@vegastack/skills 0.2.0 → 0.3.0

package/README.md

@@ -11,7 +11,7 @@ npx @vegastack/skills add arch-guardian
 
 | Skill | What it does |
 |---|---|
-| `arch-guardian` | Architecture advisor: capability-scoped normative rules, deterministic checks against a committed profile, exception/ADR governance |
+| `arch-guardian` | Architecture advisor: tier-scoped normative rules activated by declared capabilities, evidence-backed advisory reports, slim committed profile, source-freshness contract |
 | `skill-maintainer` | Encodes the Agent Skills standards (Claude Code, Codex, Hermes, agentskills.io) for creating, updating, and releasing skills in a skills repo |
 | `skillify` | Turns a feature or workflow into a complete skill conforming to the VegaStack skills contract, or audits an existing one |
 

package/dist/index.js

@@ -516,7 +516,7 @@ async function doctor(options) {
   await assertNoSymlink(base, false);
   let failed = false;
   const profileCandidates = [join(base, ".vegastack", "architecture.json"), join(base, ".vegastack", "architecture.yaml")];
-  let profileFound = false;
+  let foundProfilePath = null;
   if (options.mode !== "global") {
     let profile = null;
     for (const candidate of profileCandidates)
@@ -524,14 +524,14 @@ async function doctor(options) {
         profile = candidate;
         break;
       }
-    profileFound = Boolean(profile);
+    foundProfilePath = profile;
     if (profile) {
       if (profile.endsWith(".yaml"))
         console.log(`notice: ${profile} uses the legacy .yaml name for a JSON document; rename to architecture.json`);
       try {
         const parsed = JSON.parse(await readFile(profile, "utf8"));
-        if (parsed.schemaVersion !== 3 || parsed.profileStatus !== "confirmed" || !parsed.project?.name || !parsed.environments?.production)
-          throw new Error("required identity fields are absent or profile is not confirmed schema v3");
+        if (parsed.schemaVersion !== 4 || !parsed.project?.name || !parsed.project?.tier || !Array.isArray(parsed.capabilities))
+          throw new Error("required identity fields are absent or profile is not schema v4 (run profile-tool.mjs migrate for v3 profiles)");
         console.log(`ok architecture profile: ${profile}`);
       } catch (error) {
         console.log(`invalid architecture profile: ${profile} (${error.message})`);
@@ -564,7 +564,7 @@ async function doctor(options) {
       console.log(`${result.status === "verified" ? "ok" : "invalid"} ${agent} ${skillName} installation${result.issues.length ? ` (${result.issues.join(", ")})` : ""}`);
       if (result.status !== "verified")
         failed = true;
-      const candidate = join(destination, "scripts", "architecture-check.mjs");
+      const candidate = join(destination, "scripts", "validate-profile.mjs");
       if (await exists(candidate))
         checkScripts.push(candidate);
     }
@@ -574,12 +574,12 @@ async function doctor(options) {
     failed = true;
   }
   const firstCheckScript = checkScripts[0];
-  if (options.mode !== "global" && firstCheckScript && profileFound && !failed) {
-    const result = spawnSync(process.execPath, [firstCheckScript, base, "--json"], { encoding: "utf8" });
+  if (options.mode !== "global" && firstCheckScript && foundProfilePath && !failed) {
+    const result = spawnSync(process.execPath, [firstCheckScript, foundProfilePath], { encoding: "utf8" });
     if (result.status === 0)
-      console.log("ok architecture invariants");
+      console.log("ok profile validation");
     else {
-      console.log(`invalid architecture invariants: ${result.stdout.trim() || result.stderr.trim()}`);
+      console.log(`invalid profile: ${result.stdout.trim() || result.stderr.trim()}`);
       failed = true;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vegastack/skills",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Installer and verifier for VegaStack Agent Skills (Claude Code, Codex, and Hermes)",
   "license": "MIT",
   "type": "module",

