@namewta/speculo 0.8.9 → 0.8.11

package/template/workflows/ops/common/rules/plan-and-approval.md

@@ -0,0 +1,25 @@
+# 计划与批准合同
+
+## Ready 门
+
+P 只有在 request 明确、快照新鲜度被接受、deployment model 与 target profile v1 无 blocking unknown、source revision/target fingerprint/profile digest 可重建、deployment root 和整体控制面身份已确认、健康与恢复可判定时生成 Ready plan。重新规划还必须绑定触发 attempt 和 diagnosis。
+
+计划深度随事故半径增长：本地可丢弃环境可 lite；共享非生产默认 standard；生产、全局配置、数据、流量、权限、密钥或不可逆动作必须 deep。
+
+## 结构化操作与版本
+
+每个 plan-NNN.json 使用 schema v3，并绑定 target profile path/digest。它包含 required Gate DAG、batch `gate_ids`、`after_batches`、不可变 artifact requirements、逐项 verification contract、data protection、staging/activation/previous refs 和恢复策略。每个 operation 包含 id、batch、kind、target、cwd、preconditions、write set、external mutation、preview、apply、postconditions、rollback、risk、privilege 和 evidence。无法使用 typed adapter 时，以 custom-command 显示完整 shell、command、引用方式和风险。
+
+plan-NNN 永不覆盖。修订版记录 supersedes_plan_path；由失败 attempt 触发时再记录 triggered_by_attempt，执行前按用户审核意见修订时允许后者为 null。修订版完整重述当前待执行状态；旧已执行 batch 只由 attempt evidence 表示，不能自动成为新 plan 的批准。旧 plan v2 只读且不可重新批准；继续 mutation 必须生成 v3，不能推导缺失的 identity、Gate 或数据保护结论。
+
+## Gate、候选与数据保护
+
+每个 required Gate 和 verification id 只有一个 owner。batch `gate_ids` 表示启动前置 Gate，可为空；Gate `after_batches` 表示生成 Gate 结论前必须完成的批次；两者与各自依赖合成的 DAG 必须可拓扑排序。不可变候选使用 SHA-256、image digest 或 provider immutable id；可变 tag 仅作显示。适用时计划包含授权 root 内独立 staging、目标端摘要重验、原子 activation、previous ref 和保留策略。
+
+每个 data mutation 映射 data-protection 条目。production 不接受 waiver；local waiver 仅在用户对精确对象明确批准并记录 decision locator、exact scope、对象身份、零冲突 preflight 和 forward-only 恢复边界时有效。backup 不只证明存在，还要规划可读性、restore ref 与恢复验证。cleanup 使用独立 batch。
+
+## 批量批准
+
+P 一次展示 target/profile identity、完整待执行 batch、Gate/依赖、候选摘要、数据保护、差异、外部 mutation、全局环境 key/scope/source/impact/rollback、风险、验证、恢复、cleanup 和期限。用户可以一条回复批准多个 ids，不逐命令确认。approval 绑定 scope/project/change、plan SHA-256、source、target、batches、条件和期限，不保存密钥。
+
+profile/计划内容、固定点、identity、权限、external mutation、数据保护或期限漂移时，不执行受影响 batch；保留旧工件，将 approval invalidated，并返回 I/P 生成新版本。用户最初要求部署不等于对后续修复、回滚、数据恢复、cleanup、归档或知识改写的授权。

package/template/workflows/ops/common/rules/project-and-change-scope.md

@@ -0,0 +1,20 @@
+# Project 与 Change Scope
+
+## Scope
+
+- `global`：宿主机、共享环境、Docker/集群控制面基线或跨项目运维规则；change 位于根 changes/archive。
+- `project`：指定应用、仓库或可独立部署组件；change 和永久知识位于 `projects/{project_id}`。
+
+项目工作不得使用 global scope 来绕过项目历史；project change 可在 A 阶段把确实跨项目的候选提升到全局知识。
+
+## 项目身份
+
+`project_id` 是 lowercase kebab 稳定目录 id，不等同于可变 display name。识别顺序：用户显式 id、已登记无凭据 VCS identity、monorepo component identity、workspace/package identity、用户确认 alias。目录 basename 只能提出候选。
+
+VCS identity 必须移除 scheme userinfo、token、query 和 fragment；无法可靠脱敏时存储 hash 与人类可识别 label，不保存原值。identity 冲突或多个项目命中时一次展示并请求选择，不自动合并历史。
+
+## Change 选择
+
+全局索引 entry 统一为 `{scope, project_id, change}`。tuple 唯一；change 名只需在同一 scope root 内唯一。新 change 先写完整目录和 `.status.json`，再加入 active；失败时不留下索引悬挂。
+
+归档 change 不恢复写入。follow-up 继承 project/global scope，但 request 明确记录来源 archive locator 和仍适用的事实；不得复制旧批准作为当前授权。

package/template/workflows/ops/common/rules/target-profile-and-release-gates.md

@@ -0,0 +1,44 @@
+# Target Profile、发布 Gate 与数据保护
+
+## 三层证据
+
+I 拥有 `deployment/target-profile.json`，记录非敏感期望、现场身份和授权边界；P 拥有绑定 profile 摘要的 plan，记录候选、Gate、数据保护和恢复策略；E 在每个 attempt 中拥有 `verification-state.json`，记录实测身份、Gate、构件、探针、稳定窗口和恢复资产。Markdown 只投影这些结构化事实。
+
+profile、plan 或 verification state 禁止保存 secret 值。只保存 key、provider/受控 locator、版本、是否必须存在和 presence 证据。需要生成私密配置时，输出必须位于 deployment root 或外部受控位置，权限和未回显证明进入 attempt；私密文件本身不得复制进 Ops state 或 HANDOFF。
+
+## Operation Mode 与接管
+
+- `audit`：只读盘点；不批准 mutation。
+- `takeover`：已存在持久目录、控制面资源、数据、路由或服务时的默认模式；保持现场身份和命名。
+- `fresh`：只在证据证明目标为空、归属清楚且 protected/unknown targets 为空时允许。
+- `release`：向已确认目标发布不可变候选。
+- `upgrade`：从已确认现役版本迁移到新候选。
+- `rollback`：恢复已验证且兼容的目标或反向操作。
+
+现场为 `present` 或 `unknown` 时不得选择 fresh。差异分类为 `ownership-conflict` 或 `unknown` 时 profile 必须 blocked；不得通过改用 global scope、改名或宽泛命令绕过。
+
+## 控制面身份
+
+身份由一组不可拆分 assertions 表示。每项声明 provider、key、`exact | ordered-list | set | digest` 比较、非敏感 expected 和 evidence。Compose 的 project、有序 files、env file、services、labels/image identity 和 bind host 应分别进入 assertions；目录名、容器名前缀或单一文件不能独立证明身份。
+
+mutation 模式要求整体 `identity_confirmed=true` 和确认 evidence。E 在第一条 mutation 前重采集 actual 并逐 assertion 比较；任何漂移使 approval 失效并返回 I/P。
+
+## 构件与提升
+
+发布构件使用不可变 SHA-256 或 provider 的不可变 digest/image ID。适用时计划必须声明授权 root 下的独立 staging、activation target 和 previous ref；传输后在目标端重算摘要，再原子切换活动指针。未验证候选不得进入 active 位置，可变 tag 不构成不可变身份。
+
+失败候选、previous release、rollback material 和脱敏日志默认保留。cleanup 不继承部署批准，只能由新的 plan batch 执行。
