",
+      "ambientClock",
+      "networkObservation"
+    ]
+  },
+  "reuse": {
+    "explicitEvaluationClock": true,
+    "failClosedStatuses": [
+      "missing",
+      "expired",
+      "partial",
+      "corrupt",
+      "quarantined",
+      "root-mismatch"
+    ],
+    "requiresExactRoots": [
+      "capsuleRoot",
+      "outputManifestRoot",
+      "qualificationRoot"
+    ]
+  },
+  "budgets": {
+    "schemaAuthorities": 1,
+    "writers": 1,
+    "secondWriters": 0,
+    "providerSdkImportsInContracts": 0,
+    "providerSdkImportsInRustDomain": 0,
+    "productionWriteAuthorityChanges": 0,
+    "v3ConsumerBehaviorChanges": 0
+  },
+  "successors": [
+    "store-retention",
+    "platform-stage-checkpoints",
+    "resume-planner",
+    "qualification-reconciliation"
+  ]
+}

package/architecture/v4-stage-capsule-qualification.json

@@ -0,0 +1,99 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-stage-capsule-qualification",
+  "capsuleAuthority": "architecture/v4-stage-capsule-contract.json",
+  "storeAuthority": "architecture/v4-stage-capsule-store-contract.json",
+  "checkpointAuthority": "architecture/v4-platform-stage-checkpoints.json",
+  "resumeAuthority": "architecture/v4-stage-capsule-resume-planner.json",
+  "implementation": "packages/core/v4-stage-capsule-qualification.js",
+  "rehearsal": "scripts/v4-stage-capsule-qualification.mjs",
+  "mode": "shadow-only",
+  "productionAuthority": "v3",
+  "campaign": {
+    "platforms": ["linux-x64", "macos-arm64", "windows-x64"],
+    "processRuns": ["seed", "resume"],
+    "consumers": ["buildchain"],
+    "requiredComparisons": [
+      "artifact-manifest-root",
+      "content-root",
+      "campaign-profile-root",
+      "planner-decision",
+      "retained-byte-cost",
+      "restore-overhead",
+      "rollback"
+    ]
+  },
+  "publicConsumerDogfood": {
+    "callerWorkflow": ".github/workflows/v4-public-consumer-dogfood.yml",
+    "reusableWorkflow": "kungfu-systems/buildchain/.github/workflows/v4-stage-capsule-canary.yml",
+    "validationRef": "4178776bf635d0738cb1917e449076d64883218c",
+    "invocation": "workflow_call",
+    "runtimeBinding": "job.workflow_sha",
+    "consumerSourceBinding": "github.sha",
+    "configPath": ".buildchain/buildchain.toml",
+    "executableStages": ["install", "build", "verify"],
+    "dependencies": {
+      "install": [],
+      "build": ["install"],
+      "verify": ["build"]
+    },
+    "excludedStages": {
+      "version-state": "source-mutation",
+      "publish": "provider-mutation"
+    },
+    "runners": ["ubuntu-24.04", "macos-15", "windows-2025"],
+    "consumerOrchestrationCopied": false,
+    "relativeOrSelfInvocationAllowed": false,
+    "directQualificationInvocationAllowed": false,
+    "candidateBranchOverrideAllowed": false,
+    "recursionRecovery": "public-train-ref-only"
+  },
+  "faultCampaign": [
+    "corrupt",
+    "cross-platform",
+    "cross-stage",
+    "expired",
+    "missing",
+    "partial",
+    "policy-drift",
+    "root-mismatch",
+    "source-drift",
+    "stale-writer",
+    "toolchain-drift"
+  ],
+  "qualification": {
+    "freshAndResumedRootsMustMatch": true,
+    "falseReuseMaximum": 0,
+    "falseRebuildMaximum": 0,
+    "allFaultsMustPass": true,
+    "threePlatformAggregateRequired": true,
+    "fiveNativeTerminalChildrenRequired": true,
+    "protectedDeliveryMustBeDrained": true
+  },
+  "rollback": {
+    "switch": "stage-capsule-mode=v3",
+    "migrationRequired": false,
+    "retainedStateDestroyed": false
+  },
+  "authority": {
+    "providerEffects": false,
+    "productionWrites": false,
+    "productionReuse": false,
+    "releaseEffects": false,
+    "credentials": false,
+    "aws": false,
+    "selfHostedRunners": false,
+    "ambientEnvironment": false,
+    "ambientClock": false,
+    "v3BehaviorChange": false
+  },
+  "budgets": {
+    "qualificationImplementations": 1,
+    "canonicalQualificationRoots": 1,
+    "providerSdkImports": 0,
+    "productionStageSkippingChanges": 0,
+    "productionWriteAuthorityChanges": 0,
+    "v3ConsumerBehaviorChanges": 0,
+    "publicConsumerDogfoodWorkflows": 1
+  }
+}

package/architecture/v4-stage-capsule-resume-planner.json

@@ -0,0 +1,52 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-stage-capsule-resume-planner",
+  "schemaAuthority": "contracts/v4-stage-capsule-resume-v1.schema.json",
+  "fixtureAuthority": "contracts/fixtures/v4-stage-capsule-resume-v1/late-platform-failure.json",
+  "capsuleAuthority": "architecture/v4-stage-capsule-contract.json",
+  "checkpointAuthority": "architecture/v4-platform-stage-checkpoints.json",
+  "mode": "shadow-only",
+  "productionAuthority": "v3",
+  "planner": {
+    "rust": "pure-domain-authority",
+    "typescript": "byte-identical-projection",
+    "ambientClock": false,
+    "filesystem": false,
+    "network": false,
+    "environment": false
+  },
+  "decisions": ["reuse", "rebuild", "reject"],
+  "rebuildCauses": [
+    "source-changed",
+    "platform-changed",
+    "toolchain-changed",
+    "runtime-changed",
+    "policy-changed",
+    "input-changed",
+    "transformation-changed",
+    "output-manifest-changed",
+    "retention-changed"
+  ],
+  "failClosedCauses": [
+    "cross-platform",
+    "stage-mismatch",
+    "partial",
+    "corrupt",
+    "quarantined",
+    "root-mismatch",
+    "evidence-insufficient"
+  ],
+  "effects": {
+    "separateFromCapsuleReuse": true,
+    "providerReadbackRequired": true,
+    "plannerMutation": false
+  },
+  "budgets": {
+    "plannerImplementations": 2,
+    "canonicalPlanRoots": 1,
+    "providerSdkImportsInPlanner": 0,
+    "plannerSideEffects": 0,
+    "productionStageSkippingChanges": 0,
+    "v3AuthorityChanges": 0
+  }
+}