package/skill/arch-guardian/SKILL.md

@@ -1,35 +1,36 @@
 ---
 name: arch-guardian
-description: Architecture advisor for VegaStack projects. Use when designing a new service or feature, reviewing architecture or a risky change (auth, tenancy, agents, jobs, connectors, data lifecycle, hosting), deciding between architectural options, writing or validating an ADR or .vegastack/architecture.json profile, threat modeling, planning a migration, or checking dependency and source drift. Gives one scoped recommendation with an explicit verdict; activates only the capabilities a project has actually enabled. Covers web-only, Flutter, agentic and non-agentic, single- and multi-tenant, internal, public, platform-service, and shared-package projects.
+description: Architecture advisor for VegaStack projects. Use when designing a new service or feature, reviewing architecture or a risky change (auth, tenancy, agents, jobs, connectors, data lifecycle, hosting), deciding between architectural options, writing an ADR or a .vegastack/architecture.json profile, threat modeling, planning a migration, or checking dependency and source drift. Advises contextually by declared tier (prototype, production, enterprise) and enabled capabilities; recommends the smallest architecture that meets the requirement and produces evidence-backed advisory reports, never CI gates. Covers web-only, Flutter, agentic and non-agentic, single- and multi-tenant, internal, client, and package projects.
 ---
 
 # VegaStack Architecture Guardian
 
-Act as the project's decisive senior architect. Apply only activated capabilities. Treat the foundation as an advisory recommendation: state `GUARDIAN VERDICT: REJECT` when warranted, while allowing a project owner to accept any scoped risk through a valid ADR. Never invent compliance or project facts.
+Act as the project's senior architecture advisor. Apply only enabled capabilities at the declared tier. Recommend; never gate. Never invent compliance or project facts. There is no exception machinery: a team that departs from a recommendation records the decision, and you keep reporting it honestly as accepted risk.
 
 ## Start every task
 
 1. Identify the actual decision, its scope, and how expensive it is to reverse.
-2. Inspect repository instructions and existing facts before asking questions. Keep read-only work read-only; never create a profile or artifact merely because it is absent.
-3. Separate **facts**, **constraints**, **assumptions**, **preferences**, and **accepted project decisions**. Distinguish current, target, and migration state.
-4. Ask at most three material questions at a time. If unanswered, proceed with bounded assumptions and the smallest architecture that meets stated requirements.
-5. Read only the directly relevant references below. Use committed profiles, designs, and ADRs as architecture memory; never rely on hidden chat state.
-6. Prioritize security/correctness, recovery, ownership, contracts, operability, delivery, then optional optimization. Make one primary recommendation, identify the rejected alternative, and surface irreversible or expensive choices first.
-7. Evidence labels (**OBSERVED**, **DOCUMENTED**, **REPRODUCED**, **INFERRED**, **RECOMMENDED**, **NOT VERIFIED**) are optional; reserve them for review and drift reports where provenance matters. A static sentinel or declared control is never a reproduced runtime test.
+2. Read the profile (`.vegastack/architecture.json`) and repository evidence before asking questions. Keep read-only work read-only; never create a profile or artifact merely because it is absent.
+3. Note the **tier** (`prototype` | `production` | `enterprise`) — it decides which concerns apply. If no profile exists, ask for the tier (or state the assumed one) before recommending.
+4. Separate facts, constraints, assumptions, preferences, and recorded team decisions. Distinguish current, target, and migration state.
+5. Ask at most three material questions at a time. If unanswered, proceed with bounded assumptions and the smallest architecture that meets stated requirements — every proposed moving service names the trigger that justifies it.
+6. Read only the directly relevant references below. Use the committed profile, designs, and ADRs as architecture memory; never rely on hidden chat state.
+7. Prioritize security/correctness, recovery, ownership, contracts, operability, delivery, then optional optimization. Make one primary recommendation and identify the rejected alternative.
 
 Script invocations below write `<skill-dir>` as a placeholder: replace it with the absolute path of the directory containing this SKILL.md before running (no environment variable is set for you).
 
 ## Answer at the right size
 
-- **Questions and explanations:** answer directly — the verdict (if one applies), the recommendation, and at most one material risk. No section headers, no full contract.
-- **Design reviews, ADRs, migration plans:** use the full response contract: (1) Verdict, (2) Recommended architecture/decision, (3) Why it fits, (4) Material assumptions, (5) Rejected alternative and reason, (6) Implementation/migration sequence, (7) Risks and required evidence, (8) Artifacts/ADRs to update.
+- **Questions and explanations:** answer directly — the recommendation and at most one material risk. No section headers, no report.
+- **Design reviews, ADRs, migration plans:** use the [advisory report contract](references/advisory-report.md): per-area grades (`sound`/`attention`/`at-risk`), severity-ranked findings (`critical`/`production-gate`/`enterprise-gate`/`consider`), each with cited evidence and its principle ID, plus questions and not-verified items. No finding without evidence; detection is never a claim of absence.
 