+
+## 数据保护
+
+每个 data mutation 映射到一个 `data_protection` 条目。默认策略为 verified backup：记录受控 evidence locator、摘要、可读性、restore ref 和恢复验证。production 不接受 waiver。
+
+只有 local 环境且用户针对精确对象明确批准时允许 waiver；必须同时记录 decision locator、exact scope、对象身份确认、零冲突 preflight 和 `forward-only` 恢复边界。执行器事务能力未知、备份不可读或恢复路径未验证时，在第一条持久写入前停止。
+
+## Gate 与验证
+
+plan 的 required Gate 与 batch 形成组合 DAG：batch `gate_ids` 是启动该批次前必须 passed 的 Gate，可为空；Gate `after_batches` 是计算该 Gate 前必须完成的批次。E 只能在 batch 的全部 gate ids 已 passed 后开始该 batch；Gate failed/blocked 后不得执行新的 operation、提升活动指针或删除候选，后续 Gate只能标记 skipped。
+
+每个 required verification id 必须由 Gate 引用并在 verification state 有唯一结果。HTTP 探针独立声明允许状态、允许业务码和认证要求；稳定窗口声明 interval、timeout 和连续成功数。瞬时失败可以记录，但连续成功不足或超时仍失败。多实例收敛通过显式 convergence group 比较不可变构件和运行配置摘要。
+
+成功、回滚或作为 completed 依据的 abandoned attempt 必须生成 verification state 和无密钥 handoff，并证明 required Gates、数据保护、恢复资产和接受的残余风险。

package/template/workflows/ops/common/schemas/approval.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:approval:v2",
+  "title": "Ops Plan Approval",
+  "type": "object",
+  "required": ["schema_version", "artifact", "scope", "project_id", "approval_id", "change", "plan_path", "plan_digest", "source_revision", "target_fingerprint", "approved_batches", "excluded_batches", "confirmed_global_environment_keys", "conditions", "decision", "decision_summary", "decided_at", "expires_at"],
+  "properties": {
+    "schema_version": {"const": 2},
+    "artifact": {"const": "ops-plan-approval"},
+    "scope": {"enum": ["global", "project"]},
+    "project_id": {"type": ["string", "null"], "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "approval_id": {"type": "string", "pattern": "^APPROVAL-[0-9]{3}$"},
+    "change": {"type": "string"},
+    "plan_path": {"type": "string", "pattern": "^plan/plan-[0-9]{3}\\.json$"},
+    "plan_digest": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+    "source_revision": {"type": "string", "minLength": 1},
+    "target_fingerprint": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+    "approved_batches": {"type": "array", "items": {"type": "string", "pattern": "^B[0-9]{2}$"}, "minItems": 1, "uniqueItems": true},
+    "excluded_batches": {"type": "array", "items": {"type": "string", "pattern": "^B[0-9]{2}$"}, "uniqueItems": true},
+    "confirmed_global_environment_keys": {"type": "array", "items": {"type": "string"}, "uniqueItems": true},
+    "conditions": {"type": "array", "items": {"type": "string"}, "uniqueItems": true},
+    "decision": {"const": "approved"},
+    "decision_summary": {"type": "string", "minLength": 1},
+    "decided_at": {"type": "string", "format": "date-time"},
+    "expires_at": {"type": "string", "format": "date-time"}
+  },
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/attempt.schema.json

@@ -0,0 +1,42 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:attempt:v2",
+  "title": "Ops Execution Attempt",
+  "type": "object",
+  "required": ["schema_version", "artifact", "scope", "project_id", "change", "attempt_id", "kind", "triggered_by_attempt", "plan_path", "plan_digest", "approval_path", "target_profile_path", "target_profile_digest", "started_at", "ended_at", "result", "executed_batches", "failed_operation", "mutation_performed", "journal_path", "diagnosis_path", "verification_path", "verification_state_path", "verification_state_digest", "handoff_path", "retained_artifacts", "blockers"],
+  "properties": {
+    "schema_version": {"const": 2},
+    "artifact": {"const": "ops-execution-attempt"},
+    "scope": {"enum": ["global", "project"]},
+    "project_id": {"type": ["string", "null"], "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "change": {"type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}-[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "attempt_id": {"type": "string", "pattern": "^ATTEMPT-[0-9]{3}$"},
+    "kind": {"enum": ["deploy", "remediation", "rollback", "verification-only"]},
+    "triggered_by_attempt": {"type": ["string", "null"], "pattern": "^ATTEMPT-[0-9]{3}$"},
+    "plan_path": {"anyOf": [{"type": "null"}, {"type": "string", "pattern": "^plan/plan-[0-9]{3}\\.json$"}]},
+    "plan_digest": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"},
+    "approval_path": {"anyOf": [{"type": "null"}, {"type": "string", "pattern": "^plan/approval-[0-9]{3}\\.json$"}]},
+    "target_profile_path": {"type": ["string", "null"], "pattern": "^deployment/target-profile\\.json$"},
+    "target_profile_digest": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "ended_at": {"type": ["string", "null"], "format": "date-time"},
