@sdd-method/sdd-cli 0.100.0 → 0.101.1

package/dist/lib/catalogue/canonical-schema.yaml

@@ -12,7 +12,7 @@
 # app-baseline, integration-baseline) via the seed-file lists at
 # docs/method/foundations/*-method-seed-files.txt. Consumers receive it
 # through `sdd-cli sync`. Drift detection comes for free from the
-# refuse-or-overwrite model in ADR 0114 — the schema is in
+# refuse-or-overwrite model in M-ADR 0114 — the schema is in
 # MANAGED_PATHS.txt; consumer-side modification fails the next sync.
 #
 # Schema versioning: every structural change increments schema_version.
@@ -20,7 +20,7 @@
 # versions independently of sdd-manifest-schema.yaml and
 # aggregation-manifest-schema.yaml. The CLI declares per-schema compat
 # ranges in `src/lib/catalogue/schema-compat.ts` and fails fast on
-# out-of-range versions. Per ADR 0133 the canonical builder + aggregator
+# out-of-range versions. Per M-ADR 0133 the canonical builder + aggregator
 # update in lockstep with this schema; with the canonical builder shipped
 # from sdd-method, "lockstep" collapses to a single CLI version bump.
 #
@@ -34,7 +34,7 @@
 #     MUST release in lockstep with `supports` updated; migration tooling
 #     required.
 #
-# Federation: per ADR 0134 catalogues are built per SDD and aggregated at
+# Federation: per M-ADR 0134 catalogues are built per SDD and aggregated at
 # the ecosystem root. Every node catalogue carries a `source_sdd_id`
 # column populated by the aggregator. Foreign keys may declare
 # `external: true` — these are skipped by the per-SDD builder (logged as
@@ -45,9 +45,51 @@
 # Builder contract: see docs/method/methods/catalogue-builder-specification.md.
 # Category taxonomy: see docs/method/methods/product-category-taxonomy.md.
 
-schema_version: "2.39.0"
+schema_version: "2.40.1"
 schema_owner: "sdd-method"
 schema_status: "canonical"
+# Bump rationale (2.40.1 — description patch, 2026-07-24): prefixes the 75
+# remaining bare `ADR NNNN` references in this file as `M-ADR NNNN` (M-ADR 0186
+# §4.6 canonical origin prefixes). All 25 distinct numbers were verified to
+# resolve to method ADRs; the hyphen form `ADR-NNNN` is left untouched, since it
+# is the deliberately prefix-stripped catalogue identity token (M-ADR 0140 §4.1).
+# validate-no-bare-adr.sh now PASSES repo-wide (579 files) — it had been red on
+# this one file. Prose only: no column, enum, key or nullability changed. Patched
+# rather than folded into 2.40.0 because 2.40.0 had already been published (in
+# @sdd-method/sdd-cli 0.101.0), and two different byte-contents under one version
+# string is the same silent divergence the digest hook exists to prevent.
+# Bump rationale (2.40.0 — additive minor, per M-ADR 0193 §4.7, 2026-07-24):
+# adds a derived `direction` column (inbound | output) to
+# application_data_plane_bindings. §4.7 models the output side as a
+# DISTINGUISHED SUB-SET of the `pattern` vocabulary, and names three rules that
+# branch on direction — reconciliation with product_platform_dependencies is
+# inbound-only, the archetype-default WARN must compare like with like, and the
+# M-ADR 0187 convergence reasoning differs by direction. The catalogue could not
+# express that distinction: consumers had to re-derive it by hardcoding the
+# pattern→direction mapping, and any that forgot would silently reconcile an
+# output-side binding as though it consumed something. `direction` materialises
+# the sub-set the ADR already declares. Derived from `pattern` by a single
+# method-tier mapping (not authored — it is not a manifest field), so it adds no
+# authoring burden and cannot disagree with `pattern`. Deliberately NOT part of
+# the primary key: identity is unchanged ({product_id}__{pattern}__{locality}__
+# {target}), and a derived value adds nothing to it. Also corrects four
+# descriptions left stale by 2.37.0/2.38.0: `pattern` and the deviations
+# `expectation` token list both omitted generate/publish, `runtime` omitted
+# generate from the compute-bearing set, and `locality` claimed only own-store
+# may be empty. Backward-compatible; SCHEMA_COMPAT "^2.0.0".
+# Bump rationale (2.35.0–2.39.0 — RESTORED to canonical 2026-07-24): these five
+# versions were authored directly into sdd-cli's VENDORED copy and never landed
+# here, leaving the canonical five versions behind while builders shipped
+# against the newer shape — the exact silent divergence M-ADR 0133 §4.2's
+# direction-of-truth rule (canonical -> vendored, never the reverse) exists to
+# prevent. check-canonical-schema-digest.sh detects it when pointed at a
+# consumer checkout. Restored content: 2.35.0 `surface` +
+# `application_archetype` columns on products (M-ADR 0167 / 0191); 2.36.0
+# conditionally-nullable target_service_id on product_platform_dependencies
+# (M-ADR 0192 async shared-stream); 2.37.0 application_data_plane_bindings
+# (M-ADR 0193); 2.38.0 application_data_plane_deviations (M-ADR 0191 §4.3
+# overlay); 2.39.0 application_conformance_coverage (§4.3 WS4). No content is
+# newly decided here — this records where it came from.
 # Bump rationale (2.34.0 — additive minor, per M-ADR 0189 F26 §3, ratified
 # 2026-07-10): adds the `persona_container` edge — the L2-granularity
 # companion to persona_c4system. Person→Container Rels are drawn routinely
@@ -148,7 +190,7 @@ schema_status: "canonical"
 # have broken it silently. Backward-compatible; SCHEMA_COMPAT stays "^2.0.0".
 # Bump rationale (2.26.0 — additive minor, per the repo-registry federation,
 # 2026-06-18): marks `repo_contract.contract_id` external_for_profiles
-# [application-product, integration-product]. Per ADR 0147 a repo's
+# [application-product, integration-product]. Per M-ADR 0147 a repo's
 # service-architecture external interfaces are a contract-CONSUMES source; an
 # app/integration repo legitimately consumes a platform-resident contract (and,
 # transitionally, its own BFF contract still held by the platform SDD before
@@ -165,7 +207,7 @@ schema_status: "canonical"
 # 14 app SDDs hold screens but zero local feature specs). The per-SDD app build emits
 # the edge carrying the bare realises slug and logs it [finding] external; the
 # aggregator resolves the slug to the platform feature id (one slug vocabulary
-# per capability — ADR 0177; ambiguous estate-wide matches are refused with a
+# per capability — M-ADR 0177; ambiguous estate-wide matches are refused with a
 # divergence finding, never guessed). Forward/app-owned estates are unaffected
 # (the feature resolves locally → internal pass). Additive minor — the FK
 # field is optional and SCHEMA_COMPAT stays "^2.0.0".
@@ -173,7 +215,7 @@ schema_status: "canonical"
 # coordination item R5, 2026-06-13): adds an optional `external_for_profiles`
 # array to FK rules and applies it to `capabilities.domain_id`. An app- or
 # integration-product SDD legitimately names a platform-resident domain
-# (ADR 0136: app/integration SDDs own no domains.csv rows), so the per-SDD
+# (M-ADR 0136: app/integration SDDs own no domains.csv rows), so the per-SDD
 # build cannot resolve that FK locally — yet the platform SDD genuinely owns
 # its domains and SHOULD keep the local check. `external_for_profiles:
 # [application-product, integration-product]` makes the FK behave external
@@ -193,7 +235,7 @@ schema_status: "canonical"
 # separate column from `status` (documentation maturity) — a product can be
 # reviewed AND deprecated. Backward-compatible — older readers ignore them;
 # SCHEMA_COMPAT stays at "^2.0.0".
-# Bump rationale (2.20.0 — additive minor, per ADR 0175): adds a nullable,
+# Bump rationale (2.20.0 — additive minor, per M-ADR 0175): adds a nullable,
 # free-form `evidence_class` column to `capabilities`, `contracts`,
 # `domain_models`, `entities`, `events` — an evidence-class marker for the
 # documentation-reverse method (packaged-SaaS / vendor-base packs). Free-form
@@ -206,7 +248,7 @@ schema_status: "canonical"
 # entities, inherited file-level), and per-event `evidence_class` with a
 # file-level fallback in event-catalog.yaml (events). Backward-compatible —
 # older readers ignore it; SCHEMA_COMPAT stays at "^2.0.0".
-# Bump rationale (2.19.0 — additive minor, per ADR 0170 §4.6): adds a nullable,
+# Bump rationale (2.19.0 — additive minor, per M-ADR 0170 §4.6): adds a nullable,
 # free-form `context` column to `screens`, `contracts`, `services`, `entities` —
 # a bounded-context membership marker (adopter-defined values; not an FK, the
 # `group`/`source` free-form pattern). Lets a consumer that spans multiple
@@ -215,9 +257,9 @@ schema_status: "canonical"
 # contracts `info.x-context`); `services`/`entities` carry the column but await a
 # derivation source. Backward-compatible — older readers ignore it; SCHEMA_COMPAT
 # stays at "^2.0.0".
-# Bump rationale (2.15.0 — additive minor, per ADR 0161): adds a new edge
+# Bump rationale (2.15.0 — additive minor, per M-ADR 0161): adds a new edge
 # catalogue `feature_event` materialising the (feature, event, role) edge
-# via the derived join `feature_service ⋈ service_event`. Mirrors ADR 0160's
+# via the derived join `feature_service ⋈ service_event`. Mirrors M-ADR 0160's
 # capability_event derived-source pattern at the feature level, completing
 # the capability/feature/service trio of materialised event edges. No
 # authored shape — every row carries `source=derived`. Backward-compatible —
@@ -226,7 +268,7 @@ schema_status: "canonical"
 # ─── Canonical enums ────────────────────────────────────────────────────────
 #
 # Enums constrain the values certain string columns may take. The canonical
-# builder (sdd-cli catalogue build, per ADR 0134 §4.6) reads these from the
+# builder (sdd-cli catalogue build, per M-ADR 0134 §4.6) reads these from the
 # schema rather than hardcoding them, so adopters can update the canonical
 # enum here without forking builder code.
 
