@scoutflo/topology-contracts 0.7.3 → 0.7.4

package/dist/src/correlation/contracts/families/index.d.ts

@@ -0,0 +1,906 @@
+export * from './aws';
+export * from './kubernetes';
+export * from './github';
+export * from './argocd';
+export * from './integrations';
+export declare const CONNECTION_CONTRACT_FAMILY_REGISTRIES: readonly [readonly [{
+    readonly key: "aws_vpc_part_of_account";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "aws_account";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted database resource_type; current AWS adapter evidence maps this to RDS-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_subnet_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "subnet";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted object_storage resource_type; current AWS adapter evidence maps this to S3-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_compute_instance_part_of_subnet";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "compute_instance";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "subnet";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted kubernetes_cluster resource_type; current AWS adapter evidence maps this to EKS-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_compute_instance_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "compute_instance";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted kubernetes_cluster resource_type; current AWS adapter evidence maps this to EKS-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_database_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "database";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_object_storage_part_of_account";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "object_storage";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "aws_account";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_kubernetes_cluster_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_cluster";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_kubernetes_cluster_part_of_account";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_cluster";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "aws_account";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}], readonly [{
+    readonly key: "k8s_namespace_part_of_cluster";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "kubernetes";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_namespace";
+        readonly provider: "k8s";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_cluster";
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "kubernetes";
+    readonly provider_category: "deployment";
+    readonly guardrails: readonly ["Do not rename the ratified active k8s workload namespace contract key.", "Gateway owns runtime stamping, validation, selector evaluation, and reconciliation."];
+}, {
+    readonly key: "k8s_service_part_of_namespace";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "kubernetes";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_service";
+        readonly provider: "k8s";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_namespace";
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "kubernetes";
+    readonly provider_category: "deployment";
+    readonly guardrails: readonly ["Do not rename the ratified active k8s workload namespace contract key.", "Gateway owns runtime stamping, validation, selector evaluation, and reconciliation."];
+}, {
+    readonly key: "k8s_workload_part_of_namespace";
+    readonly version: "v1";
+    readonly status: "active";
+    readonly family: "kubernetes";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_namespace";
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "implemented";
+    readonly provider_family: "kubernetes";
+    readonly provider_category: "deployment";
+    readonly notes: readonly ["Ratified and implemented Connection Contract V1 active key."];
+    readonly guardrails: readonly ["Do not rename the ratified active k8s workload namespace contract key.", "Gateway owns runtime stamping, validation, selector evaluation, and reconciliation."];
+}, {
+    readonly key: "k8s_service_routes_to_workload";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "kubernetes";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_service";
+        readonly provider: "k8s";
+    };
+    readonly relation: "ROUTES_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "kubernetes";
+    readonly provider_category: "deployment";
+    readonly notes: readonly ["Candidate broad-contract name for the existing selector-rule shape; Gateway must ratify before active stamping."];
+    readonly guardrails: readonly ["Do not rename the ratified active k8s workload namespace contract key.", "Gateway owns runtime stamping, validation, selector evaluation, and reconciliation."];
+}, {
+    readonly key: "service_deployed_as_k8s_workload";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "kubernetes";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "DEPLOYED_AS";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "kubernetes";
+    readonly provider_category: "deployment";
+    readonly notes: readonly ["Candidate broad-contract name for observed service to Kubernetes workload binding."];
+    readonly guardrails: readonly ["Do not rename the ratified active k8s workload namespace contract key.", "Gateway owns runtime stamping, validation, selector evaluation, and reconciliation."];
+}], readonly [{
+    readonly key: "github_account_owns_repository";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "github";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vcs";
+        readonly source_type: "github_account";
+        readonly provider: "github";
+    };
+    readonly relation: "OWNS";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vcs";
+        readonly source_type: "github_repository";
+        readonly provider: "github";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "vcs.github";
+    readonly evidence_level: "planned";
+    readonly provider_family: "github";
+    readonly provider_category: "vcs";
+    readonly guardrails: readonly ["GitHub repository contracts are reserved vocabulary until repository nodes and edges exist locally.", "Do not treat repository metadata alone as proof of a service or resource edge."];
+}, {
+    readonly key: "github_repository_defines_service";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "github";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vcs";
+        readonly source_type: "github_repository";
+        readonly provider: "github";
+    };
+    readonly relation: "PROVIDES";
+    readonly target_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "vcs.github";
+    readonly evidence_level: "planned";
+    readonly provider_family: "github";
+    readonly provider_category: "vcs";
+    readonly notes: readonly ["Reserved until repository nodes and service-definition projection tests exist."];
+    readonly guardrails: readonly ["GitHub repository contracts are reserved vocabulary until repository nodes and edges exist locally.", "Do not treat repository metadata alone as proof of a service or resource edge."];
+}, {
+    readonly key: "github_repository_defines_resource";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "github";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vcs";