+    "result": {"enum": ["running", "succeeded", "failed", "blocked", "rolled_back", "abandoned"]},
+    "executed_batches": {"type": "array", "items": {"type": "string", "pattern": "^B[0-9]{2}$"}, "uniqueItems": true},
+    "failed_operation": {"type": ["string", "null"], "pattern": "^OP[0-9]{3}$"},
+    "mutation_performed": {"type": "boolean"},
+    "journal_path": {"type": "string", "pattern": "^execution/attempts/ATTEMPT-[0-9]{3}/journal\\.jsonl$"},
+    "diagnosis_path": {"type": ["string", "null"], "pattern": "^execution/attempts/ATTEMPT-[0-9]{3}/diagnosis\\.md$"},
+    "verification_path": {"type": ["string", "null"], "pattern": "^execution/attempts/ATTEMPT-[0-9]{3}/verification\\.md$"},
+    "verification_state_path": {"type": ["string", "null"], "pattern": "^execution/attempts/ATTEMPT-[0-9]{3}/verification-state\\.json$"},
+    "verification_state_digest": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"},
+    "handoff_path": {"type": ["string", "null"], "pattern": "^execution/attempts/ATTEMPT-[0-9]{3}/HANDOFF\\.md$"},
+    "retained_artifacts": {"type": "array", "items": {"type": "object", "required": ["id", "kind", "locator", "reason"], "properties": {"id": {"type": "string", "minLength": 1}, "kind": {"type": "string", "minLength": 1}, "locator": {"type": "string", "minLength": 1}, "reason": {"type": "string", "minLength": 1}}, "additionalProperties": false}},
+    "blockers": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true}
+  },
+  "allOf": [
+    {"if": {"properties": {"scope": {"const": "global"}}}, "then": {"properties": {"project_id": {"const": null}}}},
+    {"if": {"properties": {"scope": {"const": "project"}}}, "then": {"properties": {"project_id": {"type": "string"}}}},
+    {"if": {"properties": {"kind": {"not": {"const": "verification-only"}}}}, "then": {"properties": {"plan_path": {"type": "string"}, "plan_digest": {"type": "string"}, "approval_path": {"type": "string"}, "target_profile_path": {"type": "string"}, "target_profile_digest": {"type": "string"}}}}
+  ],
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/change-status.schema.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:change-status:v2",
+  "title": "Ops Change Status",
+  "type": "object",
+  "required": [
+    "schema_version", "artifact", "scope", "project_id", "change", "change_status", "phase",
+    "current_work", "works_run", "created_at", "updated_at", "completed_at", "archived_at",
+    "archive_path", "source_revision", "target_fingerprint", "plan_path", "plan_digest",
+    "approval_path", "approval_status", "approved_batches", "latest_attempt_id", "outcome", "blockers"
+  ],
+  "properties": {
+    "schema_version": {"const": 2},
+    "artifact": {"const": "ops-change-status"},
+    "scope": {"enum": ["global", "project"]},
+    "project_id": {"type": ["string", "null"], "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "change": {"type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}-[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "change_status": {"enum": ["active", "blocked", "completed", "archived"]},
+    "phase": {"enum": ["intake", "assessment", "planning", "awaiting_approval", "approved", "executing", "diagnosing", "stabilizing", "ready_to_archive", "archived"]},
+    "current_work": {"anyOf": [{"type": "null"}, {"enum": ["ops/archive-and-learn", "ops/execute-and-stabilize", "ops/intake-and-assess", "ops/plan-and-approve"]}]},
+    "works_run": {"type": "array", "items": {"enum": ["ops/archive-and-learn", "ops/execute-and-stabilize", "ops/intake-and-assess", "ops/plan-and-approve"]}, "uniqueItems": true},
+    "created_at": {"type": "string", "format": "date-time"},
+    "updated_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": ["string", "null"], "format": "date-time"},
+    "archived_at": {"type": ["string", "null"], "format": "date-time"},
+    "archive_path": {"type": ["string", "null"]},
+    "source_revision": {"type": ["string", "null"], "minLength": 1},
+    "target_fingerprint": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"},
+    "plan_path": {"anyOf": [{"type": "null"}, {"type": "string", "pattern": "^plan/plan-[0-9]{3}\\.json$"}]},
+    "plan_digest": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"},
+    "approval_path": {"anyOf": [{"type": "null"}, {"type": "string", "pattern": "^plan/approval-[0-9]{3}\\.json$"}]},
+    "approval_status": {"enum": ["not_requested", "pending", "approved", "invalidated"]},
+    "approved_batches": {"type": "array", "items": {"type": "string", "pattern": "^B[0-9]{2}$"}, "uniqueItems": true},