@@ -254,7 +296,7 @@ enums:
   c4_container_type:
     description: >
       Canonical C4 container kind for `c4_containers.type`, aligned with
-      c4model.com/abstractions (per ADR 0155). A C4 container is something
+      c4model.com/abstractions (per M-ADR 0155). A C4 container is something
       that must be running for the system to work — an application or a
       data store.
 
@@ -358,7 +400,7 @@ catalogues:
       - { name: reference_architecture_equivalent, type: string, nullable: true }
       - { name: status, type: string, nullable: false, description: "active | deferred | absent. The builder emits 'active' for every discovered domain directory — a domain that exists on disk is active by definition; deferred/absent rows have no authoring source yet (would come from roadmap/archetype declarations, not discovery)." }
       - { name: repo_count, type: int, nullable: false }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator at merge time per ADR 0134; left empty by per-SDD builders." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator at merge time per M-ADR 0134; left empty by per-SDD builders." }
 
   products: &products_def
     primary_key: id
@@ -367,7 +409,7 @@ catalogues:
     columns:
       - { name: id, type: string, nullable: false, description: "product_id slug." }
       - { name: name, type: string, nullable: false }
-      - { name: domain_id, type: string, nullable: true, description: "Owning capability domain. Populated for platform-profile products (platform-root, platform-subsystem). App and integration products do not have a primary domain — see ADR 0136." }
+      - { name: domain_id, type: string, nullable: true, description: "Owning capability domain. Populated for platform-profile products (platform-root, platform-subsystem). App and integration products do not have a primary domain — see M-ADR 0136." }
       - { name: profile, type: string, nullable: false, description: "platform-profile | application-product | integration-product | support-repo." }
       - { name: category, type: string, nullable: true, description: "Architectural classification per docs/method/methods/product-category-taxonomy.md. Values: platform-root | platform-subsystem | application-product | integration-provider | integration-umbrella | support-repo. Determines whether the Product gets a c4_systems row." }
       - { name: doc_path, type: string, nullable: false, description: "Path to _product/ directory, relative to docs/." }
@@ -376,13 +418,13 @@ catalogues:
       - { name: deprecated_date, type: date, nullable: true, description: "Date the deprecation decision took effect. Only meaningful when lifecycle=deprecated. From the manifest's deprecated_date:. Added in 2.22.0." }
       - { name: successor_sdd_id, type: string, nullable: true, description: "For deprecated products: sdd_id of the superseding SDD. Same vocabulary as sdd_id/source_sdd_id (NOT products.id). Soft reference — the aggregator orphan-checks it against contributing sdd_ids ([finding] orphan when unresolved), never a hard FK: the successor may live outside the aggregation scope. Added in 2.22.0." }
       - { name: surface, type: string, nullable: true, description: "ui | api (empty for non-application-product). Application-product surface trait from the manifest's surface: field (M-ADR 0167, sdd-manifest-schema 1.2.0). Empty on non-application products. Added in 2.35.0." }
-      - { name: application_archetype, type: string, nullable: true, description: "Application-product shape classification from the manifest's application_archetype: field (M-ADR 0191, sdd-manifest-schema 1.2.0). Resolved-enum over a tiered vocabulary (method: unclassified; reference-architecture bundle; adopter). Defaults to 'unclassified' for application-product (with a coverage finding), empty for other profiles. Distinct from the ADR 0173 domain archetype and ADR 0169 openui archetype. Added in 2.35.0." }
+      - { name: application_archetype, type: string, nullable: true, description: "Application-product shape classification from the manifest's application_archetype: field (M-ADR 0191, sdd-manifest-schema 1.2.0). Resolved-enum over a tiered vocabulary (method: unclassified; reference-architecture bundle; adopter). Defaults to 'unclassified' for application-product (with a coverage finding), empty for other profiles. Distinct from the M-ADR 0173 domain archetype and M-ADR 0169 openui archetype. Added in 2.35.0." }
       - { name: synthesis_quality, type: int, nullable: true, description: "Score 0-10 from assessment block (reverse method only)." }
       - { name: synthesis_band, type: string, nullable: true, description: "developing | working | strong." }
       - { name: last_assessed, type: date, nullable: true }
       - { name: highest_snapshot_impact, type: string, nullable: true }
       - { name: repo_count, type: int, nullable: false, description: "Number of repos mapped to this product." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   applications:
     <<: *products_def
@@ -390,19 +432,19 @@ catalogues:
 
   integrations:
     primary_key: id
-    description: "Granular provider adapters. Each row is either (a) an integration-product SDD's own row (one per SDD; parent_product_id empty), or (b) a manifest-declared sub-integration of a multi-provider monolith (parent_product_id = umbrella SDD's id). Per ADR 0144 (schema 2.6.0), sub-integrations are declared via the optional `sub_integrations:` array in `integration-manifest.yaml`."
+    description: "Granular provider adapters. Each row is either (a) an integration-product SDD's own row (one per SDD; parent_product_id empty), or (b) a manifest-declared sub-integration of a multi-provider monolith (parent_product_id = umbrella SDD's id). Per M-ADR 0144 (schema 2.6.0), sub-integrations are declared via the optional `sub_integrations:` array in `integration-manifest.yaml`."
     foreign_keys:
       - { column: domain_id, references: domains.id, nullable: true }
       - { column: parent_product_id, references: products.id, nullable: true }
     columns:
       - { name: id, type: string, nullable: false, description: "Provider slug." }
       - { name: name, type: string, nullable: false }
-      - { name: domain_id, type: string, nullable: true, description: "Provider adapters are federation nodes, not capability-domain members. Left empty per ADR 0136." }
-      - { name: parent_product_id, type: string, nullable: true, description: "Umbrella integration-product. Empty for an SDD's own row; set to the SDD's integrationId for sub-integration rows declared via integration-manifest.yaml `sub_integrations:` (per ADR 0144, schema 2.6.0)." }
+      - { name: domain_id, type: string, nullable: true, description: "Provider adapters are federation nodes, not capability-domain members. Left empty per M-ADR 0136." }
+      - { name: parent_product_id, type: string, nullable: true, description: "Umbrella integration-product. Empty for an SDD's own row; set to the SDD's integrationId for sub-integration rows declared via integration-manifest.yaml `sub_integrations:` (per M-ADR 0144, schema 2.6.0)." }
       - { name: category, type: string, nullable: false, description: "oem | device | fleet | camera | legacy | data-sharing | gateway-framework (extensible per ecosystem)." }
       - { name: doc_path, type: string, nullable: false }
       - { name: repo_count, type: int, nullable: false }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   adrs:
     primary_key: id
@@ -419,7 +461,7 @@ catalogues:
       - { name: superseded_by_id, type: string, nullable: true }
       - { name: inference_confidence, type: string, nullable: true, description: "high | medium | low (reverse-inferred ADRs only)." }
       - { name: supersedes_raw, type: string, nullable: true, description: "Raw text from Supersedes bullet for later parsing." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   glossary_items:
     primary_key: id
@@ -435,11 +477,11 @@ catalogues:
       - { name: aliases, type: string, nullable: true, description: "';'-separated list." }
       - { name: evidence, type: string, nullable: true }
       - { name: notes, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   glossary_xref:
     primary_key: id
-    description: "Edge: cross-domain glossary relationships from glossary-alignment-manifest.yaml. Per ADR 0158, four walkers ingest into this catalogue: (a) forward declared pair-form {source, target} entries under aliases/conflicts, (b) reverse-method cross_domain_terms (emits references edges per referencer→owner), (c) reverse-method multi-domain conflicts (pair-wise expansion across domains[]), (d) forward-method supersedes (status: superseded entries with superseded_by back-link)."
+    description: "Edge: cross-domain glossary relationships from glossary-alignment-manifest.yaml. Per M-ADR 0158, four walkers ingest into this catalogue: (a) forward declared pair-form {source, target} entries under aliases/conflicts, (b) reverse-method cross_domain_terms (emits references edges per referencer→owner), (c) reverse-method multi-domain conflicts (pair-wise expansion across domains[]), (d) forward-method supersedes (status: superseded entries with superseded_by back-link)."
     foreign_keys:
       - { column: source_id, references: glossary_items.id, nullable: false }
       - { column: target_id, references: glossary_items.id, nullable: false }
@@ -447,11 +489,11 @@ catalogues:
       - { name: id, type: string, nullable: false, description: "Composite: {source_id}__{relation}__{target_id}." }
       - { name: source_id, type: string, nullable: false }
       - { name: target_id, type: string, nullable: false }
-      - { name: relation, type: string, nullable: false, description: "alias-of | conflicts-with | references | supersedes (extended in schema 2.12.0 per ADR 0158)." }
+      - { name: relation, type: string, nullable: false, description: "alias-of | conflicts-with | references | supersedes (extended in schema 2.12.0 per M-ADR 0158)." }
 