+        readonly source_type: "github_repository";
+        readonly provider: "github";
+    };
+    readonly relation: "PROVIDES";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly label: "declared_in_repository";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "vcs.github";
+    readonly evidence_level: "planned";
+    readonly provider_family: "github";
+    readonly provider_category: "vcs";
+    readonly notes: readonly ["Reserved for IaC/manifest-backed resource definitions; provider files stay in source_attributes."];
+    readonly guardrails: readonly ["GitHub repository contracts are reserved vocabulary until repository nodes and edges exist locally.", "Do not treat repository metadata alone as proof of a service or resource edge."];
+}], readonly [{
+    readonly key: "argocd_app_sources_github_repository";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "argocd";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "ci_cd";
+        readonly source_type: "argocd_application";
+        readonly provider: "argocd";
+    };
+    readonly relation: "CONFIGURED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vcs";
+        readonly source_type: "github_repository";
+        readonly provider: "github";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "deployment.argocd";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "argocd";
+    readonly provider_category: "deployment";
+    readonly guardrails: readonly ["ArgoCD contracts are experimental until application nodes and endpoint-specific relation semantics exist.", "Application manifests and provider-specific sync facts remain in source_attributes."];
+}, {
+    readonly key: "argocd_app_deploys_to_k8s_service";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "argocd";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "ci_cd";
+        readonly source_type: "argocd_application";
+        readonly provider: "argocd";
+    };
+    readonly relation: "DEPLOYED_ON";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_service";
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "deployment.argocd";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "argocd";
+    readonly provider_category: "deployment";
+    readonly notes: readonly ["Relation naming should be reviewed before ratification; this is not active production behavior."];
+    readonly guardrails: readonly ["ArgoCD contracts are experimental until application nodes and endpoint-specific relation semantics exist.", "Application manifests and provider-specific sync facts remain in source_attributes."];
+}, {
+    readonly key: "argocd_app_deploys_to_k8s_workload";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "argocd";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "ci_cd";
+        readonly source_type: "argocd_application";
+        readonly provider: "argocd";
+    };
+    readonly relation: "DEPLOYED_ON";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "deployment.argocd";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "argocd";
+    readonly provider_category: "deployment";
+    readonly notes: readonly ["Relation naming should be reviewed before ratification; this is not active production behavior."];
+    readonly guardrails: readonly ["ArgoCD contracts are experimental until application nodes and endpoint-specific relation semantics exist.", "Application manifests and provider-specific sync facts remain in source_attributes."];
+}], readonly [{
+    readonly key: "k8s_workload_sends_metrics_to_prometheus_compatible";
+    readonly version: "v1";
+    readonly status: "active";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "SENDS_METRICS_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "prometheus";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.prometheus";
+    readonly evidence_level: "implemented";
+    readonly provider_family: "prometheus_compatible";
+    readonly provider_category: "observability";
+    readonly notes: readonly ["Ratified and implemented Connection Contract V1 active key; also covers Mimir and VictoriaMetrics via helper mapping."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "service_sends_metrics_to_prometheus_compatible";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "SENDS_METRICS_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "prometheus";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.prometheus";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "prometheus_compatible";
+    readonly provider_category: "observability";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "workload_reports_errors_to_sentry";
+    readonly version: "v1";
+    readonly status: "active";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "MONITORED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "sentry";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.sentry";
+    readonly evidence_level: "implemented";
+    readonly provider_family: "sentry";
+    readonly provider_category: "observability";
+    readonly notes: readonly ["Ratified and implemented Connection Contract V1 active key."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "service_reports_errors_to_sentry";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "MONITORED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "sentry";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.sentry";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "sentry";
+    readonly provider_category: "observability";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_sends_logs_to_loki";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "SENDS_LOGS_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "loki";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "logging.loki";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "loki";
+    readonly provider_category: "logging";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_sends_logs_to_elk";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "SENDS_LOGS_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "elk";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "logging.elk";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "elk";
+    readonly provider_category: "logging";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_sends_logs_to_victorialogs";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "SENDS_LOGS_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "victorialogs";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "logging.victorialogs";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "victorialogs";
+    readonly provider_category: "logging";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "service_sends_logs_to_logging_provider";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "SENDS_LOGS_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly label: "logging_provider";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "logging.loki";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "logging_provider";
+    readonly provider_category: "logging";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_sends_traces_to_tempo";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "SENDS_TRACES_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "tempo";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "tracing.tempo";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "tempo";
+    readonly provider_category: "tracing";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_sends_traces_to_victoriatraces";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "SENDS_TRACES_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "victoriatraces";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "tracing.victoriatraces";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "victoriatraces";
+    readonly provider_category: "tracing";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "service_sends_traces_to_tracing_provider";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "SENDS_TRACES_TO";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly label: "tracing_provider";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "tracing.tempo";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "tracing_provider";
+    readonly provider_category: "tracing";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_monitored_by_observability_provider";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "MONITORED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly label: "observability_provider";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.datadog";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "multi_signal_observability";
+    readonly provider_category: "observability";
+    readonly notes: readonly ["Experimental umbrella for Datadog/Grafana/Groundcover-style providers; do not ratify from capability declarations alone."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "service_monitored_by_observability_provider";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "MONITORED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly label: "observability_provider";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.grafana";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "multi_signal_observability";
+    readonly provider_category: "observability";
+    readonly notes: readonly ["Experimental umbrella for Datadog/Grafana/Groundcover-style providers; do not ratify from capability declarations alone."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_monitored_by_datadog";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "MONITORED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "datadog";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.datadog";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "datadog";
+    readonly provider_category: "observability";
+    readonly notes: readonly ["Experimental only; Datadog capabilities do not create workload edges without Gateway proof."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_monitored_by_grafana";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "MONITORED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "grafana";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.grafana";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "grafana";
+    readonly provider_category: "observability";
+    readonly notes: readonly ["Experimental only; Grafana capabilities do not create workload edges without Gateway proof."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_monitored_by_groundcover";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "MONITORED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "monitoring";
+        readonly provider: "groundcover";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "monitoring.groundcover";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "groundcover";
+    readonly provider_category: "observability";
+    readonly notes: readonly ["Experimental only; Groundcover capabilities do not create workload edges without Gateway proof."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "k8s_workload_uses_alerting_provider";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "USES";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "alerting";
+        readonly label: "alerting_provider";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "alerting.provider.reserved";
+    readonly evidence_level: "reserved_shape";
+    readonly provider_family: "alerting_provider";
+    readonly provider_category: "alerting";
+    readonly notes: readonly ["PagerDuty/Zenduty-style incident-routing semantics remain unratified."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts.", "PagerDuty and Zenduty relationship semantics are reserved only; do not infer incident-routing edges from generic MONITORED_BY mappings."];
+}, {
+    readonly key: "k8s_workload_uses_pagerduty_alerting";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "USES";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "alerting";
+        readonly provider: "pagerduty";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "alerting.provider.reserved";
+    readonly evidence_level: "reserved_shape";
+    readonly provider_family: "pagerduty";
+    readonly provider_category: "alerting";
+    readonly notes: readonly ["Reserved only; PagerDuty incident-routing semantics are not ratified."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts.", "Do not emit or score PagerDuty edges until incident-routing semantics are explicitly ratified."];
+}, {
+    readonly key: "k8s_workload_uses_zenduty_alerting";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation: "USES";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "alerting";
+        readonly provider: "zenduty";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "alerting.provider.reserved";
+    readonly evidence_level: "reserved_shape";
+    readonly provider_family: "zenduty";
+    readonly provider_category: "alerting";
+    readonly notes: readonly ["Reserved only; Zenduty incident-routing semantics are not ratified."];
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts.", "Do not emit or score Zenduty edges until incident-routing semantics are explicitly ratified."];
+}, {
+    readonly key: "service_uses_ticketing_provider";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "USES";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "saas_vendor";
+        readonly label: "ticketing_provider";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "ticketing.jira";
+    readonly evidence_level: "reserved_shape";
+    readonly provider_family: "ticketing_provider";
+    readonly provider_category: "ticketing";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}, {
+    readonly key: "service_uses_jsm_request_queue";
+    readonly version: "v1";
+    readonly status: "reserved";
+    readonly family: "integrations";
+    readonly source_endpoint: {
+        readonly entity_type: "service";
+        readonly label: "scoutflo_service";
+    };
+    readonly relation: "USES";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "saas_vendor";
+        readonly source_type: "jsm_request_queue";
+        readonly provider: "jsm";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "ticketing.jsm";
+    readonly evidence_level: "reserved_shape";
+    readonly provider_family: "jsm";
+    readonly provider_category: "ticketing";
+    readonly guardrails: readonly ["Capabilities do not create edges; contracts need source evidence and Gateway-owned validation before emission.", "Provider-specific query hints, IDs, URLs, and setup details remain in source_attributes.", "Candidate, experimental, and reserved entries are not production-ratified contracts."];
+}]];