+    "latest_attempt_id": {"type": ["string", "null"], "pattern": "^ATTEMPT-[0-9]{3}$"},
+    "outcome": {"enum": ["pending", "succeeded", "rolled_back", "abandoned"]},
+    "blockers": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true}
+  },
+  "allOf": [
+    {"if": {"properties": {"scope": {"const": "global"}}}, "then": {"properties": {"project_id": {"const": null}}}},
+    {"if": {"properties": {"scope": {"const": "project"}}}, "then": {"properties": {"project_id": {"type": "string"}}}}
+  ],
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/deployment-model.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:deployment-model:v2",
+  "title": "Ops Deployment Model",
+  "type": "object",
+  "required": ["schema_version", "artifact", "scope", "project_id", "change", "generated_at", "project", "components", "dependencies", "configuration", "data", "deployment_options", "selected_method", "health_checks", "unknowns", "readiness"],
+  "properties": {
+    "schema_version": {"const": 2},
+    "artifact": {"const": "ops-deployment-model"},
+    "scope": {"enum": ["global", "project"]},
+    "project_id": {"type": ["string", "null"], "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "change": {"type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}-[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "generated_at": {"type": "string", "format": "date-time"},
+    "project": {"anyOf": [{"type": "null"}, {"type": "object", "required": ["source_root", "source_revision", "languages", "build", "start"], "properties": {"source_root": {"type": "string", "minLength": 1}, "source_revision": {"type": "string", "minLength": 1}, "languages": {"type": "array", "items": {"type": "string"}, "uniqueItems": true}, "build": {"type": "array", "items": {"type": "string"}, "uniqueItems": true}, "start": {"type": "array", "items": {"type": "string"}, "uniqueItems": true}}, "additionalProperties": false}]},
+    "components": {"type": "array", "items": {"type": "object", "required": ["id", "kind", "source"], "properties": {"id": {"type": "string"}, "kind": {"type": "string"}, "source": {"type": "string"}}, "additionalProperties": false}},
+    "dependencies": {"type": "array", "items": {"type": "object", "required": ["id", "kind", "required", "source", "target_disposition"], "properties": {"id": {"type": "string"}, "kind": {"type": "string"}, "required": {"type": "boolean"}, "source": {"type": "string"}, "target_disposition": {"enum": ["existing", "provision", "external", "unresolved"]}}, "additionalProperties": false}},
+    "configuration": {"type": "array", "items": {"type": "object", "required": ["key", "scope", "required", "secret", "source_ref"], "properties": {"key": {"type": "string", "minLength": 1}, "scope": {"enum": ["process", "service", "project", "container", "cluster", "global"]}, "required": {"type": "boolean"}, "secret": {"type": "boolean"}, "source_ref": {"type": ["string", "null"]}}, "additionalProperties": false}},
+    "data": {"type": "array", "items": {"type": "object", "required": ["id", "kind", "persistence", "migration"], "properties": {"id": {"type": "string"}, "kind": {"type": "string"}, "persistence": {"type": "string"}, "migration": {"type": ["string", "null"]}}, "additionalProperties": false}},
+    "deployment_options": {"type": "array", "items": {"type": "object", "required": ["id", "method", "evidence", "tradeoffs"], "properties": {"id": {"type": "string"}, "method": {"type": "string"}, "evidence": {"type": "array", "items": {"type": "string"}}, "tradeoffs": {"type": "array", "items": {"type": "string"}}}, "additionalProperties": false}},
+    "selected_method": {"type": ["string", "null"]},
+    "health_checks": {"type": "array", "items": {"type": "object", "required": ["id", "kind", "target", "success"], "properties": {"id": {"type": "string"}, "kind": {"type": "string"}, "target": {"type": "string"}, "success": {"type": "string"}}, "additionalProperties": false}},
+    "unknowns": {"type": "array", "items": {"type": "object", "required": ["id", "question", "blocking", "owner"], "properties": {"id": {"type": "string"}, "question": {"type": "string"}, "blocking": {"type": "boolean"}, "owner": {"type": "string"}}, "additionalProperties": false}},
+    "readiness": {"enum": ["blocked", "ready"]}
+  },
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/implementation-plan.schema.json

@@ -0,0 +1,221 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:implementation-plan:v3",
+  "title": "Ops Implementation Plan",