   entity_glossary:
     primary_key: id
-    description: "Edge: data-model entity → canonical glossary term. Added in schema 2.12.0 per ADR 0158. Source: glossary-alignment-manifest.yaml `models[].entities[]` with status ∈ {aligned, matched_direct} and non-empty glossary_term. PK derives from (domain, entity_name, glossary_item) so same-domain multi-diagram entries collapse to one row; cross-domain entries (e.g. platform-wide conceptual model + domain-specific model) emit one row per domain — legitimate cross-level cataloguing."
+    description: "Edge: data-model entity → canonical glossary term. Added in schema 2.12.0 per M-ADR 0158. Source: glossary-alignment-manifest.yaml `models[].entities[]` with status ∈ {aligned, matched_direct} and non-empty glossary_term. PK derives from (domain, entity_name, glossary_item) so same-domain multi-diagram entries collapse to one row; cross-domain entries (e.g. platform-wide conceptual model + domain-specific model) emit one row per domain — legitimate cross-level cataloguing."
     foreign_keys:
       - { column: domain_id, references: domains.id, nullable: false }
       - { column: glossary_item_id, references: glossary_items.id, nullable: false }
@@ -461,7 +503,7 @@ catalogues:
       - { name: entity_name, type: string, nullable: false }
       - { name: glossary_item_id, type: string, nullable: false }
       - { name: status, type: string, nullable: false, description: "aligned | matched_direct. Conflicting statuses within a domain resolve matched_direct > aligned with a divergence finding." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   services:
     primary_key: id
@@ -473,16 +515,16 @@ catalogues:
       - { name: id, type: string, nullable: false, description: "Service id, derived from artifact_id where artifact_type=service." }
       - { name: name, type: string, nullable: false }
       - { name: product_id, type: string, nullable: false }
-      - { name: domain_id, type: string, nullable: true, description: "Owning capability domain. Populated when the repo-config declared domain resolves to a docs/domains/<slug>/ in the local SDD; left empty otherwise per ADR 0136." }
+      - { name: domain_id, type: string, nullable: true, description: "Owning capability domain. Populated when the repo-config declared domain resolves to a docs/domains/<slug>/ in the local SDD; left empty otherwise per M-ADR 0136." }
       - { name: primary_repo_id, type: string, nullable: true, description: "Main contributing repo. Nullable when service spans repos." }
       - { name: runtime_type, type: string, nullable: true, description: "serverless-framework | jvm-service | lambda | k8s | ..." }
       - { name: language, type: string, nullable: true }
       - { name: component_type, type: string, nullable: true, description: "bff | api | consumer | ui | collector | processor | ..." }
       - { name: status, type: string, nullable: true, description: "production-wired | non-production | library." }
       - { name: confidence, type: string, nullable: true, description: "high | medium | low (reverse-method classification)." }
-      - { name: context, type: string, nullable: true, description: "Bounded-context membership (per ADR 0170 §4.6). Free-form adopter label, orthogonal to domain_id. Not an FK. Carried for forward-parity; awaits a derivation source (e.g. from the service's contracts' x-context). Added in schema 2.19.0." }
+      - { name: context, type: string, nullable: true, description: "Bounded-context membership (per M-ADR 0170 §4.6). Free-form adopter label, orthogonal to domain_id. Not an FK. Carried for forward-parity; awaits a derivation source (e.g. from the service's contracts' x-context). Added in schema 2.19.0." }
       - { name: description, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
     column_enums:
       component_type: enums.service_type  # canonical builder validates against the service_type enum above
 
@@ -490,7 +532,7 @@ catalogues:
     primary_key: id
     foreign_keys:
       # external_for_profiles (2.23.0): app/integration capabilities name a
-      # platform-resident domain (ADR 0136) — resolve at aggregation for those
+      # platform-resident domain (M-ADR 0136) — resolve at aggregation for those
       # profiles, keep the local check for platform-profile. Required-ness is
       # unchanged: a capability must still name a domain (nullable: false).
       - { column: domain_id, references: domains.id, nullable: false, external_for_profiles: [application-product, integration-product] }
@@ -501,8 +543,8 @@ catalogues:
       - { name: domain_id, type: string, nullable: false }
       - { name: tree_category, type: string, nullable: true, description: "Top-level grouping when capability comes from a capability tree (reverse)." }
       - { name: parent_capability_id, type: string, nullable: true }
-      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the capability's claims, from `capability.evidence_class` in the traceability manifest. Free-form; conventional values code-reverse | vendor-doc | operational (ADR 0175). Empty when undeclared. Added in schema 2.20.0." }
-      - { name: context, type: string, nullable: true, description: "Bounded-context membership from `capability.context` in the traceability manifest (per ADR 0170 §4.6) — completes the context dimension across screens/contracts/services/entities (2.19.0). Free-form adopter label, orthogonal to domain_id. Not an FK. Enables the screen↔capability context cross-check (convention finding, not FK). Empty when undeclared. Added in schema 2.21.0." }
+      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the capability's claims, from `capability.evidence_class` in the traceability manifest. Free-form; conventional values code-reverse | vendor-doc | operational (M-ADR 0175). Empty when undeclared. Added in schema 2.20.0." }
+      - { name: context, type: string, nullable: true, description: "Bounded-context membership from `capability.context` in the traceability manifest (per M-ADR 0170 §4.6) — completes the context dimension across screens/contracts/services/entities (2.19.0). Free-form adopter label, orthogonal to domain_id. Not an FK. Enables the screen↔capability context cross-check (convention finding, not FK). Empty when undeclared. Added in schema 2.21.0." }
       - { name: description, type: string, nullable: true }
       - { name: status, type: string, nullable: false, description: "active | planned | deprecated. Default 'active'." }
       - { name: spec_path, type: string, nullable: true, description: "Path to capability spec file when one exists." }
@@ -510,7 +552,7 @@ catalogues:
       - { name: runway_classification, type: string, nullable: true, description: "Business | Enabler-Runway | Hybrid (forward declares; reverse nullable until backfilled)." }
       - { name: data_subset, type: string, nullable: true, description: "Keying-axis marker for foundational-tier / synthesis-tier capabilities whose evidence is keyed by ownership boundary or data subset rather than app group. Populated from `capability.data_subset` in the traceability manifest. Empty for implementing-tier capabilities (those use app_group on per-evidence rows). See `docs/method/methods/reverse/rubrics/reverse-platform-evidence-quality.md` §`app_group:` → `data_subset:` rename. Added in schema 2.9.0." }
       - { name: slice_scope, type: string, nullable: true, description: "Per-slice marker when one capability legitimately covers multiple app groups or data subsets (e.g. a compliance capability spanning several regulated-fleet sub-groups). Same capability_id may appear across multiple rows when sliced; row identity is then `(id, slice_scope)`. Empty when the capability is not sliced. Per-slice AC numbering convention: AC1-ACN unsuffixed for the first slice; subsequent slices use AC numbering suffixed by slice. See `docs/method/methods/reverse/rubrics/reverse-platform-evidence-quality.md` §`slice_scope:` and `docs/method/methods/capability-spec-template.md` Guideline 9. Added in schema 2.9.0." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   feature_groups:
     primary_key: id
@@ -535,7 +577,7 @@ catalogues:
       - { name: parent_group_id, type: string, nullable: true, description: "Self-reference for nested groups (H3 within H2)." }
       - { name: description, type: string, nullable: true, description: "Authored description (when group has explicit metadata) or null when derived from heading only." }
       - { name: source, type: string, nullable: false, description: "feature-tree-h2 | feature-tree-h3 | feature-spec-explicit (when an authored feature spec declares group membership) | capability-spec-explicit." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   features:
     primary_key: id
@@ -554,9 +596,9 @@ catalogues:
       - { name: description, type: string, nullable: true }
       - { name: maturity, type: string, nullable: true, description: "Standard: working | provisional | unknown | absent. Ecosystem-specific values may be added with parser awareness." }
       - { name: status, type: string, nullable: false, description: "Default 'active'." }
-      - { name: source, type: string, nullable: false, description: "feature-tree | feature-set | capability-spec | feature-spec | feature-grounding. NOTE: feature-tree-group source removed in 1.3.0 — groups are now first-class in feature_groups.csv. As of schema 2.2.0, source: feature-tree is emitted by the canonical builder for rows derived from feature-tree.md bullets. As of schema 2.5.0, source: feature-grounding is emitted for rows derived from `docs/domains/<dom>/design/<capability>/feature-grounding.md` markdown tables (per ADR 0143). As of schema 2.7.0, source: capability-spec is emitted by the canonical builder for rows derived from `## Feature Grounding (code-path trace)` tables in `docs/domains/<dom>/product/<capability>.md` capability spec markdown (per ADR 0145). Feature-grounding and capability-spec rows are both capability-owned: product_id is empty; capability_id resolves from the file path." }
+      - { name: source, type: string, nullable: false, description: "feature-tree | feature-set | capability-spec | feature-spec | feature-grounding. NOTE: feature-tree-group source removed in 1.3.0 — groups are now first-class in feature_groups.csv. As of schema 2.2.0, source: feature-tree is emitted by the canonical builder for rows derived from feature-tree.md bullets. As of schema 2.5.0, source: feature-grounding is emitted for rows derived from `docs/domains/<dom>/design/<capability>/feature-grounding.md` markdown tables (per M-ADR 0143). As of schema 2.7.0, source: capability-spec is emitted by the canonical builder for rows derived from `## Feature Grounding (code-path trace)` tables in `docs/domains/<dom>/product/<capability>.md` capability spec markdown (per M-ADR 0145). Feature-grounding and capability-spec rows are both capability-owned: product_id is empty; capability_id resolves from the file path." }
       - { name: runway, type: string, nullable: true, description: "Optional adopter-owned lifecycle / migration marker. Free string at method level — the schema declares no enum and ships no controlled vocabulary. Adopters MAY declare a per-SDD `feature-runway-vocabulary.yaml` at their SDD root; when present, the canonical builder validates captured values against it and emits a `convention` finding for unknown values. Empty when the adopter does not track migration state. Comparability across SDDs requires ecosystem-level vocabulary alignment as an explicit pre-step. Added in schema 2.2.0." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   personas:
     primary_key: id
@@ -568,7 +610,7 @@ catalogues:
       - { name: product_id, type: string, nullable: false }
       - { name: role, type: string, nullable: true }
       - { name: description, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   user_journeys:
     primary_key: id
@@ -582,7 +624,7 @@ catalogues:
       - { name: supporting_personas, type: string, nullable: true }
       - { name: trigger, type: string, nullable: true }
       - { name: goal, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   contracts:
     primary_key: id
@@ -593,20 +635,20 @@ catalogues:
       - { name: id, type: string, nullable: false }
       - { name: name, type: string, nullable: false, description: "Display name from info.title or artifact_id." }
       - { name: service_id, type: string, nullable: true, description: "Exposing service; resolved via primary_repo_id ↔ OpenAPI x-source-repo." }
-      - { name: source_repo_id, type: string, nullable: true, description: "Repo owning the contract source. Distinct from exposing service's repo per ADR 0110 (sibling-repo pattern)." }
+      - { name: source_repo_id, type: string, nullable: true, description: "Repo owning the contract source. Distinct from exposing service's repo per M-ADR 0110 (sibling-repo pattern)." }
       - { name: kind, type: string, nullable: false, description: "rest | graphql | rpc | event. rpc covers Proto/gRPC; event covers Avro schemas." }
       - { name: version, type: string, nullable: true }
-      - { name: status, type: string, nullable: false, description: "active | deprecated. Default 'active'. As of 2.22.0 the builder wires 'deprecated' from BASELINE.md deprecation-runway entries (contracts.{openapi|proto|avro}[].status, matched on path == spec_path; per ADR 0073 §4.8) when a BASELINE.md exists at the SDD root." }
+      - { name: status, type: string, nullable: false, description: "active | deprecated. Default 'active'. As of 2.22.0 the builder wires 'deprecated' from BASELINE.md deprecation-runway entries (contracts.{openapi|proto|avro}[].status, matched on path == spec_path; per M-ADR 0073 §4.8) when a BASELINE.md exists at the SDD root." }
       - { name: spec_path, type: string, nullable: true }
       - { name: visibility, type: string, nullable: true, description: "public | private | internal." }
-      - { name: context, type: string, nullable: true, description: "Bounded-context membership from OpenAPI `info.x-context` (per ADR 0170 §4.6). Free-form adopter label, orthogonal to the contract's domain folder. Not an FK. Empty when untagged. Added in schema 2.19.0." }
-      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the contract surface, from OpenAPI `info.x-evidence-class` (document root accepted as fallback, exactly like x-context). Free-form; conventional values code-reverse | vendor-doc | operational (ADR 0175). Empty when untagged. Added in schema 2.20.0." }
+      - { name: context, type: string, nullable: true, description: "Bounded-context membership from OpenAPI `info.x-context` (per M-ADR 0170 §4.6). Free-form adopter label, orthogonal to the contract's domain folder. Not an FK. Empty when untagged. Added in schema 2.19.0." }
+      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the contract surface, from OpenAPI `info.x-evidence-class` (document root accepted as fallback, exactly like x-context). Free-form; conventional values code-reverse | vendor-doc | operational (M-ADR 0175). Empty when untagged. Added in schema 2.20.0." }
       - { name: description, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   events:
     primary_key: id
-    description: "Asynchronous messages. Cross-domain events (e.g. shared envelopes) leave domain_id empty. Per ADR 0156 (multi-source ingestion, schema 2.12.0): forward-method canonical source is `contracts/avro/*.avsc` files; reverse-method canonical source is `docs/domains/{domain}/contracts/events/event-catalog.yaml`. YAML wins on name/domain/publisher/transport/consumers; avsc augments schema_path/version. Both paths run and merge by id slug."
+    description: "Asynchronous messages. Cross-domain events (e.g. shared envelopes) leave domain_id empty. Per M-ADR 0156 (multi-source ingestion, schema 2.12.0): forward-method canonical source is `contracts/avro/*.avsc` files; reverse-method canonical source is `docs/domains/{domain}/contracts/events/event-catalog.yaml`. YAML wins on name/domain/publisher/transport/consumers; avsc augments schema_path/version. Both paths run and merge by id slug."
     foreign_keys:
       - { column: publisher_service_id, references: services.id, nullable: true }
       - { column: domain_id, references: domains.id, nullable: true }
@@ -615,11 +657,11 @@ catalogues:
       - { name: name, type: string, nullable: false }
       - { name: publisher_service_id, type: string, nullable: true }
       - { name: domain_id, type: string, nullable: true }
-      - { name: transport, type: string, nullable: true, description: "Open string per ADR 0156. Recommended values: kafka | sns | sqs | kinesis | eventbridge | mongodb-change-stream | nats | activemq | rabbitmq | jms | other. Values outside the recommended set emit [finding] convention." }
-      - { name: schema_path, type: string, nullable: true, description: "Path to event schema (Avro .avsc or JSON-Schema .json/.schema.json). Nullable — leave empty for loosely-typed events (e.g. ActiveMQ JMS, NATS with payload_schema: {type: object}). Per ADR 0156." }
+      - { name: transport, type: string, nullable: true, description: "Open string per M-ADR 0156. Recommended values: kafka | sns | sqs | kinesis | eventbridge | mongodb-change-stream | nats | activemq | rabbitmq | jms | other. Values outside the recommended set emit [finding] convention." }
+      - { name: schema_path, type: string, nullable: true, description: "Path to event schema (Avro .avsc or JSON-Schema .json/.schema.json). Nullable — leave empty for loosely-typed events (e.g. ActiveMQ JMS, NATS with payload_schema: {type: object}). Per M-ADR 0156." }
       - { name: version, type: string, nullable: true }
-      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the event claim, from the per-event `evidence_class` key (alias `evidence-class`) in event-catalog.yaml, falling back to a file-level `evidence_class`/`evidence-class` top-level key in the same catalog YAML. Free-form; conventional values code-reverse | vendor-doc | operational (ADR 0175). Empty for avsc-only events and when undeclared. Added in schema 2.20.0." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the event claim, from the per-event `evidence_class` key (alias `evidence-class`) in event-catalog.yaml, falling back to a file-level `evidence_class`/`evidence-class` top-level key in the same catalog YAML. Free-form; conventional values code-reverse | vendor-doc | operational (M-ADR 0175). Empty for avsc-only events and when undeclared. Added in schema 2.20.0." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   c4_systems:
     primary_key: id
@@ -632,7 +674,7 @@ catalogues:
       - { name: kind, type: string, nullable: false, description: "platform | subsystem | application | integration. Derived 1:1 from manifest.category — see enums.c4_system_kind." }
       - { name: diagram_path, type: string, nullable: true, description: "Path to L1 mermaid/markdown. Nullable — row exists for any architectural Product even if no L1 diagram has been authored yet (visible coverage gap)." }
       - { name: description, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
     column_enums:
       kind: enums.c4_system_kind
 