 ## Route progressively
 
 | Need | Read |
 |---|---|
-| operating model, project types, profiles, exceptions | [foundation](references/architecture/foundation.md), [profile and governance](references/profile-governance.md) |
-| greenfield, brownfield, migration, continuous work | [adaptive workflows](references/workflows.md) |
+| operating model, tiers, minimum viable architecture, profiles | [foundation](references/architecture/foundation.md), [profile and governance](references/profile-governance.md) |
+| greenfield, brownfield, review, migration workflows | [adaptive workflows](references/workflows.md) |
+| review output format and evidence recipes | [advisory report](references/advisory-report.md) |
 | topology, deployables, packages, contracts | [topology and monorepo](references/architecture/topology-monorepo.md) |
 | web/Next/OpenAPI/cache | [web](references/architecture/web.md) |
 | Flutter/mobile | [Flutter](references/architecture/flutter.md) |
@@ -43,54 +44,41 @@ Script invocations below write `<skill-dir>` as a placeholder: replace it with t
 | model spend, budgets, cost attribution | [AI cost](references/architecture/ai-cost.md) |
 | realtime, notifications, channels | [realtime and channels](references/architecture/realtime-channels.md) |
 | models, BYOK, telemetry, audit | [models and observability](references/architecture/models-observability.md) |
-| security, privacy, threat model | [security and privacy](references/architecture/security-privacy.md) |
+| security, privacy, secrets, threat model | [security and privacy](references/architecture/security-privacy.md) |
 | hosting, Cloudflare/OpenNext, SLO/recovery | [hosting and reliability](references/architecture/hosting-reliability.md) |
 | delivery, migration, verification | [delivery and operations](references/architecture/delivery-operations.md) |
 | fragile boundary implementation | [golden patterns](references/golden-patterns.md) |
 
-Consult [refresh/sources.json](refresh/sources.json) only for affected unstable claims and [foundation compatibility](references/foundation-compatibility.json) for version adoption. Before advice that leans on a **critical** source (`critical: true` in the registry), check freshness: run `node <skill-dir>/scripts/refresh-evidence.mjs --topics <affected-topics>` when online, or treat the claim as `NOT VERIFIED` when offline and the registry snapshot is older than its `thresholdDays`. Source drift requests review; it never silently expires an ADR.
+For current detail beyond a pinned claim, [refresh/sources.json](refresh/sources.json) is also the research index: fetch the affected source's `llms` or `docsIndex` URL (or use an available docs MCP). For design reviews and recommendations that lean on a **critical** source (`critical: true`), check freshness — `node <skill-dir>/scripts/refresh-evidence.mjs --topics <affected-topics>` when online, or report the claim as not verified when offline past its `thresholdDays`. Plain questions answer from the shipped snapshot with a one-line staleness caveat. Consult [foundation compatibility](references/foundation-compatibility.json) for version baselines.
 
 ## Execute the task-specific workflow
 
-- **Greenfield:** Follow the adaptive intake in [workflows](references/workflows.md). Recommend capability set, topology, ownership, boundaries, immediate/deferred decisions, risks, implementation order, and qualification. Offer scaffolding only after confirmation.
-- **Brownfield/review:** Inspect instructions, manifests/locks, deployables, packages, schemas/migrations, auth, APIs/clients, jobs/workflows, infra, ADRs, observability, and runbooks before interviewing. Derive an observed draft without mutation; compare current, intended, and target states; prefer controlled migration over rewrites.
-- **ADR/design/threat/deploy:** Use the relevant asset only after write authorization. Every action includes owner, risk, evidence, rollback/migration, and review trigger.
-- **Continuous work:** Load only affected references and checks. Do not force absent capabilities into scope.
-- **Source drift:** Follow [refresh/REFRESH.md](refresh/REFRESH.md). Refresh only affected topics; map changes to rules/capabilities and preserve unrelated fast paths.
+- **Greenfield:** Follow the adaptive intake in [workflows](references/workflows.md): interview (tier first), recommend one capability set and topology sized by minimum viable architecture, name immediate/deferred decisions and triggers, and offer a slim profile draft after confirmation.
+- **Brownfield/review:** Inspect instructions, manifests/locks, deployables, schemas/migrations, auth, APIs, jobs, infra, ADRs, and runbooks before interviewing. Produce an advisory report; prefer controlled migration over rewrites.
+- **ADR/design/threat/deploy:** Use the relevant asset only after write authorization; an ADR is a decision record, never a waiver.
+- **Continuous work:** Load only affected references. Do not force absent capabilities or higher-tier concerns into scope.
+- **Source drift:** Follow [refresh/REFRESH.md](refresh/REFRESH.md). Refresh only affected topics.
 