+  "type": "object",
+  "required": ["schema_version", "artifact", "scope", "project_id", "plan_id", "change", "created_at", "supersedes_plan_path", "triggered_by_attempt", "depth", "status", "input_bindings", "scope_definition", "batches", "external_mutations", "global_environment_changes", "operations", "artifact_requirements", "gates", "data_protection", "retention_policy", "verification", "rollback_strategy", "blockers"],
+  "properties": {
+    "schema_version": {"const": 3},
+    "artifact": {"const": "ops-implementation-plan"},
+    "scope": {"enum": ["global", "project"]},
+    "project_id": {"type": ["string", "null"], "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "plan_id": {"type": "string", "pattern": "^PLAN-[0-9]{3}$"},
+    "change": {"type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}-[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "created_at": {"type": "string", "format": "date-time"},
+    "supersedes_plan_path": {"anyOf": [{"type": "null"}, {"type": "string", "pattern": "^plan/plan-[0-9]{3}\\.json$"}]},
+    "triggered_by_attempt": {"type": ["string", "null"], "pattern": "^ATTEMPT-[0-9]{3}$"},
+    "depth": {"enum": ["lite", "standard", "deep"]},
+    "status": {"enum": ["blocked", "ready"]},
+    "input_bindings": {
+      "type": "object",
+      "required": ["request_path", "snapshot_path", "snapshot_digest", "deployment_model_path", "deployment_model_digest", "target_profile_path", "target_profile_digest", "source_revision", "target_fingerprint"],
+      "properties": {
+        "request_path": {"type": "string", "minLength": 1},
+        "snapshot_path": {"type": "string", "minLength": 1},
+        "snapshot_digest": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "deployment_model_path": {"type": "string", "minLength": 1},
+        "deployment_model_digest": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "target_profile_path": {"type": "string", "pattern": "^deployment/target-profile\\.json$"},
+        "target_profile_digest": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "source_revision": {"type": "string", "minLength": 1},
+        "target_fingerprint": {"type": "string", "pattern": "^[a-f0-9]{64}$"}
+      },
+      "additionalProperties": false
+    },
+    "scope_definition": {
+      "type": "object",
+      "required": ["source_root", "deployment_root", "read_roots", "write_roots", "forbidden_roots"],
+      "properties": {
+        "source_root": {"type": "string", "minLength": 1},
+        "deployment_root": {"type": "string", "minLength": 1},
+        "read_roots": {"type": "array", "items": {"type": "string"}, "uniqueItems": true},
+        "write_roots": {"type": "array", "items": {"type": "string"}, "minItems": 1, "uniqueItems": true},
+        "forbidden_roots": {"type": "array", "items": {"type": "string"}, "uniqueItems": true}
+      },
+      "additionalProperties": false
+    },
+    "batches": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "title", "risk", "requires_confirmation", "depends_on", "operation_ids", "gate_ids"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^B[0-9]{2}$"},
+          "title": {"type": "string", "minLength": 1},
+          "risk": {"enum": ["low", "medium", "high", "critical"]},
+          "requires_confirmation": {"const": true},
+          "depends_on": {"type": "array", "items": {"type": "string", "pattern": "^B[0-9]{2}$"}, "uniqueItems": true},
+          "operation_ids": {"type": "array", "items": {"type": "string", "pattern": "^OP[0-9]{3}$"}, "minItems": 1, "uniqueItems": true},
+          "gate_ids": {"type": "array", "items": {"type": "string", "pattern": "^G[0-9]{2}$"}, "uniqueItems": true}
+        },
+        "additionalProperties": false
+      }
+    },
+    "external_mutations": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "provider", "target", "current_state", "desired_state", "privilege", "blast_radius", "preview", "rollback", "batch_id"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^EM[0-9]{3}$"},
+          "provider": {"type": "string"},
+          "target": {"type": "string"},
+          "current_state": {"type": "string"},
+          "desired_state": {"type": "string"},
+          "privilege": {"type": "string"},
+          "blast_radius": {"type": "string"},
+          "preview": {"type": "string"},
+          "rollback": {"type": "string"},
+          "batch_id": {"type": "string", "pattern": "^B[0-9]{2}$"}
+        },
+        "additionalProperties": false
+      }
+    },
+    "global_environment_changes": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["key", "target_scope", "value_source_ref", "impact", "rollback", "batch_id"],
+        "properties": {
+          "key": {"type": "string"},
+          "target_scope": {"type": "string"},
+          "value_source_ref": {"type": "string"},
+          "impact": {"type": "string"},
+          "rollback": {"type": "string"},
+          "batch_id": {"type": "string", "pattern": "^B[0-9]{2}$"}
+        },
+        "additionalProperties": false
+      }
+    },
+    "operations": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "batch_id", "kind", "target", "working_directory", "preconditions", "write_set", "external_mutation_id", "preview", "apply", "postconditions", "rollback", "risk", "required_privilege", "evidence_path"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^OP[0-9]{3}$"},
+          "batch_id": {"type": "string", "pattern": "^B[0-9]{2}$"},
+          "kind": {"enum": ["filesystem", "docker-compose", "systemd", "kubernetes", "helm", "terraform", "ansible", "database", "custom-command"]},
+          "target": {"type": "string"},
+          "working_directory": {"type": "string"},
+          "preconditions": {"type": "array", "items": {"type": "string"}, "minItems": 1},
+          "write_set": {"type": "array", "items": {"type": "string"}, "uniqueItems": true},
+          "external_mutation_id": {"type": ["string", "null"], "pattern": "^EM[0-9]{3}$"},
+          "preview": {"type": "object", "required": ["supported", "command", "limitations"], "properties": {"supported": {"type": "boolean"}, "command": {"type": ["string", "null"]}, "limitations": {"type": "array", "items": {"type": "string"}}}, "additionalProperties": false},
+          "apply": {"type": "object", "required": ["shell", "command"], "properties": {"shell": {"type": "string"}, "command": {"type": "string"}}, "additionalProperties": false},
+          "postconditions": {"type": "array", "items": {"type": "string"}, "minItems": 1},
+          "rollback": {"type": "object", "required": ["mode", "trigger", "command"], "properties": {"mode": {"enum": ["automatic", "manual", "not-available"]}, "trigger": {"type": "string"}, "command": {"type": ["string", "null"]}}, "additionalProperties": false},
+          "risk": {"enum": ["low", "medium", "high", "critical"]},
+          "required_privilege": {"type": "string"},
+          "evidence_path": {"type": "string"}
+        },
+        "additionalProperties": false
+      }
+    },
+    "artifact_requirements": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "kind", "source_ref", "immutable_digest", "staging_ref", "activation_target", "previous_ref", "required"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^AR[0-9]{3}$"},
+          "kind": {"enum": ["file", "archive", "container-image", "static-bundle", "other"]},
+          "source_ref": {"type": "string", "minLength": 1},
+          "immutable_digest": {"type": "string", "pattern": "^(?:sha256:)?[a-f0-9]{64}$"},
+          "staging_ref": {"type": ["string", "null"]},
+          "activation_target": {"type": "string", "minLength": 1},
+          "previous_ref": {"type": ["string", "null"]},
+          "required": {"type": "boolean"}
+        },
+        "additionalProperties": false
+      }
+    },
+    "gates": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "title", "depends_on", "after_batches", "verification_ids", "required"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^G[0-9]{2}$"},
+          "title": {"type": "string", "minLength": 1},
+          "depends_on": {"type": "array", "items": {"type": "string", "pattern": "^G[0-9]{2}$"}, "uniqueItems": true},
+          "after_batches": {"type": "array", "items": {"type": "string", "pattern": "^B[0-9]{2}$"}, "minItems": 1, "uniqueItems": true},
+          "verification_ids": {"type": "array", "items": {"type": "string", "pattern": "^VR[0-9]{3}$"}, "minItems": 1, "uniqueItems": true},
+          "required": {"type": "boolean"}
+        },
+        "additionalProperties": false
+      },
+      "minItems": 1
+    },
+    "data_protection": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "resource", "operation_ids", "strategy", "backup", "waiver"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^DP[0-9]{3}$"},
+          "resource": {"type": "string", "minLength": 1},
+          "operation_ids": {"type": "array", "items": {"type": "string", "pattern": "^OP[0-9]{3}$"}, "uniqueItems": true},
+          "strategy": {"enum": ["verified-backup", "waiver", "not-required"]},
+          "backup": {
+            "anyOf": [