@@ -654,10 +696,10 @@ catalogues:
       - { name: system_id, type: string, nullable: false, description: "Owning C4 system (every container is in exactly one system)." }
       - { name: domain_id, type: string, nullable: true, description: "Optional organisational domain tag (denormalised; not C4-structural)." }
       - { name: service_id, type: string, nullable: true, description: "Matched by container name ↔ service name/repo where possible." }
-      - { name: type, type: string, nullable: true, description: "Canonical C4 container kind — see enums.c4_container_type (Application | Data Store). Legacy values Infrastructure | External System are recognised-but-deprecated during 2.x (WARN); External System boxes belong in c4_external_systems. Per ADR 0155. Enum binding is advisory until 3.0.0." }
+      - { name: type, type: string, nullable: true, description: "Canonical C4 container kind — see enums.c4_container_type (Application | Data Store). Legacy values Infrastructure | External System are recognised-but-deprecated during 2.x (WARN); External System boxes belong in c4_external_systems. Per M-ADR 0155. Enum binding is advisory until 3.0.0." }
       - { name: technology, type: string, nullable: true }
       - { name: description, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   c4_components:
     primary_key: id
@@ -676,19 +718,19 @@ catalogues:
       - { name: service_id, type: string, nullable: true, description: "Denormalised: the service the parent container represents, when applicable." }
       - { name: path, type: string, nullable: true }
       - { name: responsibility, type: string, nullable: true }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   c4_external_systems:
     primary_key: id
     description: >
       C4 external software systems — peer systems at the L1 context level
-      that the ecosystem integrates with but does not own (per ADR 0155).
+      that the ecosystem integrates with but does not own (per M-ADR 0155).
       Rendered `System_Ext(...)` on L1/L2 diagrams. NOT a c4_container
       (external systems are not inside your system) and NOT a c4_system
       (they have no owning Product). External systems are inherently shared
       references: the same external system may be declared by multiple SDDs,
       so the aggregator dedups identical rows by PK rather than failing on
-      duplicate (the one narrowly-scoped exception to ADR 0134's
+      duplicate (the one narrowly-scoped exception to M-ADR 0134's
       duplicate-PK rule); conflicting attributes on the same id surface as a
       `convention` finding.
     columns:
@@ -698,7 +740,7 @@ catalogues:
       - { name: description, type: string, nullable: true, description: "What the external system provides." }
       - { name: declared_id, type: string, nullable: true, description: "The diagram entry id of the first-seen declaration (M-ADR 0189 §4.2) — the declared identity the aggregator resolves against estate identifiers at adjudication. Added 2.30.0." }
       - { name: source_scope, type: string, nullable: true, description: "Scope of the first-seen declaration: l1 (context diagram) or l2 (container diagram — scope-relative per M-ADR 0189 §4.1). Added 2.30.0." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   repositories:
     primary_key: id
@@ -708,7 +750,7 @@ catalogues:
     columns:
       - { name: id, type: string, nullable: false, description: "canonical_repo_key." }
       - { name: name, type: string, nullable: false }
-      - { name: domain_id, type: string, nullable: true, description: "Owning capability domain. Populated when the repo-config declared domain resolves to a docs/domains/<slug>/ in the local SDD; left empty otherwise per ADR 0136." }
+      - { name: domain_id, type: string, nullable: true, description: "Owning capability domain. Populated when the repo-config declared domain resolves to a docs/domains/<slug>/ in the local SDD; left empty otherwise per M-ADR 0136." }
       - { name: product_id, type: string, nullable: true }
       - { name: profile, type: string, nullable: false }
       - { name: group, type: string, nullable: true }
@@ -722,13 +764,13 @@ catalogues:
       - { name: total_lines, type: int, nullable: true }
       - { name: languages, type: string, nullable: true, description: "';'-separated." }
       - { name: doc_path, type: string, nullable: false }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
     column_enums:
       service_type: enums.service_type  # canonical builder validates against the service_type enum above
 