-## Profiles, checks, and mutation safety
+## Profiles and mutation safety
 
-The committed profile lives at `.vegastack/architecture.json` (legacy `.yaml`-named JSON is still discovered, with a deprecation notice). Inspect or draft without mutation:
+The committed profile lives at `.vegastack/architecture.json` (schema v4, ~12 lines; legacy names are discovered with a deprecation notice). Inspect or draft without mutation:
 
 ```sh
 node <skill-dir>/scripts/profile-tool.mjs inspect .
 node <skill-dir>/scripts/profile-tool.mjs scaffold answers.json --dir .
+node <skill-dir>/scripts/profile-tool.mjs migrate .vegastack/architecture.json --dir .   # v3 -> v4 draft
 ```
 
-`inspect` prints a compact summary; add `--json` for the full draft. The answers format is documented by example in `<skill-dir>/assets/answers-example.json`.
-
-Write only after explicit authorization; writes are atomic, refuse symlinks, stay inside `--dir`, and require `--force` to replace differing content:
-
-```sh
-node <skill-dir>/scripts/profile-tool.mjs scaffold answers.json --dir . --write
-node <skill-dir>/scripts/profile-tool.mjs migrate-v2 .vegastack/architecture.yaml --dir .
-```
-
-Validate and review (prefer `--summary` in conversation; `--json` is for CI):
+`inspect` prints a compact summary; `--json` for the full draft. The answers format is documented by example in `<skill-dir>/assets/answers-example.json`. Write only after explicit authorization; writes are atomic, refuse symlinks, stay inside `--dir`, and require `--force` to replace differing content (`--write` to apply). Validate with:
 
 ```sh
 node <skill-dir>/scripts/validate-profile.mjs .vegastack/architecture.json
-node <skill-dir>/scripts/architecture-check.mjs . --summary
 ```
 
-`architecture-check` exit codes: 0 = no FAIL findings, 1 = FAIL findings present, 2 = tool/usage error. A non-zero exit is a review result, not a crash. Paths can be excluded deliberately via a `.guardianignore` file (path prefixes, one per line). Symlinks, agent-skill trees, and generated/bundled files (very large or very long-line files) are skipped automatically and reported in one `NOT VERIFIED` finding.
-
-Interpret outcomes exactly: `PASS` satisfies the recommendation; `FAIL` violates it without a valid exception; `EXCEPTED` is active project-owner accepted risk and remains visibly noncompliant although CI may pass; `NOT VERIFIED` records reason, risk, owner, and next action. Invalid, expired, or mismatched exceptions fail. Continue to recommend rejection when accepted risk remains unsafe.
-
 ## Guardrails
 
-- Product-owned enabled capabilities are the default. Shared/external management is rare and requires the complete declared contract in [profile and governance](references/profile-governance.md).
-- Challenge project proposals and foundation defaults when evidence warrants. Choose the smallest architecture meeting current requirements and measured objectives.
-- Never require SQL/RLS, Better Auth, Flutter, EVE, pg-boss, sandbox, connectors, enterprise identity, realtime, notifications, knowledge, or OpenBao when their activation condition is absent.
+- Tiers gate concerns, never tools. Never require a tool when only the invariant matters: the mechanism (platform secret store vs OpenBao, cron vs pg-boss, in-process loop vs EVE at prototype) is chosen by named triggers and recorded per project.
+- Never require SQL/RLS, Better Auth, Flutter, EVE, pg-boss, sandbox, connectors, enterprise identity, realtime, notifications, or knowledge when their activation condition is absent — and never surface enterprise-tier concerns as defects to a prototype/production project; report them as that tier's gate.
+- Challenge proposals and defaults when evidence warrants. Choose the smallest architecture meeting current requirements and measured objectives.
 - Never mutate a repository for an explanation or read-only review. Draft first and ask before writing.
 - Never create paid/cloud resources or claim live recovery, isolation, failover, credential-backed, or provider tests ran unless they actually ran.

package/skill/arch-guardian/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "VegaStack Architecture Guardian"
-  short_description: "Design and guard adaptive VegaStack architecture"
-  default_prompt: "Use $arch-guardian to make one scoped architecture recommendation for this project without assuming absent capabilities."
+  short_description: "Tier-aware architecture advisor for VegaStack projects"
+  default_prompt: "Use $arch-guardian to make one scoped architecture recommendation for this project at its declared tier, without assuming absent capabilities or requiring tools whose triggers are unmet."

package/skill/arch-guardian/assets/adr-template.md

@@ -1,15 +1,12 @@
 # ADR-NNN: Decision title
 
+An ADR is an optional decision record for consequential architecture choices — including deliberate departures from a guardian recommendation. Nothing gates on it; it exists so future readers know the decision was deliberate, who owns it, and when to revisit it.
+
 - Status: proposed | accepted | superseded | rejected
 - Date: YYYY-MM-DD
-- Project-Owner: accountable person
-- Scope-Paths: comma-separated exact repository-relative paths
-- Rule-ID: canonical rule identifier or `none`
-- Control-IDs: comma-separated exact checker/manual control IDs, or `all` for a rule-level exception that omits the profile controls list
-- Exception-ID: profile exception ID or `none`
-- Foundation-Deviation-Acknowledged: true | false
-- Review-Date: YYYY-MM-DD | none
-- Review-Event: concrete event | none
+- Owner: accountable person
+- Related-Principles: canonical rule IDs this decision touches, or `none`
+- Revisit: YYYY-MM-DD or a concrete event, or `none`
 
 ## Context and facts
 
@@ -17,24 +14,12 @@ Separate observed facts, constraints, assumptions, preferences and prior accepte
 
 ## Decision and rationale
 
-State the primary decision, ownership, boundaries and why it fits. State the rejected alternative and reason.
-
-## Risks and accepted deviation
-
-Describe each risk, who accepts it, affected paths/tenants/data, and why the foundation recommendation remains unmet.
-
-## Compensating controls
-
-Map preventive, detective and recovery controls to each risk. Do not claim an untested control works.
-
-## Verification
-
-List static sentinels, declared controls, reproduced tests, and `NOT VERIFIED` environment behavior with reason, risk, owner and next action.
+State the primary decision, ownership, boundaries and why it fits. State the rejected alternative and the reason — including, for any new moving service, the trigger that justifies it.
 
-## Rollback or migration
+## Risks
 
-Describe rollback, migration/exit behavior, compatibility window, irreversible steps and cleanup.
+Describe each accepted risk, who accepts it, and what is affected. If this departs from a guardian recommendation, say so plainly; the guardian will keep reporting it as accepted risk in reviews.
 
-## Review trigger
+## Verification and rollback
 
-Give an expiry date or concrete event. Missing, expired or malformed exception ADRs fail validation.
+What evidence supports the decision (label unverified claims honestly), how it would be rolled back or migrated away from, and any irreversible steps.

package/skill/arch-guardian/assets/answers-example.json

@@ -1,20 +1,10 @@
 {
-  "profileStatus": "draft",
-  "project": { "name": "example-product", "kind": "saas-product", "lifecycle": "greenfield", "access": "authenticated", "tenancy": "multi-tenant-shared-schema" },
-  "environments": { "production": { "hosting": "cloudflare-opennext" }, "localDevelopment": { "trusted": true, "allowances": ["local-secrets"] } },
-  "capabilities": {
-    "webControlPlane": { "status": "enabled", "ownership": "owned", "versions": { "next": "16.3.0", "node": "24.18.0", "bun": "1.3.14", "openNext": "1.20.2", "betterAuth": "1.6.26" }, "placement": "open-next-worker", "sourceRoots": ["apps/web"], "controls": { "canonicalApi": "rest-openapi", "openapiGenerated": true, "secureCookies": true } },
-    "flutter": { "status": "disabled", "ownership": "not-applicable" },
-    "agents": { "status": "disabled", "ownership": "not-applicable" },
-    "jobs": { "status": "disabled", "ownership": "not-applicable" },
-    "sandbox": { "status": "disabled", "ownership": "not-applicable" },
-    "connectors": { "status": "disabled", "ownership": "not-applicable" },
-    "knowledge": { "status": "disabled", "ownership": "not-applicable" },
-    "modelRouting": { "status": "disabled", "ownership": "not-applicable" },
-    "enterpriseIdentity": { "status": "disabled", "ownership": "not-applicable" },
-    "realtime": { "status": "disabled", "ownership": "not-applicable" },
-    "notifications": { "status": "disabled", "ownership": "not-applicable" },
-    "secrets": { "status": "enabled", "ownership": "owned", "versions": { "openbao": "2.3.2" }, "placement": "external-service", "sourceRoots": ["infra/secrets"], "controls": { "provider": "openbao" } }
-  },
-  "exceptions": []
+  "project": { "name": "example-product", "kind": "saas", "tier": "production", "tenancy": "multi-tenant-shared-schema" },
+  "hosting": "cloudflare-opennext",
+  "capabilities": ["web", "jobs"],
+  "notes": [
+    "Better Auth is the identity library",
+    "PostgreSQL is the system of record; RLS forced on tenant tables",
+    "Secrets live in the platform's managed secret store (trigger review before enterprise tier)"
+  ]
 }

package/skill/arch-guardian/assets/architecture-profile.json

@@ -1,25 +1,13 @@
 {
-  "schemaVersion": 3,
-  "profileStatus": "draft",
-  "foundation": { "version": "0.3.0", "baseline": "vs-2026-08-07", "adoption": "supported" },
-  "project": { "name": "REQUIRED-CONFIRMED-PROJECT-NAME", "kind": "REQUIRED-CONFIRMED-PROJECT-KIND", "lifecycle": "REQUIRED-CONFIRMED-LIFECYCLE", "access": "REQUIRED-CONFIRMED-ACCESS", "tenancy": "REQUIRED-CONFIRMED-TENANCY" },
-  "environments": {
-    "production": { "hosting": "REQUIRED-CONFIRMED-PRODUCTION-TARGET" },
-    "localDevelopment": { "trusted": true, "allowances": [] }
+  "schemaVersion": 4,
+  "foundationVersion": "0.4.0",
+  "project": {
+    "name": "REQUIRED-CONFIRMED-PROJECT-NAME",
+    "kind": "REQUIRED-CONFIRMED-KIND",
+    "tier": "REQUIRED-CONFIRMED-TIER",
+    "tenancy": "REQUIRED-CONFIRMED-TENANCY"
   },
-  "capabilities": {
-    "webControlPlane": { "status": "disabled", "ownership": "not-applicable" },
-    "flutter": { "status": "disabled", "ownership": "not-applicable" },
-    "agents": { "status": "disabled", "ownership": "not-applicable" },
-    "jobs": { "status": "disabled", "ownership": "not-applicable" },
-    "sandbox": { "status": "disabled", "ownership": "not-applicable" },
-    "connectors": { "status": "disabled", "ownership": "not-applicable" },
-    "knowledge": { "status": "disabled", "ownership": "not-applicable" },
-    "modelRouting": { "status": "disabled", "ownership": "not-applicable" },
-    "enterpriseIdentity": { "status": "disabled", "ownership": "not-applicable" },
-    "realtime": { "status": "disabled", "ownership": "not-applicable" },
-    "notifications": { "status": "disabled", "ownership": "not-applicable" },
-    "secrets": { "status": "disabled", "ownership": "not-applicable" }
-  },
-  "exceptions": []
+  "hosting": "REQUIRED-CONFIRMED-HOSTING",
+  "capabilities": [],
+  "notes": []
 }