+              {"type": "null"},
+              {"type": "object", "required": ["evidence_path", "digest", "readability_verified", "restore_ref", "restore_verified"], "properties": {"evidence_path": {"type": "string", "minLength": 1}, "digest": {"type": "string", "pattern": "^[a-f0-9]{64}$"}, "readability_verified": {"const": true}, "restore_ref": {"type": "string", "minLength": 1}, "restore_verified": {"type": "boolean"}}, "additionalProperties": false}
+            ]
+          },
+          "waiver": {
+            "anyOf": [
+              {"type": "null"},
+              {"type": "object", "required": ["decision_ref", "exact_scope", "object_identity_verified", "conflicts_absent", "recovery_mode"], "properties": {"decision_ref": {"type": "string", "minLength": 1}, "exact_scope": {"type": "string", "minLength": 1}, "object_identity_verified": {"const": true}, "conflicts_absent": {"const": true}, "recovery_mode": {"const": "forward-only"}}, "additionalProperties": false}
+            ]
+          }
+        },
+        "additionalProperties": false
+      }
+    },
+    "retention_policy": {
+      "type": "object",
+      "required": ["retain_failed_candidates", "retain_previous_release", "cleanup_requires_separate_approval"],
+      "properties": {
+        "retain_failed_candidates": {"const": true},
+        "retain_previous_release": {"const": true},
+        "cleanup_requires_separate_approval": {"const": true}
+      },
+      "additionalProperties": false
+    },
+    "verification": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "kind", "target", "required", "expected", "stability", "convergence_group"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^VR[0-9]{3}$"},
+          "kind": {"enum": ["http", "tcp", "command", "service", "artifact", "data", "custom"]},
+          "target": {"type": "string", "minLength": 1},
+          "required": {"type": "boolean"},
+          "expected": {"type": "object", "required": ["description", "http_statuses", "business_codes", "authenticated"], "properties": {"description": {"type": "string", "minLength": 1}, "http_statuses": {"type": "array", "items": {"type": "integer", "minimum": 100, "maximum": 599}, "uniqueItems": true}, "business_codes": {"type": "array", "items": {"type": ["integer", "string"]}, "uniqueItems": true}, "authenticated": {"type": ["boolean", "null"]}}, "additionalProperties": false},
+          "stability": {"anyOf": [{"type": "null"}, {"type": "object", "required": ["interval_seconds", "timeout_seconds", "required_consecutive_successes"], "properties": {"interval_seconds": {"type": "number", "exclusiveMinimum": 0}, "timeout_seconds": {"type": "number", "exclusiveMinimum": 0}, "required_consecutive_successes": {"type": "integer", "minimum": 1}}, "additionalProperties": false}]},
+          "convergence_group": {"type": ["string", "null"]}
+        },
+        "additionalProperties": false
+      }
+    },
+    "rollback_strategy": {"type": "string", "minLength": 1},
+    "blockers": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true}
+  },
+  "allOf": [
+    {"if": {"properties": {"scope": {"const": "global"}}}, "then": {"properties": {"project_id": {"const": null}}}},
+    {"if": {"properties": {"scope": {"const": "project"}}}, "then": {"properties": {"project_id": {"type": "string"}}}}
+  ],
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/inventory-snapshot.schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:inventory-snapshot:v2",
+  "title": "Ops Inventory Snapshot",
+  "type": "object",
+  "required": ["schema_version", "artifact", "scope", "project_id", "snapshot_id", "change", "captured_at", "scope_definition", "target_fingerprint", "collectors", "gaps", "redactions"],
+  "properties": {
+    "schema_version": {"const": 2},
+    "artifact": {"const": "ops-inventory-snapshot"},
+    "scope": {"enum": ["global", "project"]},
+    "project_id": {"type": ["string", "null"], "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "snapshot_id": {"type": "string", "pattern": "^[0-9]{8}T[0-9]{6}Z(?:-[0-9]{2})?$"},
+    "change": {"type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}-[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "captured_at": {"type": "string", "format": "date-time"},
+    "scope_definition": {
+      "type": "object",
+      "required": ["levels", "targets", "approved_deep_roots"],
+      "properties": {
+        "levels": {"type": "array", "items": {"enum": ["L0", "L1", "L2"]}, "uniqueItems": true, "minItems": 1},
+        "targets": {"type": "array", "items": {"type": "string", "minLength": 1}, "minItems": 1, "uniqueItems": true},
