archctx-contracts 0.1.5

package/fixtures/valid/practice-guidance.json

@@ -0,0 +1,42 @@
+{
+  "schemaVersion": "archcontext.practice-guidance/v1",
+  "catalogDigest": "sha256:235dc7f02375c408a1b1497d0d5bca444abde26519875e2d396f770ae5d3b892",
+  "overlayDigest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
+  "matches": [
+    {
+      "schemaVersion": "archcontext.practice-match/v1",
+      "practiceId": "compatibility.single-owner",
+      "assetRevision": 1,
+      "assetDigest": "sha256:52c1f1ed2128f56e0a3e4f07303efa34bda507da54bd0e7914d7cf17f6f27843",
+      "title": "Compatibility paths require one lifecycle owner",
+      "category": "compatibility",
+      "score": 87,
+      "confidence": "high",
+      "enforcement": "checkpoint",
+      "matchedBy": ["predicate", "retrieval", "scope", "signal"],
+      "evidence": [
+        {
+          "kind": "symbol",
+          "strength": "observed",
+          "subject": "symbol.billingLegacyV1",
+          "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "observedAt": "1970-01-01T00:00:00.000Z"
+        }
+      ],
+      "explanation": ["compatibility.single-owner: A compatibility path must have one accountable owner."],
+      "sourceTrust": "curated-static"
+    }
+  ],
+  "constraints": ["compatibility.single-owner: A compatibility path must have one accountable owner."],
+  "decisions": [],
+  "realConstraints": ["compatibility.single-owner:symbol.billingLegacyV1"],
+  "unknowns": [],
+  "requiredCheckpoints": ["practice:compatibility.single-owner@1"],
+  "resources": [
+    {
+      "type": "practice",
+      "uri": "archcontext://practice/compatibility.single-owner@1",
+      "digest": "sha256:52c1f1ed2128f56e0a3e4f07303efa34bda507da54bd0e7914d7cf17f6f27843"
+    }
+  ]
+}

package/fixtures/valid/practice-match.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": "archcontext.practice-match/v1",
+  "practiceId": "compatibility.single-owner",
+  "assetRevision": 1,
+  "assetDigest": "sha256:52c1f1ed2128f56e0a3e4f07303efa34bda507da54bd0e7914d7cf17f6f27843",
+  "title": "Compatibility paths require one lifecycle owner",
+  "category": "compatibility",
+  "score": 87,
+  "confidence": "high",
+  "enforcement": "checkpoint",
+  "matchedBy": ["predicate", "retrieval", "scope", "signal"],
+  "evidence": [
+    {
+      "kind": "symbol",
+      "strength": "observed",
+      "subject": "symbol.billingLegacyV1",
+      "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "observedAt": "1970-01-01T00:00:00.000Z"
+    }
+  ],
+  "explanation": ["compatibility.single-owner: A compatibility path must have one accountable owner."],
+  "sourceTrust": "curated-static"
+}

package/fixtures/valid/practice-policy.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": "archcontext.practice-enforcement-policy/v1",
+  "mode": "active",
+  "recommendations": {
+    "enabled": true,
+    "policyMode": "advisory",
+    "frequency": {
+      "minIntervalMs": 60000,
+      "cooldownMs": 604800000
+    },
+    "budgets": {
+      "maxRecommendationsPerRun": 25,
+      "maxL3InvestigationsPerRun": 1,
+      "maxRunsPerTask": 1,
+      "maxRunsPerRepositoryPerDay": 25,
+      "maxRunsPerDay": 100
+    }
+  },
+  "rules": [
+    {
+      "practiceId": "api.contract-before-implementation",
+      "enforcement": "complete",
+      "checkIds": ["required-test-evidence"],
+      "testEvidence": {
+        "commands": ["bun test packages/api-contract.test.ts"],
+        "subjects": ["schema.public-api"]
+      },
+      "scope": {
+        "pathGlobs": ["packages/**"]
+      }
+    }
+  ]
+}

package/fixtures/valid/practice-profile.json

@@ -0,0 +1,22 @@
+{
+  "schemaVersion": "archcontext.practice-profile/v1",
+  "id": "profile.typescript.service",
+  "revision": 1,
+  "status": "active",
+  "title": "TypeScript service profile",
+  "repositoryKinds": ["service"],
+  "languages": ["typescript"],
+  "frameworks": [],
+  "includePracticeIds": ["compatibility.single-owner"],
+  "excludePracticeIds": [],
+  "provenance": {
+    "sourceKind": "archcontext-native",
+    "sourceRefs": [
+      {
+        "sourceId": "archcontext.spec"
+      }
+    ],
+    "curator": "archcontext-maintainers",
+    "reviewedAt": "2026-06-23"
+  }
+}