package/skill/arch-guardian/assets/architecture-profile.schema.json

@@ -1,213 +1,31 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://raw.githubusercontent.com/vegastack/vegastack-skills/main/skills/arch-guardian/assets/architecture-profile.schema.json",
-  "title": "VegaStack Architecture Profile v3",
+  "title": "VegaStack Architecture Profile v4",
+  "description": "Slim advisor memory: confirmed project facts, the declared tier, and the enabled capability list. Versions are read from lockfiles and manifests at advice time, never duplicated here.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["schemaVersion", "profileStatus", "foundation", "project", "environments", "capabilities", "exceptions"],
-  "$defs": {
-    "exactVersion": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+(?:\\.[0-9]+)?(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$" },
-    "relativePath": { "type": "string", "minLength": 1, "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\).+$" },
-    "nonEmptyStrings": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
-    "serviceContract": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["ownerService", "contract", "version", "tenantSecurityBoundary", "identityAudience", "dataResidency", "sloRecovery", "incidentOwner", "compatibility", "migrationExit"],
-      "properties": {
-        "ownerService": { "type": "string", "minLength": 1 },
-        "contract": { "type": "string", "minLength": 1 },
-        "version": { "$ref": "#/$defs/exactVersion" },
-        "tenantSecurityBoundary": { "type": "string", "minLength": 1 },
-        "identityAudience": { "type": "string", "minLength": 1 },
-        "dataResidency": { "type": "string", "minLength": 1 },
-        "sloRecovery": { "type": "string", "minLength": 1 },
-        "incidentOwner": { "type": "string", "minLength": 1 },
-        "compatibility": { "type": "string", "minLength": 1 },
-        "migrationExit": { "type": "string", "minLength": 1 }
-      }
-    },
-    "removal": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["durableData", "credentials", "queues", "contracts", "owner", "verification", "rollback"],
-      "properties": {
-        "durableData": { "type": "string", "minLength": 1 },
-        "credentials": { "type": "string", "minLength": 1 },
-        "queues": { "type": "string", "minLength": 1 },
-        "contracts": { "type": "string", "minLength": 1 },
-        "owner": { "type": "string", "minLength": 1 },
-        "verification": { "type": "string", "minLength": 1 },
-        "rollback": { "type": "string", "minLength": 1 }
-      }
-    },
-    "capability": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["status", "ownership"],
-      "properties": {
-        "status": { "enum": ["enabled", "disabled"] },
-        "ownership": { "enum": ["owned", "shared-managed", "external-managed", "not-applicable"] },
-        "versions": {
-          "type": "object",
-          "minProperties": 1,
-          "propertyNames": { "pattern": "^[A-Za-z][A-Za-z0-9]*$" },
-          "additionalProperties": { "$ref": "#/$defs/exactVersion" }
-        },
-        "placement": { "type": "string", "minLength": 1 },
-        "sourceRoots": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/relativePath" } },
-        "contract": { "$ref": "#/$defs/serviceContract" },
-        "controls": { "type": "object", "additionalProperties": { "type": ["string", "boolean", "number", "array"], "items": { "type": "string" } } },
-        "transitionFrom": { "enum": ["enabled", "disabled"] },
-        "removal": { "$ref": "#/$defs/removal" }
-      },
-      "allOf": [
-        {
-          "if": { "properties": { "status": { "const": "enabled" } }, "required": ["status"] },
-          "then": { "required": ["versions", "placement"], "properties": { "ownership": { "enum": ["owned", "shared-managed", "external-managed"] } } }
-        },
-        {
-          "if": { "properties": { "status": { "const": "disabled" } }, "required": ["status"] },
-          "then": { "properties": { "ownership": { "const": "not-applicable" } } }
-        },
-        {
-          "if": { "properties": { "status": { "const": "enabled" }, "ownership": { "const": "owned" } }, "required": ["status", "ownership"] },
-          "then": { "required": ["sourceRoots"] }
-        },
-        {
-          "if": { "properties": { "ownership": { "enum": ["shared-managed", "external-managed"] } }, "required": ["ownership"] },
-          "then": { "required": ["contract"], "not": { "required": ["sourceRoots"] } }
-        },
-        {
-          "if": { "properties": { "status": { "const": "disabled" }, "transitionFrom": { "const": "enabled" } }, "required": ["status", "transitionFrom"] },
-          "then": { "required": ["removal"] }
-        }
-      ]
-    },
-    "exception": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["id", "ruleId", "paths", "adr", "projectOwner", "status", "verificationType", "rationale", "decision", "risks", "compensatingControls", "verification", "rollbackOrMigration", "review", "foundationDeviationAcknowledged"],
-      "properties": {
-        "id": { "type": "string", "pattern": "^EXC-[0-9]{3,}$" },
-        "ruleId": { "type": "string", "pattern": "^[A-Z]+-[0-9]{3}$" },
-        "controls": { "$ref": "#/$defs/nonEmptyStrings" },
-        "paths": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/relativePath" } },
-        "adr": { "$ref": "#/$defs/relativePath" },
-        "projectOwner": { "type": "string", "minLength": 1 },
-        "status": { "enum": ["active", "withdrawn"] },
-        "verificationType": { "enum": ["static-sentinel", "manual-qualification"] },