+        "approved_deep_roots": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true}
+      },
+      "additionalProperties": false
+    },
+    "target_fingerprint": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+    "collectors": {"type": "array", "items": {"type": "object", "required": ["id", "category", "tool", "target", "status", "facts", "evidence", "error"], "properties": {"id": {"type": "string"}, "category": {"enum": ["host", "filesystem", "runtime", "service", "network", "container", "cluster", "project-location"]}, "tool": {"type": "string"}, "target": {"type": "string"}, "status": {"enum": ["observed", "partial", "unavailable", "denied", "failed"]}, "facts": {"type": "object", "additionalProperties": true}, "evidence": {"type": "array", "items": {"type": "string"}}, "error": {"type": ["string", "null"]}}, "additionalProperties": false}, "minItems": 1},
+    "gaps": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true},
+    "redactions": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true}
+  },
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/journal-event.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:journal-event:v1",
+  "title": "Ops Attempt Journal Event",
+  "type": "object",
+  "required": ["schema_version", "artifact", "sequence", "at", "event", "batch_id", "gate_id", "operation_id", "result", "summary", "output_digest", "evidence"],
+  "properties": {
+    "schema_version": {"const": 1},
+    "artifact": {"const": "ops-journal-event"},
+    "sequence": {"type": "integer", "minimum": 1},
+    "at": {"type": "string", "format": "date-time"},
+    "event": {"enum": ["attempt-start", "gate-result", "operation-intent", "operation-result", "postcondition-result", "attempt-end"]},
+    "batch_id": {"type": ["string", "null"], "pattern": "^B[0-9]{2}$"},
+    "gate_id": {"type": ["string", "null"], "pattern": "^G[0-9]{2}$"},
+    "operation_id": {"type": ["string", "null"], "pattern": "^OP[0-9]{3}$"},
+    "result": {"enum": ["pending", "passed", "failed", "blocked", "skipped"]},
+    "summary": {"type": "string", "minLength": 1},
+    "output_digest": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"},
+    "evidence": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true}
+  },
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/project.schema.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:project:v1",
+  "title": "Ops Project Identity",
+  "type": "object",
+  "required": ["schema_version", "artifact", "project_id", "display_name", "aliases", "identities", "source_hints", "created_at", "updated_at"],
+  "properties": {
+    "schema_version": {"const": 1},
+    "artifact": {"const": "ops-project"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "display_name": {"type": "string", "minLength": 1},
+    "aliases": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true},
+    "identities": {"type": "array", "items": {"type": "object", "required": ["kind", "value", "source"], "properties": {"kind": {"enum": ["vcs", "monorepo-component", "workspace", "package", "user-confirmed", "digest"]}, "value": {"type": "string", "minLength": 1}, "source": {"type": "string", "minLength": 1}}, "additionalProperties": false}, "minItems": 1},
+    "source_hints": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true},
+    "created_at": {"type": "string", "format": "date-time"},
+    "updated_at": {"type": "string", "format": "date-time"}
+  },
+  "additionalProperties": false
+}

package/template/workflows/ops/common/schemas/promotion-approval.schema.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:speculo:ops:promotion-approval:v1",
+  "title": "Ops Promotion Approval",
+  "type": "object",
+  "required": ["schema_version", "artifact", "scope", "project_id", "change", "manifest_path", "manifest_digest", "decision", "decision_summary", "decided_at"],
+  "properties": {
+    "schema_version": {"const": 1},
+    "artifact": {"const": "ops-promotion-approval"},
+    "scope": {"enum": ["global", "project"]},
+    "project_id": {"type": ["string", "null"], "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"},
+    "change": {"type": "string"},
+    "manifest_path": {"const": "promotion/manifest.json"},
+    "manifest_digest": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+    "decision": {"const": "approved"},
+    "decision_summary": {"type": "string", "minLength": 1},
+    "decided_at": {"type": "string", "format": "date-time"}
+  },
+  "additionalProperties": false
+}