package/fixtures/valid/practice-source.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "archcontext.practice-source/v1",
+  "id": "archcontext.adr.0010",
+  "name": "ADR-0010 Compatibility Code Requires Contract",
+  "sourceType": "archcontext",
+  "uri": "docs/adr/ADR-0010-compatibility-code-requires-contract.md",
+  "revision": "2026-06-23",
+  "licenseSpdx": "NOASSERTION",
+  "licenseLevel": "A",
+  "usagePolicy": "repo-authored",
+  "retrievedAt": "2026-06-23T00:00:00Z",
+  "contentDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "attribution": "ArchContext maintainers",
+  "review": {
+    "status": "approved",
+    "reviewer": "archcontext-maintainers",
+    "reviewedAt": "2026-06-23"
+  }
+}

package/fixtures/valid/practice-waiver.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "archcontext.practice-waiver/v1",
+  "practiceId": "modularity.no-new-cycle",
+  "checkId": "no-new-cycle",
+  "scope": {
+    "subjects": ["module.a->module.b"]
+  },
+  "owner": "team-architecture",
+  "reason": "External migration window requires keeping this edge until the cutover date.",
+  "createdAt": "2026-06-24T00:00:00.000Z",
+  "reviewAt": "2026-07-10T00:00:00.000Z",
+  "expiresAt": "2026-07-24T00:00:00.000Z",
+  "evidenceDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+}

package/fixtures/valid/practice.json

@@ -0,0 +1,93 @@
+{
+  "schemaVersion": "archcontext.practice/v1",
+  "id": "compatibility.single-owner",
+  "revision": 1,
+  "status": "active",
+  "title": "Compatibility paths require one lifecycle owner",
+  "summary": "A compatibility path must have one accountable owner and a bounded removal condition.",
+  "category": "compatibility",
+  "tags": ["compatibility", "migration"],
+  "appliesTo": {
+    "repositoryKinds": ["application", "service", "library"],
+    "languages": [],
+    "frameworks": [],
+    "pathGlobs": ["**/*"],
+    "nodeKinds": ["module", "service", "public-api"]
+  },
+  "triggers": {
+    "candidateTerms": ["compatibility", "legacy", "fallback"],
+    "pressureSignals": ["unjustified-wrapper-adapter"],
+    "structuralPredicates": ["compatibility-path-added"]
+  },
+  "evidencePolicy": {
+    "minimumStrengthForRecommendation": "heuristic",
+    "minimumStrengthForCheckpoint": "observed",
+    "minimumStrengthForEnforcement": "observed",
+    "requiredKindsForEnforcement": ["diff", "symbol"],
+    "maxEnforcementWhenOnlyHeuristic": "advisory"
+  },
+  "guidance": {
+    "questions": ["Who owns removal?"],
+    "preferred": ["Adapt at one boundary."],
+    "avoid": ["Permanent fallback code."]
+  },
+  "checks": [
+    {
+      "checkId": "compatibility-contract-required",
+      "mode": "deterministic",
+      "parameters": {
+        "requireOwner": true
+      }
+    }
+  ],
+  "enforcement": {
+    "default": "advisory",
+    "promotableTo": "complete",
+    "repoOptInRequired": true,
+    "fixtureGate": {
+      "positive": [
+        {
+          "id": "fixture.compatibility.single-owner.positive",
+          "path": "evals/practices/enforcement-waiver-adversarial.jsonl",
+          "description": "Compatibility path with missing owner fails when opted into complete enforcement."
+        }
+      ],
+      "nearNegative": [
+        {
+          "id": "fixture.compatibility.single-owner.near-negative",
+          "path": "evals/practices/benign-negative.jsonl",
+          "description": "Benign legacy wording does not become complete enforcement."
+        }
+      ],
+      "mixedChange": [
+        {
+          "id": "fixture.compatibility.single-owner.mixed-change",
+          "path": "packages/core/practice-engine/test/practice-engine.test.ts",
+          "description": "Mixed implementation and test changes keep production evidence scoped."
+        }
+      ],
+      "baseline": [
+        {
+          "id": "fixture.compatibility.single-owner.baseline",
+          "path": "packages/core/practice-engine/test/practice-engine.test.ts",
+          "description": "Previous checkpoint baseline keeps existing compatibility paths from being treated as new."
+        }
+      ]
+    }
+  },
+  "provenance": {
+    "sourceKind": "archcontext-native",
+    "sourceRefs": [
+      {
+        "sourceId": "archcontext.adr.0010"
+      }
+    ],
+    "curator": "archcontext-maintainers",
+    "reviewedAt": "2026-06-23"
+  },
+  "lifecycle": {
+    "introducedAt": "2026-06-23",
+    "reviewAfter": "2027-06-23",
+    "supersedes": []
+  }
+}