   domain_models:
     primary_key: id
-    description: "Per-domain ER diagram modelling the domain's aggregates, entities, and domain events. Platform-profile only — application and integration profiles emit headers-only. Forward source: `traceability.domain_model.path` in capability traceability manifests. Reverse source: file-system scan of `docs/domains/*/architecture/data-model.mermaid.md`. Added in schema 2.4.0; see ADR 0142."
+    description: "Per-domain ER diagram modelling the domain's aggregates, entities, and domain events. Platform-profile only — application and integration profiles emit headers-only. Forward source: `traceability.domain_model.path` in capability traceability manifests. Reverse source: file-system scan of `docs/domains/*/architecture/data-model.mermaid.md`. Added in schema 2.4.0; see M-ADR 0142."
     foreign_keys:
       - { column: domain_id, references: domains.id, nullable: false }
     columns:
@@ -737,12 +779,12 @@ catalogues:
       - { name: domain_id, type: string, nullable: false }
       - { name: doc_path, type: string, nullable: false, description: "Path to data-model.mermaid.md." }
       - { name: version, type: string, nullable: true, description: "Optional explicit version; null until the domain model is formally versioned (typically at first contract lock-in)." }
-      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the domain model, from a leading ```yaml fence in the data-model markdown carrying `evidence-class:` (documentation-reverse anchor convention). Free-form; conventional values code-reverse | vendor-doc | operational (ADR 0175). Empty when undeclared. Added in schema 2.20.0." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: evidence_class, type: string, nullable: true, description: "Evidence class of the domain model, from a leading ```yaml fence in the data-model markdown carrying `evidence-class:` (documentation-reverse anchor convention). Free-form; conventional values code-reverse | vendor-doc | operational (M-ADR 0175). Empty when undeclared. Added in schema 2.20.0." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   entities:
     primary_key: id
-    description: "Data-model entity (a structural realisation of a concept inside a domain's data model). Distinct from glossary_items (vocabulary-level) and from domain_models (file-level). Added in schema 2.13.0 per ADR 0159. Forward source: `models[].entities[]` in glossary-alignment-manifest.yaml. Reverse source: `EntityName { ... }` declarations inside `erDiagram` fences in `docs/domains/{domain}/architecture/data-model.mermaid.md`. PK uses an entity-aware slug that normalises across UPPER_SNAKE and PascalCase authoring styles."
+    description: "Data-model entity (a structural realisation of a concept inside a domain's data model). Distinct from glossary_items (vocabulary-level) and from domain_models (file-level). Added in schema 2.13.0 per M-ADR 0159. Forward source: `models[].entities[]` in glossary-alignment-manifest.yaml. Reverse source: `EntityName { ... }` declarations inside `erDiagram` fences in `docs/domains/{domain}/architecture/data-model.mermaid.md`. PK uses an entity-aware slug that normalises across UPPER_SNAKE and PascalCase authoring styles."
     foreign_keys:
       - { column: domain_id, references: domains.id, nullable: true }
       - { column: source_domain_model_id, references: domain_models.id, nullable: true }
@@ -753,15 +795,15 @@ catalogues:
       - { name: domain_id, type: string, nullable: true, description: "Owning domain. Nullable when the source is a non-canonical domain hint such as `platform-wide`; the walker emits a finding in that case." }
       - { name: source_domain_model_id, type: string, nullable: true, description: "FK to domain_models.csv — the file the entity was extracted from. Populated by the reverse-method walker (Mermaid parse); empty when authored only via the forward-method manifest." }
       - { name: persistence_kind, type: string, nullable: true, description: "Open string; recommended values: relational-table | document-collection | event-payload | dto | view | other. Values outside the recommended set fire `[finding] convention`." }
-      - { name: context, type: string, nullable: true, description: "Bounded-context membership (per ADR 0170 §4.6). Free-form adopter label, orthogonal to domain_id. Not an FK. Carried for forward-parity; awaits a derivation source (Mermaid ER has no per-entity slot — populate via a sidecar classification or owning-service derivation). Added in schema 2.19.0." }
+      - { name: context, type: string, nullable: true, description: "Bounded-context membership (per M-ADR 0170 §4.6). Free-form adopter label, orthogonal to domain_id. Not an FK. Carried for forward-parity; awaits a derivation source (Mermaid ER has no per-entity slot — populate via a sidecar classification or owning-service derivation). Added in schema 2.19.0." }
       - { name: glossary_term, type: string, nullable: true, description: "FK to glossary_items.id when the entity name resolves to a canonical glossary term (by entity-aware slug). Drives entity_glossary edge emission." }
       - { name: notes, type: string, nullable: true, description: "Free-form notes preserved from the authoring source. Carries `status=...`, `superseded_by=...`, and column count for diagnostic value." }
-      - { name: evidence_class, type: string, nullable: true, description: "Evidence class inherited from the owning domain model's file-level declaration (the leading ```yaml fence's `evidence-class:` in data-model markdown). Free-form; conventional values code-reverse | vendor-doc | operational (ADR 0175). Empty when the source file declares none, and for manifest-sourced rows (the glossary-alignment manifest has no evidence slot). Added in schema 2.20.0." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: evidence_class, type: string, nullable: true, description: "Evidence class inherited from the owning domain model's file-level declaration (the leading ```yaml fence's `evidence-class:` in data-model markdown). Free-form; conventional values code-reverse | vendor-doc | operational (M-ADR 0175). Empty when the source file declares none, and for manifest-sourced rows (the glossary-alignment manifest has no evidence slot). Added in schema 2.20.0." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   # ---- Edge catalogues ----
   # Edge catalogues do not carry source_sdd_id — provenance is recoverable
-  # from either endpoint's row per ADR 0134.
+  # from either endpoint's row per M-ADR 0134.
 
   repo_capability:
     primary_key: id
@@ -833,7 +875,7 @@ catalogues:
 
   repo_contract:
     primary_key: id
-    description: "Edge: repo implements/consumes contract. From contributes_to.artifact_type=contract-surface. Per ADR 0147 service-architecture external interfaces are a contract-consumes source; contract_id is external_for_profiles app/integration because their repos reference platform-resident (or platform-held BFF) contracts — resolved at aggregation, staying internal for platform-profile."
+    description: "Edge: repo implements/consumes contract. From contributes_to.artifact_type=contract-surface. Per M-ADR 0147 service-architecture external interfaces are a contract-consumes source; contract_id is external_for_profiles app/integration because their repos reference platform-resident (or platform-held BFF) contracts — resolved at aggregation, staying internal for platform-profile."
     foreign_keys:
       - { column: repo_id, references: repositories.id, nullable: false }
       - { column: contract_id, references: contracts.id, nullable: false, external_for_profiles: [application-product, integration-product] }
@@ -870,7 +912,7 @@ catalogues:
 
   service_contract:
     primary_key: id
-    description: "Edge: service exposes or consumes contract. Both FKs are external (per ADR 0147): federated SDDs that walk per-repo service-architecture tables emit consumes rows where service_id resolves to the platform-root catalogue's services.csv (post-aggregation) and contract_id resolves to the platform-root contracts.csv. Internal builds (e.g. connect-mono) still optimistically validate locally. Schema 2.8.0."
+    description: "Edge: service exposes or consumes contract. Both FKs are external (per M-ADR 0147): federated SDDs that walk per-repo service-architecture tables emit consumes rows where service_id resolves to the platform-root catalogue's services.csv (post-aggregation) and contract_id resolves to the platform-root contracts.csv. Internal builds (e.g. connect-mono) still optimistically validate locally. Schema 2.8.0."
     foreign_keys:
       - { column: service_id, references: services.id, nullable: false, external: true }
       - { column: contract_id, references: contracts.id, nullable: false, external: true }
@@ -894,7 +936,7 @@ catalogues:
 
   service_entity:
     primary_key: id
-    description: "Edge: service touches data-model entity. Added in schema 2.13.0 per ADR 0159. Primary source: per-domain `## Data Store Mapping` markdown table in `docs/domains/{domain}/architecture/data-model.mermaid.md` (relation=owns). Optional forward source (Phase 5 deferred): `entities:` block in `orchestration/repo-config/<repo>.yaml`. Service names resolve via heuristic (slug-of-name; trailing-id-segment) with optional adopter-authored alias map at `docs/platform/reference/service-name-aliases.yaml`."
+    description: "Edge: service touches data-model entity. Added in schema 2.13.0 per M-ADR 0159. Primary source: per-domain `## Data Store Mapping` markdown table in `docs/domains/{domain}/architecture/data-model.mermaid.md` (relation=owns). Optional forward source (Phase 5 deferred): `entities:` block in `orchestration/repo-config/<repo>.yaml`. Service names resolve via heuristic (slug-of-name; trailing-id-segment) with optional adopter-authored alias map at `docs/platform/reference/service-name-aliases.yaml`."
     foreign_keys:
       - { column: service_id, references: services.id, nullable: false }
       - { column: entity_id, references: entities.id, nullable: false }
@@ -904,7 +946,7 @@ catalogues:
       - { name: entity_id, type: string, nullable: false }
       - { name: relation, type: string, nullable: false, description: "Open string; recommended values: owns | reads | writes | references. Data Store Mapping table source emits `owns`. Values outside the recommended set fire `[finding] convention`." }
       - { name: evidence_path, type: string, nullable: true, description: "Source markdown path or feature-grounding row that produced the edge. Audit aid." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   capability_feature:
     primary_key: id
@@ -940,7 +982,7 @@ catalogues:
 
   capability_event:
     primary_key: id
-    description: "Edge: capability publishes or consumes event. Schema 2.14.0 (per ADR 0160) multi-source ingestion: (1) forward shape A — `traceability.events[{id, role}]` (legacy aspirational shape, unauthored across observed adopters); (2) forward shape B — `traceability.contracts.published_events[]` / `consumed_events[]` with `{event, status, notes}` (the observed forward-method shape; event name slug-resolves against events.csv); (3) derived — `capability_service ⋈ service_event` join (zero authoring; associative not authoritative). Authored rows win on PK conflict with derived. The `source` column distinguishes the two so governance queries can filter to authoritative ownership. The earlier `## Related Events` capability-spec heading is retired (no adopter authored it; the template never carried the section)."
+    description: "Edge: capability publishes or consumes event. Schema 2.14.0 (per M-ADR 0160) multi-source ingestion: (1) forward shape A — `traceability.events[{id, role}]` (legacy aspirational shape, unauthored across observed adopters); (2) forward shape B — `traceability.contracts.published_events[]` / `consumed_events[]` with `{event, status, notes}` (the observed forward-method shape; event name slug-resolves against events.csv); (3) derived — `capability_service ⋈ service_event` join (zero authoring; associative not authoritative). Authored rows win on PK conflict with derived. The `source` column distinguishes the two so governance queries can filter to authoritative ownership. The earlier `## Related Events` capability-spec heading is retired (no adopter authored it; the template never carried the section)."
     foreign_keys:
       - { column: capability_id, references: capabilities.id, nullable: false }
       - { column: event_id, references: events.id, nullable: false }
@@ -949,7 +991,7 @@ catalogues:
       - { name: capability_id, type: string, nullable: false }
       - { name: event_id, type: string, nullable: false }
       - { name: role, type: string, nullable: false, description: "publishes | consumes." }
-      - { name: source, type: string, nullable: false, description: "authored | derived. `authored` rows come from a traceability declaration (shape A or shape B); `derived` rows come from `capability_service ⋈ service_event` and represent associative coupling, not ownership. Schema 2.14.0 per ADR 0160." }
+      - { name: source, type: string, nullable: false, description: "authored | derived. `authored` rows come from a traceability declaration (shape A or shape B); `derived` rows come from `capability_service ⋈ service_event` and represent associative coupling, not ownership. Schema 2.14.0 per M-ADR 0160." }
 