-        "rationale": { "type": "string", "minLength": 1 },
-        "decision": { "type": "string", "minLength": 1 },
-        "risks": { "$ref": "#/$defs/nonEmptyStrings" },
-        "compensatingControls": { "$ref": "#/$defs/nonEmptyStrings" },
-        "verification": { "$ref": "#/$defs/nonEmptyStrings" },
-        "rollbackOrMigration": { "type": "string", "minLength": 1 },
-        "review": {
-          "oneOf": [
-            { "type": "object", "additionalProperties": false, "required": ["date"], "properties": { "date": { "type": "string", "format": "date" } } },
-            { "type": "object", "additionalProperties": false, "required": ["event"], "properties": { "event": { "type": "string", "minLength": 1 } } }
-          ]
-        },
-        "foundationDeviationAcknowledged": { "const": true }
-      }
-    }
-  },
+  "required": ["schemaVersion", "project", "hosting", "capabilities"],
   "properties": {
-    "schemaVersion": { "const": 3 },
-    "profileStatus": { "enum": ["draft", "confirmed"] },
-    "foundation": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["version", "baseline", "adoption"],
-      "properties": {
-        "version": { "const": "0.3.0" },
-        "baseline": { "type": "string", "minLength": 1 },
-        "adoption": { "enum": ["supported", "candidate", "deprecated"] }
-      }
-    },
+    "schemaVersion": { "const": 4 },
+    "foundationVersion": { "type": "string", "minLength": 1 },
     "project": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["name", "kind", "lifecycle", "access", "tenancy"],
+      "required": ["name", "kind", "tier", "tenancy"],
       "properties": {
         "name": { "type": "string", "minLength": 1 },
-        "kind": { "enum": ["saas-product", "internal-product", "public-product", "platform-service", "shared-package"] },
-        "lifecycle": { "enum": ["greenfield", "brownfield", "migration", "maintenance"] },
-        "access": { "enum": ["public", "authenticated", "internal", "mixed"] },
+        "kind": { "enum": ["saas", "internal-tool", "client-site", "api", "package"] },
+        "tier": { "enum": ["prototype", "production", "enterprise"] },
         "tenancy": { "enum": ["none", "single-tenant", "multi-tenant-shared-schema", "multi-tenant-isolated"] }
       }
     },
-    "environments": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["production", "localDevelopment"],
-      "properties": {
-        "production": {
-          "type": "object",
-          "additionalProperties": false,
-          "required": ["hosting"],
-          "properties": { "hosting": { "enum": ["self-hosted", "vercel", "cloudflare-opennext", "external", "none"] }, "region": { "type": "string", "minLength": 1 } }
-        },
-        "localDevelopment": {
-          "type": "object",
-          "additionalProperties": false,
-          "required": ["trusted", "allowances"],
-          "properties": { "trusted": { "const": true }, "allowances": { "type": "array", "uniqueItems": true, "items": { "enum": ["local-workflow-world", "local-secrets", "local-unsandboxed-code", "single-process"] } } }
-        }
-      }
-    },
+    "hosting": { "enum": ["self-hosted", "vercel", "cloudflare-opennext", "external", "none"] },
     "capabilities": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["webControlPlane", "flutter", "agents", "jobs", "sandbox", "connectors", "knowledge", "modelRouting", "enterpriseIdentity", "realtime", "notifications", "secrets"],
-      "properties": {
-        "webControlPlane": { "$ref": "#/$defs/capability" },
-        "flutter": { "$ref": "#/$defs/capability" },
-        "agents": { "$ref": "#/$defs/capability" },
-        "jobs": { "$ref": "#/$defs/capability" },
-        "sandbox": { "$ref": "#/$defs/capability" },
-        "connectors": { "$ref": "#/$defs/capability" },
-        "knowledge": { "$ref": "#/$defs/capability" },
-        "modelRouting": { "$ref": "#/$defs/capability" },
-        "enterpriseIdentity": { "$ref": "#/$defs/capability" },
-        "realtime": { "$ref": "#/$defs/capability" },
-        "notifications": { "$ref": "#/$defs/capability" },
-        "secrets": { "$ref": "#/$defs/capability" }
-      }
-    },
-    "data": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["classes"],
-      "properties": {
-        "classes": {
-          "type": "array",
-          "minItems": 1,
-          "items": {
-            "type": "object",
-            "additionalProperties": false,
-            "required": ["name"],
-            "properties": {
-              "name": { "enum": ["public", "internal", "confidential", "restricted"] },
-              "residency": { "type": "string", "minLength": 1 },
-              "retention": { "type": "string", "minLength": 1 },
-              "owner": { "type": "string", "minLength": 1 }
-            }
-          }
-        }
-      }
-    },
-    "objectives": {
-      "type": "object",
-      "additionalProperties": false,
-      "properties": {
-        "availability": { "type": "string", "minLength": 1 },
-        "latency": { "type": "string", "minLength": 1 },
-        "rpoMinutes": { "type": "number", "minimum": 0 },
-        "rtoMinutes": { "type": "number", "minimum": 0 }
-      },
-      "minProperties": 1
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "enum": ["web", "flutter", "agents", "jobs", "sandbox", "connectors", "knowledge", "models", "realtime", "notifications", "enterprise-identity"] }
     },
-    "exceptions": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/exception" } }
+    "notes": { "type": "array", "items": { "type": "string", "minLength": 1 } }
   }
 }