package/fixtures/valid/product-version-manifest.json

@@ -0,0 +1,51 @@
+{
+  "schemaVersion": "archcontext.product-version-manifest/v1",
+  "product": {
+    "name": "archctx",
+    "version": "0.1.5",
+    "distribution": "one-package"
+  },
+  "packageManager": "bun@1.3.10",
+  "engines": {
+    "node": ">=24 <26"
+  },
+  "surfaces": {
+    "cli": {
+      "packageName": "@archcontext/surfaces",
+      "version": "0.1.5",
+      "entrypoint": "archctx"
+    },
+    "daemon": {
+      "packageName": "@archcontext/local-runtime",
+      "version": "0.1.5",
+      "entrypoint": "archctx daemon start",
+      "rpcSchemaVersion": "archcontext.runtime-rpc/v1"
+    },
+    "mcp": {
+      "packageName": "@archcontext/surfaces",
+      "version": "0.1.5",
+      "entrypoint": "archctx mcp",
+      "transport": "stdio"
+    }
+  },
+  "schemas": {
+    "schemaSetVersion": "2026-06-25.al0-ledger",
+    "contractsPackageVersion": "0.1.5",
+    "reviewChallenge": "archcontext.review-challenge/v2",
+    "attestation": "archcontext.attestation/v2",
+    "deviceIdentity": "archcontext.device-identity/v1",
+    "runnerIdentity": "archcontext.runner-identity/v1"
+  },
+  "runtime": {
+    "localRpc": {
+      "schemaVersion": "archcontext.runtime-rpc/v1",
+      "protocol": "http-loopback"
+    },
+    "sqliteMigrations": "0001_runtime_state..0004_changeset_journal",
+    "codeGraph": {
+      "packageName": "@colbymchenry/codegraph",
+      "requiredVersion": "1.0.1",
+      "adapter": "codegraph-cli"
+    }
+  }
+}

package/fixtures/valid/projection-target.json

@@ -0,0 +1,18 @@
+{
+  "schemaVersion": "archcontext.projection-target/v1",
+  "targetId": "projection_target.architecture.index",
+  "type": "architecture-index",
+  "scope": {
+    "kind": "repository"
+  },
+  "path": "docs/architecture/index.md",
+  "ownership": "mixed",
+  "generatedRegion": {
+    "startMarker": "<!-- BEGIN ARCHCONTEXT:generated target=\"projection_target.architecture.index\" -->",
+    "endMarker": "<!-- END ARCHCONTEXT:generated target=\"projection_target.architecture.index\" -->"
+  },
+  "rendererVersion": "archcontext.docs-renderer/v1",
+  "format": "markdown",
+  "sourceDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "outputDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+}

package/fixtures/valid/recommendation-feedback.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": "archcontext.recommendation-feedback/v1",
+  "feedbackId": "recommendation_feedback.lifecycle_accept",
+  "recommendationId": "recommendation.api-owner",
+  "runId": "recommendation_run.scheduler",
+  "action": "accept",
+  "previousStatus": "open",
+  "nextStatus": "accepted",
+  "actor": {
+    "kind": "cli",
+    "id": "developer",
+    "source": "cli"
+  },
+  "reason": "Architecture owner accepted the recommendation after local readback.",
+  "explicit": true,
+  "implicitAcceptance": false,
+  "repository": {
+    "repositoryId": "repo.arch-context",
+    "storageRepositoryId": "repo.arch-context"
+  },
+  "worktree": {
+    "workspaceId": "workspace.arch-context",
+    "storageWorkspaceId": "workspace.arch-context",
+    "branch": "codex/al8",
+    "headSha": "0123456789abcdef0123456789abcdef01234567",
+    "worktreeDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+  },
+  "createdAt": "2026-06-26T12:05:00.000Z"
+}

package/fixtures/valid/recommendation-run.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": "archcontext.recommendation-run/v1",
+  "runId": "rec_run.al0_contract",
+  "repository": {
+    "repositoryId": "repo.archcontext",
+    "storageRepositoryId": "storage-repo.archcontext"
+  },
+  "worktree": {
+    "workspaceId": "workspace.main",
+    "storageWorkspaceId": "storage-workspace.main",
+    "branch": "codex/architecture-ledger-al0",
+    "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  },
+  "trigger": {
+    "level": "L1",
+    "source": "checkpoint"
+  },
+  "engineVersion": "0.1.3",
+  "catalogDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "inputDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "outputDigest": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "policyMode": "advisory",
+  "status": "succeeded",
+  "startedAt": "2026-06-25T00:00:00.000Z",
+  "completedAt": "2026-06-25T00:00:01.000Z",
+  "recommendationIds": ["rec.al0.boundary-import"],
+  "metrics": {
+    "matchCount": 1,
+    "evidenceBindingCount": 1,
+    "unboundEvidenceCount": 0
+  }
+}

package/fixtures/valid/recommendation.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "archcontext.recommendation/v2",
+  "recommendationId": "rec.al0.boundary-import",
+  "runId": "rec_run.al0_contract",
+  "fingerprint": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "subject": "relation.module-api-imports-runtime",
+  "practiceId": "modularity.respect-dependency-direction",
+  "status": "open",
+  "confidence": "medium",
+  "enforcement": "advisory",
+  "risk": "medium",
+  "uncertainty": "low",
+  "evidenceBindingIds": ["binding.evidence.al0.boundary-import"],
+  "explanation": ["Recommendation is supported by a typed predicate subject and bound evidence."],
+  "createdAt": "2026-06-25T00:00:00.000Z",
+  "updatedAt": "2026-06-25T00:00:00.000Z"
+}

package/fixtures/valid/retrieval-config.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "archcontext.retrieval-config/v1",
+  "defaultMode": "lexical",
+  "lexical": {
+    "enabled": true,
+    "tokenizer": "english-normalized+jieba-search"
+  },
+  "embedding": {
+    "enabled": false,
+    "provider": "local-deterministic",
+    "dimensions": 64,
+    "egress": "forbidden"
+  },
+  "decisionGate": {
+    "minContextRecallLift": 0.08,
+    "minConstraintRecallLift": 0.05,
+    "maxIrrelevantRatio": 0.25,
+    "maxToolCallIncrease": 0
+  }
+}

package/fixtures/valid/retrieval-decision.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "archcontext.retrieval-decision/v1",
+  "decidedAt": "2026-06-20T00:00:00.000Z",
+  "baseline": {
+    "mode": "lexical",
+    "contextRecall": 0.8,
+    "constraintRecall": 0.75,
+    "irrelevantRatio": 0.1,
+    "toolCalls": 1
+  },
+  "candidate": {
+    "mode": "embedding",
+    "contextRecall": 0.82,
+    "constraintRecall": 0.76,
+    "irrelevantRatio": 0.12,
+    "toolCalls": 1
+  },
+  "thresholds": {
+    "minContextRecallLift": 0.08,
+    "minConstraintRecallLift": 0.05,
+    "maxIrrelevantRatio": 0.25,
+    "maxToolCallIncrease": 0
+  },
+  "decision": "keep-lexical",
+  "evidenceDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+}

package/fixtures/valid/retrieval-eval.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "archcontext.retrieval-eval/v1",
+  "id": "eval.local-context-recall.v1",
+  "seed": 42,
+  "queries": [
+    {
+      "id": "q.loopback-explorer",
+      "text": "show the local explorer loopback boundary",
+      "expectedContextIds": ["adr.0032", "guardrail.local-loopback"],
+      "expectedConstraintIds": ["constraint.zero-egress"],
+      "prohibitedContextIds": ["saas.source-upload"]
+    }
+  ]
+}

package/fixtures/valid/review-challenge-v2.json

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "archcontext.review-challenge/v2",
+  "challengeId": "chal_20260620_0001",
+  "installationId": 10001,
+  "repositoryId": 20002,
+  "pullRequestNumber": 42,
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "baseSha": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "nonce": "nonce_base64url_0001",
+  "requiredTrust": "developer",
+  "policyProfileId": "policy.default",
+  "createdAt": "2026-06-20T09:00:00Z",
+  "expiresAt": "2026-06-20T09:15:00Z",
+  "status": "PENDING"
+}