   capability_contract:
     primary_key: id
@@ -998,7 +1040,7 @@ catalogues:
 
   feature_event:
     primary_key: id
-    description: "Edge: feature publishes or consumes event. Derived only — emitted from the `feature_service ⋈ service_event` join, mirroring ADR 0160's capability_event derived path one rung lower in the capability/feature/service hierarchy. Every row carries `source=derived`; there is no authored shape (the authored signal lives at the service level via `service_event`, which the feature inherits through `feature_service`). PK is `{feature_id}__{event_id}__{role}` so the same feature can carry both publishes + consumes rows for the same event without collision. Schema 2.15.0 per ADR 0161."
+    description: "Edge: feature publishes or consumes event. Derived only — emitted from the `feature_service ⋈ service_event` join, mirroring M-ADR 0160's capability_event derived path one rung lower in the capability/feature/service hierarchy. Every row carries `source=derived`; there is no authored shape (the authored signal lives at the service level via `service_event`, which the feature inherits through `feature_service`). PK is `{feature_id}__{event_id}__{role}` so the same feature can carry both publishes + consumes rows for the same event without collision. Schema 2.15.0 per M-ADR 0161."
     foreign_keys:
       - { column: feature_id, references: features.id, nullable: false }
       - { column: event_id, references: events.id, nullable: false }
@@ -1044,11 +1086,11 @@ catalogues:
       - { name: transport, type: string, nullable: false, description: "Delivery protocol: `appsync-websocket | pekko-ws | mqtt | sse | webhook-push | other`. The `other` value is escape-valve; adopters using it SHOULD record the actual transport in evidence." }
       - { name: evidence, type: string, nullable: true, description: "Evidence-file citation (`<sub-repo>/<path>:<line>`) anchoring the channel declaration. Mirrors the citation pattern used elsewhere in evidence yamls." }
       - { name: payload_ref, type: string, nullable: true, description: "Optional reference to a payload-contract event (`{event-name}` in the `events` catalogue) when the channel carries a contract-shaped payload. Empty when the payload is channel-private." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   capability_domain_model:
     primary_key: id
-    description: "Edge: capability references a domain model. Forward: declared in `traceability.domain_model` field of the capability traceability manifest. Reverse: inferred via capability → domain → domain_model. Platform-profile only. Added in schema 2.4.0; see ADR 0142."
+    description: "Edge: capability references a domain model. Forward: declared in `traceability.domain_model` field of the capability traceability manifest. Reverse: inferred via capability → domain → domain_model. Platform-profile only. Added in schema 2.4.0; see M-ADR 0142."
     foreign_keys:
       - { column: capability_id, references: capabilities.id, nullable: false }
       - { column: domain_model_id, references: domain_models.id, nullable: false }
@@ -1060,7 +1102,7 @@ catalogues:
 
   feature_domain_model:
     primary_key: id
-    description: "Edge: feature operates on a domain model. Derived from capability_feature ⋈ capability_domain_model (on capability_id). Platform-profile only. Orphan features (no capability link) get no row. Added in schema 2.4.0; see ADR 0142."
+    description: "Edge: feature operates on a domain model. Derived from capability_feature ⋈ capability_domain_model (on capability_id). Platform-profile only. Orphan features (no capability link) get no row. Added in schema 2.4.0; see M-ADR 0142."
     foreign_keys:
       - { column: feature_id, references: features.id, nullable: false }
       - { column: domain_model_id, references: domain_models.id, nullable: false }
@@ -1084,7 +1126,7 @@ catalogues:
 
   persona_c4system:
     primary_key: id
-    description: "Edge: persona (C4 Person) uses a C4 system. Captures the L1 context 'Person uses System' relationship, extracted from Person(...) macros on the L1 context diagram and matched to personas rows. Per ADR 0155. Added in schema 2.10.0."
+    description: "Edge: persona (C4 Person) uses a C4 system. Captures the L1 context 'Person uses System' relationship, extracted from Person(...) macros on the L1 context diagram and matched to personas rows. Per M-ADR 0155. Added in schema 2.10.0."
     foreign_keys:
       - { column: persona_id, references: personas.id, nullable: false }
       - { column: c4_system_id, references: c4_systems.id, nullable: false }
@@ -1118,7 +1160,7 @@ catalogues:
 
   system_external_dependency:
     primary_key: id
-    description: "Edge: a C4 system integrates with an external software system. Captures the L1 context 'System integrates with External System' relationship, extracted from System_Ext(...) + Rel(...) on L1/L2 diagrams. Per ADR 0155. Container-level external dependencies are out of scope (system-level only). Added in schema 2.10.0. From 2.30.0 (M-ADR 0189 §4.4): edges whose external endpoint the aggregator adjudicates as an INTERNAL system are rewritten onto system_system_dependency and removed from this catalogue."
+    description: "Edge: a C4 system integrates with an external software system. Captures the L1 context 'System integrates with External System' relationship, extracted from System_Ext(...) + Rel(...) on L1/L2 diagrams. Per M-ADR 0155. Container-level external dependencies are out of scope (system-level only). Added in schema 2.10.0. From 2.30.0 (M-ADR 0189 §4.4): edges whose external endpoint the aggregator adjudicates as an INTERNAL system are rewritten onto system_system_dependency and removed from this catalogue."
     foreign_keys:
       - { column: c4_system_id, references: c4_systems.id, nullable: false }
       - { column: external_system_id, references: c4_external_systems.id, nullable: false }
@@ -1183,7 +1225,7 @@ catalogues:
 
   c4_container_entity:
     primary_key: id
-    description: "Derived edge: C4 container is responsible for data-model entity. Added in schema 2.13.0 per ADR 0159 §4.8. Pure transitive derivation: `service_entity ⋈ c4_containers.service_id`. Only the subset of containers with `service_id` populated contribute edges (per ADR 0155 the container ↔ service cardinality is o-or-1; data-store containers and infra-umbrella containers without a service mapping legitimately emit no rows)."
+    description: "Derived edge: C4 container is responsible for data-model entity. Added in schema 2.13.0 per M-ADR 0159 §4.8. Pure transitive derivation: `service_entity ⋈ c4_containers.service_id`. Only the subset of containers with `service_id` populated contribute edges (per M-ADR 0155 the container ↔ service cardinality is o-or-1; data-store containers and infra-umbrella containers without a service mapping legitimately emit no rows)."
     foreign_keys:
       - { column: container_id, references: c4_containers.id, nullable: false }
       - { column: entity_id, references: entities.id, nullable: false }
@@ -1196,7 +1238,7 @@ catalogues:
 
   c4_system_entity:
     primary_key: id
-    description: "Derived edge: C4 system is responsible for data-model entity. Added in schema 2.13.0 per ADR 0159 §4.8. Pure aggregation roll-up: `c4_container_entity ⋈ c4_containers.system_id`, with container_count recording how many of the system's containers touch the entity (governance signal for cross-container concerns)."
+    description: "Derived edge: C4 system is responsible for data-model entity. Added in schema 2.13.0 per M-ADR 0159 §4.8. Pure aggregation roll-up: `c4_container_entity ⋈ c4_containers.system_id`, with container_count recording how many of the system's containers touch the entity (governance signal for cross-container concerns)."
     foreign_keys:
       - { column: system_id, references: c4_systems.id, nullable: false }
       - { column: entity_id, references: entities.id, nullable: false }
@@ -1262,7 +1304,7 @@ catalogues:
       - { name: required_stability, type: string, nullable: true, description: "locked | provisional | unknown. Optional; the consuming SDD's expectation of contract stability." }
       - { name: contract_path, type: string, nullable: true, description: "Path to the contract file the dependency is against, as declared in the consuming SDD's evidence. External — resolution happens at aggregation if it happens at all." }
       - { name: consumed_by_services, type: string, nullable: true, description: "Comma-separated list of service names within the consuming product that consume the dependency. Free-text; not FK-validated (services are within-product and resolution is owner-side concern)." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   cross_sdd_platform_capability:
     primary_key: id
@@ -1283,7 +1325,7 @@ catalogues:
       finding and produces no row. Cross-SDD references are external
       by definition. Added in schema 2.9.0; see
       `content/plans/v0-9-0-cohort-sweep-derived-bundle.md`
-      §"Cross-SDD platform-capability-edge" and ADR 0134.
+      §"Cross-SDD platform-capability-edge" and M-ADR 0134.
     foreign_keys:
       - { column: consuming_product_id, references: products.id, nullable: false, external: true }
       - { column: platform_capability_id, references: capabilities.id, nullable: false, external: true }
@@ -1300,30 +1342,39 @@ catalogues:
     primary_key: id
     description: >
       Application-product edge (M-ADR 0193): one row per declared data-plane
-      binding — a typed way the service sources or holds data. The data-plane is
-      a COMPOSITION of these bindings, a second axis orthogonal to
-      `application_archetype` (0191). Built per-SDD from the manifest's
+      binding — a typed way the service sources, holds, produces or exposes data.
+      The data-plane is a COMPOSITION of these bindings, a second axis orthogonal
+      to `application_archetype` (0191). Built per-SDD from the manifest's
       `data_plane.bindings` block (application-product only; other profiles emit
-      headers-only). A binding whose `target` is a platform capability/service
-      reconciles with `product_platform_dependencies` — a `retrieve@internal`
-      binding is a synchronous platform dependency and a `stream-ingest@internal`
-      binding is the M-ADR 0192 `contract_type: event` async dependency; the
-      genuinely new rows are `own-store` (a self-binding) and any
-      `external-vendor` binding. The archetype-default-vs-declared WARN is a
-      fast-follow that lands with the M-ADR 0191 §4.3 expectations overlay.
-      Added in schema 2.37.0.
+      headers-only). The `pattern` vocabulary splits by DIRECTION (§4.7): an
+      INBOUND data-sourcing sub-set (retrieve | own-store | stream-ingest |
+      project) and an OUTPUT-side sub-set (generate | publish), materialised as
+      the derived `direction` column. An INBOUND binding whose `target` is a
+      platform capability/service reconciles with
+      `product_platform_dependencies` — a `retrieve@internal` binding is a
+      synchronous platform dependency and a `stream-ingest@internal` binding is
+      the M-ADR 0192 `contract_type: event` async dependency; the genuinely new
+      inbound rows are `own-store` (a self-binding) and any `external-vendor`
+      binding. OUTPUT-side rows do NOT participate in that reconciliation
+      (§4.7 rule 1): `publish` is a contract the service PROVIDES, not one it
+      consumes, so it has no inbound counterpart to cross-check — consumers must
+      filter on `direction` before reconciling, which is what the column is for.
+      The archetype-default-vs-declared WARN keys on the bare `pattern` token and
+      so spans both directions (§4.7 rule 2). Added in schema 2.37.0;
+      `direction` added in 2.40.0.
     foreign_keys:
       - { column: product_id, references: products.id, nullable: false }
     columns:
-      - { name: id, type: string, nullable: false, description: "{product_id}__{pattern}__{locality}__{target} (empty components collapse to blanks). A duplicate emits a divergence finding and is dropped." }
+      - { name: id, type: string, nullable: false, description: "{product_id}__{pattern}__{locality}__{target} (empty components collapse to blanks). A duplicate emits a divergence finding and is dropped. `direction` is NOT a component — it is derived from `pattern`, so it adds nothing to identity." }
       - { name: product_id, type: string, nullable: false, description: "The application-product declaring this binding (this SDD's product id)." }
-      - { name: pattern, type: string, nullable: false, description: "Closed method-tier enum: retrieve | own-store | stream-ingest | project. How the data relates to the service (M-ADR 0193 §4.1)." }
-      - { name: locality, type: string, nullable: true, description: "Closed enum: internal-platform | internal-domain | external-vendor. Where the other end sits. Empty for own-store (a self-binding with no other end)." }
+      - { name: pattern, type: string, nullable: false, description: "Closed method-tier enum: retrieve | own-store | stream-ingest | project (inbound, data-sourcing) | generate | publish (output-side, per M-ADR 0193 §4.7). How the data relates to the service (§4.1)." }
+      - { name: direction, type: string, nullable: false, description: "inbound | output. DERIVED from `pattern` by a single method-tier mapping — not authored, and not a manifest field, so it cannot disagree with `pattern`. Materialises the output-side sub-set §4.7 declares (generate/publish => output; everything else => inbound). Exists because three §4.7 rules branch on direction: platform-dep reconciliation is inbound-only, the archetype WARN must compare like with like, and the M-ADR 0187 convergence reasoning differs by direction. Added in 2.40.0." }
+      - { name: locality, type: string, nullable: true, description: "Closed enum: internal-platform | internal-domain | external-vendor. Where the other end sits. REQUIRED on the inbound data-sourcing patterns (retrieve/stream-ingest/project); may be empty for own-store (a self-binding with no other end) and for the output-side patterns (generate/publish), which may carry one but do not require it (M-ADR 0193 §4.7)." }
       - { name: transport, type: string, nullable: true, description: "Open string — the wire (rest | graphql | grpc | appsync | kinesis | kafka | eventhub | cdc | ...). Values outside the recommended set emit a convention finding." }
-      - { name: runtime, type: string, nullable: true, description: "Free adopter-tier field — backend-compute runtime (e.g. java | node). Only on compute-bearing patterns (stream-ingest/project); empty otherwise." }
+      - { name: runtime, type: string, nullable: true, description: "Free adopter-tier field — backend-compute runtime (e.g. java | node). Only on compute-bearing patterns (stream-ingest | project | generate — `generate` is compute-bearing per M-ADR 0193 §4.7); empty otherwise. A runtime on retrieve/own-store/publish is malformed and FAILs at manifest load." }
       - { name: target, type: string, nullable: true, description: "Free adopter-tier field — the specific counterpart (a platform service id, an upstream domain service, a named vendor). Instance identity; keeps locality a small class enum." }
       - { name: notes, type: string, nullable: true, description: "Optional free-text annotation." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   application_data_plane_deviations:
     primary_key: id
@@ -1335,16 +1386,19 @@ catalogues:
       architecture bundle (and its `expected_bindings`) resolves — can suppress a
       mismatch it is told is sanctioned variance. The `expectation` value is the
       **bare pattern token** (`retrieve` | `own-store` | `stream-ingest` |
-      `project`) that the product knowingly diverges from; it must match the
-      pattern the WARN keys on. Added in schema 2.38.0.
+      `project` | `generate` | `publish`) that the product knowingly diverges
+      from; it must match the pattern the WARN keys on. The token set spans both
+      directions — the WARN keys on the bare pattern, so an output-side
+      expectation is deviated exactly like an inbound one (M-ADR 0193 §4.7 rule
+      2). Added in schema 2.38.0; output-side tokens documented in 2.40.0.
     foreign_keys:
       - { column: product_id, references: products.id, nullable: false }
     columns:
       - { name: id, type: string, nullable: false, description: "{product_id}__{expectation}. A duplicate emits a divergence finding and is dropped." }
       - { name: product_id, type: string, nullable: false, description: "The application-product declaring this deviation (this SDD's product id)." }
-      - { name: expectation, type: string, nullable: false, description: "The bare data-plane pattern token the product diverges from (retrieve | own-store | stream-ingest | project). Must match the WARN's pattern key." }
+      - { name: expectation, type: string, nullable: false, description: "The bare data-plane pattern token the product diverges from (retrieve | own-store | stream-ingest | project | generate | publish). Must match the WARN's pattern key. Spans both directions per M-ADR 0193 §4.7 rule 2." }
       - { name: rationale, type: string, nullable: false, description: "Why the deviation is correct. Non-empty (enforced at manifest load)." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   application_conformance_coverage:
     primary_key: id
@@ -1367,9 +1421,9 @@ catalogues:
       - { name: tag, type: string, nullable: false, description: "The conformance-expectation tag (opaque; matches an archetype's `conformance` tag in the reference-architecture vocabulary)." }
       - { name: status, type: string, nullable: false, description: "covered (the product's suite exercises it) | deviated (deliberately not covered, with a rationale)." }
       - { name: rationale, type: string, nullable: true, description: "Why the tag is deviated. Present (non-empty) only when status=deviated." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
-  # ---- UI screens family (schema 2.16.0, per ADR 0166) ----
+  # ---- UI screens family (schema 2.16.0, per M-ADR 0166) ----
   # Application-product profile. Builder reads authored screen-spec artefacts
   # (`screens/*.md`: frontmatter + a normative ```openui-lang fenced block).
   # Forward: agent-authored. Reverse: the extraction toolkit projects an app's
@@ -1377,7 +1431,7 @@ catalogues:
   # these artefacts; see research/adr-0166-prototypes/ for the Phase Pre validation).
   screens:
     primary_key: id
-    description: "UI screen specified in the OpenUI Lang grammar (per ADR 0166). One row per screen / coherent screen group. Application-product profile (other profiles emit headers-only). Source: authored `screens/*.md` (frontmatter + ```openui-lang block); the reverse toolkit produces these from a router + component-tree projection."
+    description: "UI screen specified in the OpenUI Lang grammar (per M-ADR 0166). One row per screen / coherent screen group. Application-product profile (other profiles emit headers-only). Source: authored `screens/*.md` (frontmatter + ```openui-lang block); the reverse toolkit produces these from a router + component-tree projection."
     foreign_keys:
       - { column: product_id, references: products.id, nullable: false }
     columns:
@@ -1385,29 +1439,29 @@ catalogues:
       - { name: name, type: string, nullable: false, description: "Screen slug / display name." }
       - { name: product_id, type: string, nullable: false, description: "Owning application-product." }
       - { name: route, type: string, nullable: true, description: "Route path the screen is mounted at, when applicable." }
-      - { name: status, type: string, nullable: true, description: "Maturity marker; uses the standard working | provisional | unknown | absent vocabulary (per ADR 0165) where applicable." }
+      - { name: status, type: string, nullable: true, description: "Maturity marker; uses the standard working | provisional | unknown | absent vocabulary (per M-ADR 0165) where applicable." }