package/fixtures/valid/review-result.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "archcontext.review/v1",
+  "reviewId": "review_123",
+  "taskSessionId": "task_123",
+  "snapshot": {
+    "headSha": "abc123",
+    "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+    "modelDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+    "codeFactsDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
+  },
+  "posture": "intervention",
+  "result": "fail_action_required",
+  "summary": {
+    "errors": 1,
+    "warnings": 2,
+    "notices": 1
+  },
+  "findings": [
+    {
+      "id": "finding_1",
+      "type": "unjustified-compatibility-path",
+      "severity": "error",
+      "evidenceRefs": ["evidence_12"],
+      "message": "LegacyStatusMapper has no compatibility contract.",
+      "recommendedAction": "Migrate internal callers and delete the mapper."
+    }
+  ],
+  "cleanup": {
+    "required": 3,
+    "completed": 2
+  }
+}

package/fixtures/valid/runner-identity.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "archcontext.runner-identity/v1",
+  "runnerId": "runner_0001",
+  "installationId": 10001,
+  "repositoryIds": [20002],
+  "workflowRef": "owner/repo/.github/workflows/archcontext-review.yml@refs/heads/main",
+  "publicKeyId": "key_runner_0001",
+  "publicKeyFingerprint": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
+  "status": "active",
+  "createdAt": "2026-06-20T09:00:00Z",
+  "rotatedAt": null,
+  "revokedAt": null
+}

package/fixtures/valid/structurizr-mapping.json

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "archcontext.structurizr-mapping/v1",
+  "id": "mapping.structurizr.native",
+  "exportMode": "export-first",
+  "native": {
+    "nodeKinds": ["capability", "module", "component", "interface", "datastore", "external-system"],
+    "relationKinds": ["depends-on", "calls", "publishes", "subscribes", "reads", "writes"]
+  },
+  "structurizr": {
+    "workspace": "ArchContext",
+    "model": ["softwareSystem", "container", "component"],
+    "views": ["systemLandscape", "container", "component"]
+  },
+  "views": ["systemLandscape", "container"]
+}

package/fixtures/valid/task-context.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": "archcontext.task-context/v1",
+  "task": "Add team invitations and role-based access",
+  "posture": "structural",
+  "architecturePressure": {
+    "level": "medium",
+    "score": 47,
+    "signals": []
+  },
+  "refactorConfidence": {
+    "level": "high",
+    "score": 82,
+    "coverage": []
+  },
+  "relevantNodes": ["module.auth", "module.team"],
+  "constraints": ["constraint.authorization-boundary"],
+  "decisions": ["adr.0009.permission-model"],
+  "realConstraints": [],
+  "unknowns": [],
+  "recommendedTargetState": {},
+  "requiredCheckpoints": ["after-data-model-change", "before-task-complete"],
+  "resources": []
+}

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "archctx-contracts",
+  "version": "0.1.5",
+  "private": false,
+  "type": "module",
+  "license": "Apache-2.0",
+  "files": [
+    "src",
+    "fixtures"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/src/control-plane-routes.ts

@@ -0,0 +1,35 @@
+import { digestJson } from "./schema";
+
+export const CONTROL_PLANE_ROUTES = [
+  "GET /oauth/github/start",
+  "POST /oauth/github/callback",
+  "POST /device/authorize",
+  "POST /device/complete",
+  "GET /entitlements/:repository",
+  "POST /github/webhook",
+  "POST /stripe/webhook",
+  "GET /v1/challenges",
+  "POST /v1/challenges",
+  "GET /v1/challenges/:challenge",
+  "POST /v1/challenges/:challenge/lease",
+  "POST /v1/challenges/:challenge/attestations",
+  "POST /v1/challenges/:challenge/cancel",
+  "POST /v1/device-keys",
+  "POST /v1/device-keys/:device/revoke",
+  "POST /v1/runner-keys",
+  "POST /v1/runner-keys/:runner/rotate",
+  "POST /v1/runner-keys/:runner/revoke",
+  "POST /attestations/verify",
+  "POST /org-runners",
+  "POST /org-runners/:runner/revoke",
+  "GET /mcp/metadata",
+  "GET /chatgpt/directory",
+  "POST /chatgpt/releases/:version/rollback",
+  "GET /notifications/providers",
+  "PUT /notifications/providers/:provider",
+  "POST /notifications/events"
+] as const;
+
+export function controlPlaneRouteDigest(routes: readonly string[] = CONTROL_PLANE_ROUTES): string {
+  return digestJson([...routes]);
+}