       - { name: source, type: string, nullable: false, description: "screen-spec (forward) | screen-extraction (reverse)." }
       - { name: domain, type: string, nullable: true, description: "Authored owning-domain hint from frontmatter `domain:` (a docs/domains/<domain>/ slug). Organisational grouping for multi-domain (platform-profile) SDDs; the authoritative screen->domain relationship is still derived via realises -> feature -> capability.domain_id (screen_feature). Empty when unauthored." }
       - { name: group, type: string, nullable: true, description: "Authored sub-grouping hint from frontmatter `group:` — a finer organisational axis within (or orthogonal to) domain, e.g. shell | shell-embed | identity. Free-form adopter label; not an FK. Empty when unauthored." }
-      - { name: context, type: string, nullable: true, description: "Bounded-context membership from frontmatter `context:` (per ADR 0170 §4.6). Free-form adopter label, orthogonal to domain/group — the consumed bounded context for a surface that spans several. Not an FK. Empty when unauthored. Added in schema 2.19.0." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: context, type: string, nullable: true, description: "Bounded-context membership from frontmatter `context:` (per M-ADR 0170 §4.6). Free-form adopter label, orthogonal to domain/group — the consumed bounded context for a surface that spans several. Not an FK. Empty when unauthored. Added in schema 2.19.0." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   ui_components:
     primary_key: id
-    description: "An entry in the adopter-owned component registry that screens compose against (per ADR 0166) — the UI-structure contract. A screen composes registry components but never defines one. Application-product profile. Source: components referenced across the SDD's screen-spec ```openui-lang blocks (registry projection); the reverse toolkit discovers the authoritative registry from the design-system import surface."
+    description: "An entry in the adopter-owned component registry that screens compose against (per M-ADR 0166) — the UI-structure contract. A screen composes registry components but never defines one. Application-product profile. Source: components referenced across the SDD's screen-spec ```openui-lang blocks (registry projection); the reverse toolkit discovers the authoritative registry from the design-system import surface."
     foreign_keys:
       - { column: product_id, references: products.id, nullable: false }
     columns:
       - { name: id, type: string, nullable: false, description: "Slugged PK: {product_id}-{component-slug}." }
       - { name: name, type: string, nullable: false, description: "Component identifier as used in the grammar." }
       - { name: product_id, type: string, nullable: false, description: "Owning application-product." }
-      - { name: kind, type: string, nullable: true, description: "Optional classification: layout | display | input | chart | element | composite | remote | remote-iframe | remote-webcomponent. A `remote*` kind marks a micro-frontend federation seam (ADR 0166 §4.7)." }
+      - { name: kind, type: string, nullable: true, description: "Optional classification: layout | display | input | chart | element | composite | remote | remote-iframe | remote-webcomponent. A `remote*` kind marks a micro-frontend federation seam (M-ADR 0166 §4.7)." }
       - { name: source, type: string, nullable: false, description: "screen-spec (forward) | design-system-import (reverse)." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   screen_component:
     primary_key: id
-    description: "Edge: screen composes a UI component. Parsed from the screen-spec ```openui-lang block's component references (per ADR 0166)."
+    description: "Edge: screen composes a UI component. Parsed from the screen-spec ```openui-lang block's component references (per M-ADR 0166)."
     foreign_keys:
       - { column: screen_id, references: screens.id, nullable: false }
       - { column: component_id, references: ui_components.id, nullable: false }
@@ -1415,27 +1469,27 @@ catalogues:
       - { name: id, type: string, nullable: false, description: "Composite PK: {screen_id}__{component_id}." }
       - { name: screen_id, type: string, nullable: false }
       - { name: component_id, type: string, nullable: false }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   screen_feature:
     primary_key: id
-    description: "Edge: screen realises a feature (traceability). Forward: `realises:` frontmatter on the screen-spec. Reverse: route → feature mapping. Per ADR 0166."
+    description: "Edge: screen realises a feature (traceability). Forward: `realises:` frontmatter on the screen-spec. Reverse: route → feature mapping. Per M-ADR 0166."
     foreign_keys:
       - { column: screen_id, references: screens.id, nullable: false }
       # feature_id is profile-conditional external (2.23.0 mechanism, applied
       # 2.24.0): an app/integration screen may realise a platform-resident
-      # feature (ADR 0177 single-slug vocabulary). Internal for platform-profile
+      # feature (M-ADR 0177 single-slug vocabulary). Internal for platform-profile
       # (owns its features); resolved at aggregation for app/integration.
       - { column: feature_id, references: features.id, nullable: false, external_for_profiles: [application-product, integration-product] }
     columns:
       - { name: id, type: string, nullable: false, description: "Composite PK: {screen_id}__{feature_id}. For app/integration builds the feature_id may be a bare realises slug until the aggregator resolves it to the platform feature id (then the PK is regenerated)." }
       - { name: screen_id, type: string, nullable: false }
       - { name: feature_id, type: string, nullable: false }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   persona_screen:
     primary_key: id
-    description: "Edge: persona can access a screen. Forward: `persona_access:` frontmatter. Reverse: route persona-access guards, permission/feature-flag config, or a host shell's per-persona menu (where the backend pre-filters visible screens). Per ADR 0166."
+    description: "Edge: persona can access a screen. Forward: `persona_access:` frontmatter. Reverse: route persona-access guards, permission/feature-flag config, or a host shell's per-persona menu (where the backend pre-filters visible screens). Per M-ADR 0166."
     foreign_keys:
       - { column: persona_id, references: personas.id, nullable: false }
       - { column: screen_id, references: screens.id, nullable: false }
@@ -1443,11 +1497,11 @@ catalogues:
       - { name: id, type: string, nullable: false, description: "Composite PK: {persona_id}__{screen_id}." }
       - { name: persona_id, type: string, nullable: false }
       - { name: screen_id, type: string, nullable: false }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   screen_action:
     primary_key: id
-    description: "Edge: screen emits an action, optionally resolved to a catalogued event. The behavioural MFE seam — inter-bundle communication as a catalogued contract, not an ad-hoc string. Forward: `action=` declarations in the ```openui-lang block. Reverse: emitted custom-event / event-bus wiring. event_id is external-capable (the event may live in the platform SDD). Per ADR 0166 + ADR 0156."
+    description: "Edge: screen emits an action, optionally resolved to a catalogued event. The behavioural MFE seam — inter-bundle communication as a catalogued contract, not an ad-hoc string. Forward: `action=` declarations in the ```openui-lang block. Reverse: emitted custom-event / event-bus wiring. event_id is external-capable (the event may live in the platform SDD). Per M-ADR 0166 + M-ADR 0156."
     foreign_keys:
       - { column: screen_id, references: screens.id, nullable: false }
       - { column: event_id, references: events.id, nullable: true, external: true }
@@ -1455,25 +1509,25 @@ catalogues:
       - { name: id, type: string, nullable: false, description: "Composite PK: {screen_id}__{action-slug}." }
       - { name: screen_id, type: string, nullable: false }
       - { name: action, type: string, nullable: false, description: "Declared action label emitted by the screen." }
-      - { name: event_id, type: string, nullable: true, description: "Catalogued event the action maps to (per ADR 0156). External-capable; empty when the action does not resolve to a domain event." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: event_id, type: string, nullable: true, description: "Catalogued event the action maps to (per M-ADR 0156). External-capable; empty when the action does not resolve to a domain event." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
   conformance_finding:
     primary_key: id
-    description: "Conformance-reverse drift summary, one row per check (method ADR 0180). NOT produced by `catalogue build` (it reads the spec repo) — produced by `sdd-cli conformance --emit-finding` (which has the code repo) and federated here by the aggregator. Each row is a run-dated snapshot of declared-vs-observed drift for an implementation member (ADR 0181 role/lifecycle), so estate-wide conformance is queryable (aggregate union) and trendable (snapshot diff across runs/commits). Verdicts are PROVISIONAL — disposition (code-defect | spec-stale | divergence) is triage, recorded elsewhere. No enforced FK on implementation_repo: the code repo is frequently cross-repo and not in this SDD's repositories.csv. Added in schema 2.25.0."
+    description: "Conformance-reverse drift summary, one row per check (method M-ADR 0180). NOT produced by `catalogue build` (it reads the spec repo) — produced by `sdd-cli conformance --emit-finding` (which has the code repo) and federated here by the aggregator. Each row is a run-dated snapshot of declared-vs-observed drift for an implementation member (M-ADR 0181 role/lifecycle), so estate-wide conformance is queryable (aggregate union) and trendable (snapshot diff across runs/commits). Verdicts are PROVISIONAL — disposition (code-defect | spec-stale | divergence) is triage, recorded elsewhere. No enforced FK on implementation_repo: the code repo is frequently cross-repo and not in this SDD's repositories.csv. Added in schema 2.25.0."
     columns:
       - { name: id, type: string, nullable: false, description: "Check id (unique within the SDD; source_sdd_id disambiguates across the federation)." }
       - { name: check_id, type: string, nullable: false }
-      - { name: target, type: string, nullable: false, description: "code-vs-contract | binding-vs-reality (ADR 0180 §2.5)." }
-      - { name: implementation_repo, type: string, nullable: true, description: "The implementation member the check is about (ADR 0181). Empty when checks were not binding-derived." }
-      - { name: role, type: string, nullable: true, description: "as-is | to-be (ADR 0181). Empty when not binding-derived." }
-      - { name: lifecycle, type: string, nullable: true, description: "planned | migrating | active | legacy-active | deprecated | decommissioned (ADR 0181)." }
+      - { name: target, type: string, nullable: false, description: "code-vs-contract | binding-vs-reality (M-ADR 0180 §2.5)." }
+      - { name: implementation_repo, type: string, nullable: true, description: "The implementation member the check is about (M-ADR 0181). Empty when checks were not binding-derived." }
+      - { name: role, type: string, nullable: true, description: "as-is | to-be (M-ADR 0181). Empty when not binding-derived." }
+      - { name: lifecycle, type: string, nullable: true, description: "planned | migrating | active | legacy-active | deprecated | decommissioned (M-ADR 0181)." }
       - { name: declared, type: number, nullable: false, description: "Count of the declared surface (spec/binding/contract)." }
       - { name: observed, type: number, nullable: false, description: "Count of the observed surface (code)." }
       - { name: matched, type: number, nullable: false }
       - { name: conformance_pct, type: number, nullable: false, description: "matched / denom * 100 (denom per the check)." }
       - { name: declared_not_observed, type: number, nullable: false, description: "Count declared but not observed (candidate: spec-stale / unimplemented / dangling)." }
       - { name: observed_not_declared, type: number, nullable: false, description: "Count observed but not declared (candidate: binding-stale / code-defect)." }
-      - { name: needs_triage, type: boolean, nullable: false, description: "True when any asymmetry exists. Triage, not auto-fail (ADR 0180 §2.3)." }
+      - { name: needs_triage, type: boolean, nullable: false, description: "True when any asymmetry exists. Triage, not auto-fail (M-ADR 0180 §2.3)." }
       - { name: run_date, type: string, nullable: false, description: "ISO date of the conformance run — the snapshot stamp enabling trend over time." }
-      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per ADR 0134." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }