rcf-lite 0.26.0 → 0.27.0

package/blueprints/jobs-background/contributions/requirements/jobs-background-req-002.json

@@ -2,7 +2,7 @@
   "reqId": "jobs-background-REQ-002",
   "prdId": "PRD-001",
   "title": "Job-definition contract: name, handler, input schema (opaque per project), retry policy, timeout",
-  "description": "A job definition is a module in the applying project's jobs directory (default ./jobs/, elicited at apply time) exporting a shape { name, handler, inputSchema, retryPolicy, timeoutMs }. Name is a stable string; handler is an async function receiving the message body and returning a value or throwing; inputSchema is opaque per project (the applying project's own validation library); retryPolicy is { maxAttempts, backoff }; timeoutMs is a positive integer (default 60000, floor 1000, ceiling bounded by the applied queue consumer wall-clock ceiling per ADR-3104). The jobs runtime registers every job at boot on the applied queue consumer and dispatches by name.",
+  "description": "A job definition is a module in the applying project's jobs directory (default ./jobs/, elicited at apply time) exporting the shape owned on TAC-3101-jobs-background-job-definition.interfaces.jobModule.default. The jobs runtime registers every job at boot on the applied queue consumer and dispatches by name. This blueprint declares the backgroundJobs applied capability at runtime: the registration entry point walks the elicited jobs directory once at boot, and the applied surface exposes the resulting set through the operator-facing surface elicited on the manifest. The handler-timeout-seconds is elicited at apply time per ADR-3104 (default 60; floor 1; ceiling bounded by the applied queue's consumer wall-clock). A handler exceeding its timeout raises a retryable timeout error routed through the queue redelivery mechanism.",
   "category": "functional",
   "domain": "jobs",
   "priority": "must",
@@ -11,8 +11,12 @@
     "blueprint:jobs-background",
     "category:01-definition"
   ],
-  "version": "1.0.0",
+  "version": "1.0.2",
   "status": "approved",
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-10T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-3101-jobs-background-job-definition",
+    "field": "interfaces.jobModule.default"
+  }
 }

package/blueprints/jobs-background/contributions/requirements/jobs-background-req-003.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-3102-jobs-background-scheduler",
+    "field": "responsibilities.cronAndDelayed"
+  }
 }

package/blueprints/jobs-background/contributions/requirements/jobs-background-req-004.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-3101-jobs-background-job-definition",
+    "field": "responsibilities.retry"
+  }
 }

package/blueprints/jobs-background/contributions/requirements/jobs-background-req-005.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-3103-jobs-background-run-log",
+    "field": "responsibilities.fourEvents"
+  }
 }

package/blueprints/jobs-background/contributions/requirements/jobs-background-req-006.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "adrId": "ADR-3102-jobs-background-scheduler-mode",
+    "field": "decision.operatorSurface"
+  }
 }

package/blueprints/jobs-background/contributions/tacs/tac-3101-jobs-background-job-definition.json

@@ -2,12 +2,12 @@
   "tacId": "TAC-3101-jobs-background-job-definition",
   "prdId": "PRD-001",
   "tadId": "TAD-001",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "status": "approved",
   "name": "Jobs-background job-definition module contract",
-  "purpose": "The shape every job-definition module in the applying project's jobs directory exports. One shape carries name, handler, inputSchema (opaque per project), retryPolicy, and timeoutMs. The jobs runtime registers every job at boot on the applied queue consumer and dispatches by name.",
+  "purpose": "The shape every job-definition module in the applying project's jobs directory exports, owned on interfaces.jobModule.default below. The jobs runtime registers every job at boot on the applied queue consumer and dispatches by name.",
   "responsibilities": [
-    "Declare a job by exporting { name, handler, inputSchema, retryPolicy, timeoutMs } (AC-30102-1, AC-jobs-retryOnHandlerFailure).",
+    "Declare a job by exporting the shape owned on interfaces.jobModule.default below (AC-30102-1, AC-jobs-retryOnHandlerFailure).",
     "Bound handler wall-clock via timeoutMs; jobs runtime cancels a handler that exceeds timeoutMs and treats it as a retryable error (AC-jobs-retryOnHandlerFailure).",
     "Respect the applied queue's max-attempts ceiling; retryPolicy.maxAttempts must not exceed the ceiling (AC-jobs-retryOnHandlerFailure).",
     "Refuse composition on a bare project via the requiresAppliedCapabilities gate (AC-jobs-requiresQueue)."
@@ -41,10 +41,10 @@
     {
       "name": "Applied queue capability",
       "kind": "external",
-      "description": "Composed on the applied blueprint declaring capabilities: [queue] via the T-5 mechanism; refuses apply on a bare project per REQ-001."
+      "description": "Composed on the applied blueprint declaring capabilities: [queue] via the applied-capability mechanism; refuses apply on a bare project per REQ-001."
     }
   ],
   "tradeoffs": "The v1.0.0 job-definition shape does not prescribe an inputSchema validator; the applying project owns validation. A later minor could add an optional validate hook if a shipped validation library becomes the shelf default. The dispatch table is by job name; two modules exporting the same name collide at boot and refuse.",
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-10T00:00:00.000Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30101.json

@@ -16,10 +16,27 @@
       "when": "rcf define blueprint add ./blueprints/jobs-background runs",
       "then": "exit code is 3; stderr first-line grep matches [jobs-background-no-queue]; stderr grep matches messaging-queue-cloudflare; stderr grep matches --allow-no-queue-yet; the manifest has no jobs-background entry",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30101-2",
+      "description": "--allow-no-queue-yet override lands sidecar note. Given a bare project without an applied queue capability, when apply runs with --allow-no-queue-yet, then apply succeeds with exit 0, writes rcf/blueprints/jobs-background.applied.json with allowNoAuthYet: true, appliedCapabilities: [], notes matching /no queue yet/ and /--allow-no-queue-yet/, and the operator can then apply a queue provider to lift the sidecar note on the next apply cycle.",
+      "given": "a bare project without an applied queue capability",
+      "when": "apply runs with --allow-no-queue-yet",
+      "then": "apply exits 0; sidecar written with allowNoAuthYet: true, empty appliedCapabilities, notes naming \"no queue yet\" and the flag",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "adrId": "ADR-3103-jobs-background-requires-applied-capabilities",
+        "field": "decision.allowSkipFlag"
+      },
+      "disposition": "fixed"
     }
   ],
-  "tacIds": ["TAC-3101-jobs-background-job-definition"],
+  "tacIds": [
+    "TAC-3101-jobs-background-job-definition"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30102.json

@@ -2,24 +2,59 @@
   "usId": "jobs-background-US-30102",
   "prdId": "PRD-001",
   "reqId": "jobs-background-REQ-002",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "status": "approved",
-  "title": "Job definition contract with name, handler, inputSchema, retryPolicy and timeoutMs",
+  "title": "Job module conforms to the TAC-3101 default export shape",
   "asA": "developer authoring a job in an applying project",
-  "iWant": "one shipped job-definition shape { name, handler, inputSchema, retryPolicy, timeoutMs } that the jobs runtime registers at boot on the applied queue consumer",
+  "iWant": "one shipped job-definition shape owned on TAC-3101-jobs-background-job-definition.interfaces.jobModule.default that the jobs runtime registers at boot on the applied queue consumer",
   "soThat": "every job in the project follows one uniform contract without the blueprint prescribing an input-validation library or a handler-callback style",
   "acceptanceCriteria": [
     {
       "id": "AC-30102-1",
-      "description": "The two toy job-definition modules under packages/rcf-lite/test/fixtures/infra-s3-and-queue/jobs/ (send-welcome-email.mjs and refresh-cache.mjs) each export a plain object with name (string), handler (async function), inputSchema (opaque, non-null), retryPolicy ({ maxAttempts: positive integer, backoff: one of exponential | constant | linear }), and timeoutMs (positive integer). The jobs runtime under src/jobs-runtime.mjs registers every job by name at boot and dispatches by message.name.",
-      "given": "the shared sample-app fixture with the T-4 jobs-runtime wired on top of the T-3 in-memory queue seam",
+      "description": "The two toy job-definition modules under packages/rcf-lite/test/fixtures/infra-s3-and-queue/jobs/ (send-welcome-email.mjs and refresh-cache.mjs) each export a plain object matching the shape owned on TAC-3101-jobs-background-job-definition.interfaces.jobModule.default. The jobs runtime under src/jobs-runtime.mjs registers every job by name at boot and dispatches by message.name.",
+      "given": "the shared sample-app fixture with the jobs-runtime wired on top of the in-memory queue seam",
       "when": "the fixture jobs runtime boots and reads the jobs/ directory",
-      "then": "both toy job modules load without throwing; the runtime's registry has entries keyed by name whose values carry handler, inputSchema, retryPolicy and timeoutMs; dispatch by message.name calls the matching handler",
+      "then": "both toy job modules load without throwing; the runtime's registry has entries keyed by name whose values match the shape owned on TAC-3101-jobs-background-job-definition.interfaces.jobModule.default; dispatch by message.name calls the matching handler",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template",
+      "ownerRef": {
+        "tacId": "TAC-3101-jobs-background-job-definition",
+        "field": "interfaces.jobModule.default"
+      }
+    },
+    {
+      "id": "AC-30102-2",
+      "description": "Malformed job-definition module refused at load. Given a job module in the elicited jobs-directory whose default export is missing one of the fields owned on TAC-3101-jobs-background-job-definition.interfaces.jobModule.default, when registerJobs walks the directory at boot, then it refuses with a named error kind (malformedJobDefinition) naming the missing field and the module path; no job registers into the runtime.",
+      "given": "a job module missing one shape field",
+      "when": "registerJobs walks the elicited jobs-directory at boot",
+      "then": "registerJobs refuses with malformedJobDefinition naming the missing field and the module path; no job registers",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3101-jobs-background-job-definition",
+        "field": "interfaces.jobModule.default"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30102-3",
+      "description": "retryPolicy.maxAttempts above applied queue ceiling refused at load. Given a job-definition module whose retryPolicy.maxAttempts exceeds the applied queue's max-attempts ceiling (Cloudflare Queues caps at 100 per ADR-3003 in the messaging-queue-cloudflare blueprint), when the job-definition loader validates the module against the applied queue's ceiling, then the loader refuses with a named error kind (retryPolicyExceedsQueueCeiling) carrying { requested: <maxAttempts>, ceiling: <queueCap> } and the job does not register on the scheduler; no jobScheduled fires.",
+      "given": "a job-definition module with retryPolicy.maxAttempts > applied queue's ceiling",
+      "when": "the job-definition loader validates the module against the applied queue",
+      "then": "loader refuses with retryPolicyExceedsQueueCeiling carrying { requested, ceiling }; the job does not register; no jobScheduled fires",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3101-jobs-background-job-definition",
+        "field": "responsibilities.respectMaxAttemptsCeiling"
+      },
+      "disposition": "template"
     }
   ],
-  "tacIds": ["TAC-3101-jobs-background-job-definition"],
+  "tacIds": [
+    "TAC-3101-jobs-background-job-definition"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30103.json

@@ -16,10 +16,55 @@
       "when": "the fake clock advances one POSIX cron minute or past a scheduled delayMs",
       "then": "one message per fire lands on the applied in-memory queue with the target job.name and an ISO-8601 timestamp",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30103-2",
+      "description": "Malformed cron string refused. Given a job definition scheduled with a cron string that does not match a POSIX cron shape (missing a field, or an out-of-range value), when the scheduler validates the schedule, then the scheduler refuses with a named error kind (malformedCronExpression) and the job does not register into the schedule; jobScheduled does not fire.",
+      "given": "a job scheduled with a malformed cron string",
+      "when": "the scheduler validates",
+      "then": "the scheduler refuses with malformedCronExpression; the job does not register; jobScheduled does not fire",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3102-jobs-background-scheduler",
+        "field": "interfaces.scheduler.schedule"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30103-3",
+      "description": "Scheduler mode workerCron. Given the elicited scheduler-mode answers workerCron and the applied deploy-cloudflare-workers target carries at least one job with a cron string, when the sidecar records the answer, then the generated wrangler.toml carries a `[triggers] crons = [\"<cron-string>\"]` entry per scheduled job (one entry per distinct cron string) and the Worker's `scheduled(event, env, ctx)` handler dispatches to the same publisher the inProcess scheduler would call; the scheduler.start entry point returns immediately in workerCron mode and holds no setInterval.",
+      "given": "scheduler-mode = workerCron and one job scheduled on cron '* * * * *'",
+      "when": "the sidecar records the answer",
+      "then": "wrangler.toml carries `[triggers] crons = [\"* * * * *\"]` and the Worker's scheduled handler dispatches to the publisher; scheduler.start holds no setInterval",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "adrId": "ADR-3102-jobs-background-scheduler-mode",
+        "field": "decision"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30103-4",
+      "description": "Scheduler mode external. Given the elicited scheduler-mode answers external, when the sidecar records the answer, then the scheduler.start entry point holds no setInterval and no wrangler cron entry is emitted; the operator surface (per the operator-surface elicit) exposes a fire-now command the external cron runner (a Kubernetes CronJob, a GitHub Actions schedule, a systemd timer) invokes on its own tick; a jobScheduled event fires per invocation from the fire-now command, not from an in-process clock.",
+      "given": "scheduler-mode = external",
+      "when": "the sidecar records the answer and the external cron runner invokes the fire-now command",
+      "then": "scheduler.start holds no setInterval; no wrangler cron entry is emitted; jobScheduled fires per fire-now invocation, not per in-process tick",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "adrId": "ADR-3102-jobs-background-scheduler-mode",
+        "field": "decision"
+      },
+      "disposition": "template"
     }
   ],
-  "tacIds": ["TAC-3102-jobs-background-scheduler"],
+  "tacIds": [
+    "TAC-3102-jobs-background-scheduler"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30104.json

@@ -16,10 +16,70 @@
       "when": "the failing job is scheduled",
       "then": "three jobStarted records with the same jobId and attempts 1,2,3; one jobFailed with a terminalErrorCode; no fourth jobStarted",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30104-2",
+      "description": "Handler timeout raises a retryable error. Given a handler exceeding the elicited handler-timeout-seconds without completing, when the runtime wall-clock reaches the timeout, then the runtime raises a retryable timeout error routed through the applied queue redelivery, jobFailed fires with { jobId, reason: \"timeout\" }, and the message is redelivered against maxAttempts.",
+      "given": "a handler exceeding the elicited handler-timeout-seconds",
+      "when": "the wall-clock reaches the timeout",
+      "then": "a retryable timeout error routes through the queue; jobFailed fires with reason: timeout; the message is redelivered",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3101-jobs-background-job-definition",
+        "field": "responsibilities.retry"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30104-3",
+      "description": "Retry backoff exponential effective-delay per attempt is base * 2^(attempts-1) capped at 10 minutes. Given a job with retryPolicy.backoff='exponential' and base=1 second, when the runtime issues retries for attempts 1..15, then the effective inter-attempt delay observed on the sink is 1s, 2s, 4s, 8s, 16s, ..., 512s, then capped at 600s (10 minutes) for every subsequent attempt; a probe measuring the schedule spacing FAILS if any attempt spacing exceeds 10 minutes or does not follow the 2^(n-1) curve until the cap.",
+      "given": "retryPolicy.backoff='exponential' with base=1s and maxAttempts sufficient to reach the cap",
+      "when": "the runtime issues retries",
+      "then": "inter-attempt delays observed on the sink follow base*2^(attempts-1) up to 600s then cap at 600s; the cap probe FAILS on any spacing above 10 minutes",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3101-jobs-background-job-definition",
+        "field": "responsibilities.backoffExponential"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30104-4",
+      "description": "Retry backoff constant effective-delay per attempt equals base seconds. Given a job with retryPolicy.backoff='constant' and base=5 seconds, when the runtime issues retries for attempts 1..N, then every observed inter-attempt delay on the sink equals 5 seconds and the probe measuring the schedule spacing FAILS on any observed delay that deviates from base by more than the sink's tick resolution.",
+      "given": "retryPolicy.backoff='constant' with base=5s",
+      "when": "the runtime issues retries",
+      "then": "every observed inter-attempt delay equals 5 seconds; probe FAILS on any deviation beyond the sink tick",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3101-jobs-background-job-definition",
+        "field": "responsibilities.backoffConstant"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30104-5",
+      "description": "Retry backoff linear effective-delay per attempt is base * attempts. Given a job with retryPolicy.backoff='linear' and base=2 seconds, when the runtime issues retries for attempts 1..N, then the observed inter-attempt delay on the sink is 2s, 4s, 6s, 8s, ..., growing linearly; a probe measuring the schedule spacing FAILS on any spacing that does not equal base*attempts within the sink tick resolution.",
+      "given": "retryPolicy.backoff='linear' with base=2s",
+      "when": "the runtime issues retries",
+      "then": "observed inter-attempt delays follow base*attempts (2s, 4s, 6s, ...); probe FAILS on any deviation",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3101-jobs-background-job-definition",
+        "field": "responsibilities.backoffLinear"
+      },
+      "disposition": "template"
     }
   ],
-  "tacIds": ["TAC-3101-jobs-background-job-definition", "TAC-3103-jobs-background-run-log"],
+  "tacIds": [
+    "TAC-3101-jobs-background-job-definition",
+    "TAC-3103-jobs-background-run-log"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30105.json

@@ -16,10 +16,27 @@
       "when": "the PII-input job is scheduled",
       "then": "every event record whitelisted; grep on the serialised event stream returns zero matches for the PII fixture text",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30105-2",
+      "description": "Secret exclusion by grep-across-source. Given the runtime source, the scheduler source and the run-log source, when a source-tree scan searches every runLog.fire call site for job-input fields other than the whitelist {jobId, jobName, startedAt, finishedAt, attempts, duration, resultDigest, errorKind}, then no match is found; a mutation SIMULATE_PII_IN_JOB_INPUT=true forces a PII field onto an event and the scan FAILS naming the leaked field.",
+      "given": "runtime, scheduler and run-log source",
+      "when": "a scan runs across every runLog.fire call site",
+      "then": "no non-whitelist field is found; the PII mutation FAILS naming the leaked field",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3103-jobs-background-run-log",
+        "field": "interfaces.eventEnvelope"
+      },
+      "disposition": "fixed"
     }
   ],
-  "tacIds": ["TAC-3103-jobs-background-run-log"],
+  "tacIds": [
+    "TAC-3103-jobs-background-run-log"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30106.json

@@ -16,10 +16,27 @@
       "when": "grep queries walk the guide and README",
       "then": "guide/jobs-background.md contains the substring operator-facing surface and names all three values cli, httpEndpoint, none; README.md names the same three values; neither ships a CLI binary nor an HTTP router",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30106-2",
+      "description": "Enum drift refused at load. Given the elicited operator-surface answered outside the shipped enum {cli, httpEndpoint, none}, when the loader validates the elicited answer, then the loader refuses with a named error kind (invalidOperatorSurface) and the applied sidecar is not written.",
+      "given": "operator-surface answered outside {cli, httpEndpoint, none}",
+      "when": "the loader validates",
+      "then": "the loader refuses with invalidOperatorSurface; the applied sidecar is not written",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3103-jobs-background-run-log",
+        "field": "interfaces.createRunLog"
+      },
+      "disposition": "template"
     }
   ],
-  "tacIds": ["TAC-3103-jobs-background-run-log"],
+  "tacIds": [
+    "TAC-3103-jobs-background-run-log"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30107.json

@@ -16,10 +16,27 @@
       "when": "rcf define blueprint add ./blueprints/jobs-background --allow-no-queue-yet runs",
       "then": "exit code is 0; rcf/blueprints/jobs-background.applied.json exists; slug is jobs-background; allowNoAuthYet is true; appliedCapabilities is []; notes contains 'no queue yet', '--allow-no-queue-yet' and 'queue'; notes does NOT contain 'no auth yet' nor 'no secrets-management yet'",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30107-2",
+      "description": "Sidecar note references the flag verbatim. Given the --allow-no-queue-yet override applied, when the sidecar is inspected, then its notes field contains the exact substring \"--allow-no-queue-yet\" (so an operator later dropping the note can grep for the flag) and does not carry an \"auth\"-family phrasing that would misdirect the operator to a different override.",
+      "given": "the --allow-no-queue-yet override applied",
+      "when": "the sidecar is inspected",
+      "then": "the notes field contains the exact --allow-no-queue-yet substring and no auth-family phrasing",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "adrId": "ADR-3103-jobs-background-requires-applied-capabilities",
+        "field": "decision.allowSkipFlag"
+      },
+      "disposition": "fixed"
     }
   ],
-  "tacIds": ["TAC-3101-jobs-background-job-definition"],
+  "tacIds": [
+    "TAC-3101-jobs-background-job-definition"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30108.json

@@ -16,10 +16,28 @@
       "when": "the fake clock advances 60 seconds",
       "then": "one jobStarted event fires within fireToleranceMs; one jobCompleted event fires within timeoutMs; both records match the whitelist",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30108-2",
+      "description": "Cron tick outside tolerance FAILS. Given a job scheduled on a cron string and the elicited fire tolerance window, when the cron tick fires more than tolerance seconds past the scheduled boundary, then the scheduler emits jobFireOutsideTolerance on the event sink carrying the observed delay; a mutation SIMULATE_CRON_JITTER=true delays the tick past tolerance and the sink observer FAILS the run.",
+      "given": "a scheduled cron string and the elicited fire tolerance",
+      "when": "the cron tick fires beyond tolerance",
+      "then": "jobFireOutsideTolerance fires with the observed delay; the jitter mutation FAILS the run",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3102-jobs-background-scheduler",
+        "field": "interfaces.scheduler.schedule"
+      },
+      "disposition": "template"
     }
   ],
-  "tacIds": ["TAC-3102-jobs-background-scheduler", "TAC-3103-jobs-background-run-log"],
+  "tacIds": [
+    "TAC-3102-jobs-background-scheduler",
+    "TAC-3103-jobs-background-run-log"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/contributions/user-stories/jobs-background-us-30109.json

@@ -7,19 +7,36 @@
   "title": "Cross-cutting: retry-then-DLQ handoff when maxAttempts is exhausted",
   "asA": "operator observing a terminally failing job",
   "iWant": "the applied queue's DLQ to receive the message after maxAttempts is exhausted, and jobFailed to fire on the sink with a terminal error code",
-  "soThat": "a terminally failing job lands on the queue's DLQ (as ratified by the T-3 messaging-queue-cloudflare DLQ contract) and the run log records the terminal event",
+  "soThat": "a terminally failing job lands on the queue's DLQ (as ratified by the messaging-queue-cloudflare DLQ contract) and the run log records the terminal event",
   "acceptanceCriteria": [
     {
       "id": "AC-30109-1",
-      "description": "The retry-and-fail probe's report, after the three failing jobStarted events and the terminal jobFailed event, records that the underlying in-memory queue driver invoked the DLQ producer path (dlqOverflow flag on the driver's introspection API) for the failing message id. The DLQ handoff is a T-3 concern; jobs-background only asserts the terminal jobFailed event fires and the DLQ path is exercised, not the DLQ delivery contents (T-3 covers that).",
-      "given": "the fixture with SIMULATE_HANDLER_THROW=true and the T-3 in-memory queue seam active",
+      "description": "The retry-and-fail probe's report, after the three failing jobStarted events and the terminal jobFailed event, records that the underlying in-memory queue driver invoked the DLQ producer path (dlqOverflow flag on the driver's introspection API) for the failing message id. The DLQ handoff is a queue-blueprint concern; jobs-background only asserts the terminal jobFailed event fires and the DLQ path is exercised, not the DLQ delivery contents (the queue blueprint covers that).",
+      "given": "the fixture with SIMULATE_HANDLER_THROW=true and the in-memory queue seam active",
       "when": "the retry-and-fail probe runs to completion",
       "then": "the probe report carries dlqInvoked true; the sink shows jobFailed with terminalErrorCode; the retry-and-fail run report at .rcf/reports/blueprints/jobs-background/retry-and-fail.json carries aggregateVerdict pass",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-30109-2",
+      "description": "Retry chain observability. Given a handler that throws retryable on every delivery up to maxAttempts, when the chain completes, then the run-log carries a jobStarted plus jobFailed pair per delivery attempt and one final jobDeadLettered event; the run-log ordering is stable and each event carries the same jobId; a mutation SIMULATE_JOB_LOG_DUPLICATE=true fires an extra jobStarted and the observer FAILS.",
+      "given": "a handler throwing retryable up to maxAttempts",
+      "when": "the retry chain completes",
+      "then": "the run-log has jobStarted/jobFailed pairs per attempt and one jobDeadLettered; ordering stable; jobId consistent; the duplicate mutation FAILS",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-3103-jobs-background-run-log",
+        "field": "interfaces.runLog.fire"
+      },
+      "disposition": "template"
     }
   ],
-  "tacIds": ["TAC-3103-jobs-background-run-log"],
+  "tacIds": [
+    "TAC-3103-jobs-background-run-log"
+  ],
   "createdAt": "2026-09-06T20:30:00.000Z",
-  "updatedAt": "2026-09-06T20:30:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/jobs-background/docs/topics.md

@@ -6,7 +6,7 @@ This file is the jobs-background half of the cross-blueprint contract. The Phase
 
 | Topic string | jobs-background contribution | Origin | Composition note |
 |---|---|---|---|
-| `backgroundJobModel` | ADR-3101-jobs-background-model | Minted by this blueprint. Names the shipped background-job model; the shipped answer is retry-and-schedule (per-message re-delivery on failure inheriting the applied queue's max-attempts ceiling; POSIX cron plus one-shot delayed schedules; metadata-only run-log at four moments). | The one project-wide decision on what background-job discipline the project ships. A future stateful-workflow sibling (Temporal-shape, Airflow-shape) would contribute the same topic string with a different answer, forcing a DELIBERATE conflict the operator resolves with a project-level ADR. The round-6 Workflows adapter (per Baz section 5.7 and round-6 decision (b)) lives INSIDE this blueprint as a v1.1.0 minor scheduler-mode value at ADR-3102 and does NOT re-claim this topic. |
+| `backgroundJobModel` | ADR-3101-jobs-background-model | Minted by this blueprint. Names the shipped background-job model; the shipped answer is retry-and-schedule (per-message re-delivery on failure inheriting the applied queue's max-attempts ceiling; POSIX cron plus one-shot delayed schedules; metadata-only run-log at four moments). | The one project-wide decision on what background-job discipline the project ships. A future stateful-workflow sibling (Temporal-shape, Airflow-shape) would contribute the same topic string with a different answer, forcing a DELIBERATE conflict the operator resolves with a project-level ADR. The round-6 Workflows adapter (per spec section 5.7 and round-6 decision (b)) lives INSIDE this blueprint as a v1.1.0 minor scheduler-mode value at ADR-3102 and does NOT re-claim this topic. |
 
 The jobs-background blueprint claims one global topic. Every other contribution is scope-local (ADR-3102 scheduler mode, ADR-3103 requires-applied-capabilities, ADR-3104 timeout floor do not contribute global topics; a composing blueprint that holds an opinion on any of them authors its own project-level ADR).
 
@@ -64,7 +64,7 @@ ADR/TAC suffixes for this blueprint use the 3101-3199 block, continuing the shel
 
 - Reuse `backgroundJobModel` exactly as spelled here when your blueprint holds an opinion on the shipped background-job discipline; contribute your own scope:global ADR on that string and let composition surface the pairing.
 - A future stateful-workflow sibling (Temporal-shape, Airflow-shape) mints on demand; each claims `backgroundJobModel` and conflicts by design.
-- A consumer blueprint that surfaces "run this later" or "run this on a schedule" reads the `backgroundJobs` capability declared on `blueprint.json` per section 6a of `blueprint-authoring.md` to obtain the job-definition and scheduler surfaces at apply time via the T-5 capability-declaration mechanism.
+- A consumer blueprint that surfaces "run this later" or "run this on a schedule" reads the `backgroundJobs` capability declared on `blueprint.json` per section 6a of `blueprint-authoring.md` to obtain the job-definition and scheduler surfaces at apply time via the capability-declaration mechanism.
 
 ## Deliberate-conflict statement
 

package/blueprints/jobs-background/guide/jobs-background.md

@@ -24,7 +24,7 @@ On a fresh project with `messaging-queue-cloudflare` already applied:
 rcf define blueprint add jobs-background
 ```
 
-Applies 22 contributions and writes the sidecar `rcf/blueprints/jobs-background.applied.json` with `appliedCapabilities: ["queue"]` (discovered through the T-5 capability mechanism).
+Applies 22 contributions and writes the sidecar `rcf/blueprints/jobs-background.applied.json` with `appliedCapabilities: ["queue"]` (discovered through the capability mechanism).
 
 On a bare project (no queue provider applied), apply refuses:
 
@@ -49,7 +49,7 @@ Exits 0 and writes the sidecar with `allowNoAuthYet: true`, `appliedCapabilities
 
 ## Writing a job
 
-Every job module in `./jobs/` exports a plain object:
+Every job module in `./jobs/` default-exports the shape owned on `TAC-3101-jobs-background-job-definition.interfaces.jobModule.default`. This section demonstrates that shape with a worked example; the definition lives on the TAC.
 
 ```js
 export default {
@@ -109,7 +109,7 @@ dead_letter_queue = "rcf-test-dlq"
 max_retries = 3
 ```
 
-Boot line for local development against the T-3 in-memory queue-driver seam:
+Boot line for local development against the in-memory queue-driver seam:
 
 ```sh
 node ../../../../blueprints/jobs-background/contributions/probes/run-fake-clock-cron.mjs
@@ -127,7 +127,7 @@ The blueprint ships the contract these shims build against; the shim itself is t
 
 ## Reserved v1.1.0 Workflows adapter
 
-The `workflows` scheduler mode arrives at v1.1.0 per Baz section 5.7 and round-6 decision (b). It wraps the same job-definition contract with Cloudflare Workflows `step.do` orchestration, adding durable multi-step execution without changing the outward job-definition shape. What changes:
+The `workflows` scheduler mode arrives at v1.1.0 per spec section 5.7 and round-6 decision (b). It wraps the same job-definition contract with Cloudflare Workflows `step.do` orchestration, adding durable multi-step execution without changing the outward job-definition shape. What changes:
 
 - One new enum value at ADR-3102: `scheduler: "workflows"`.
 - One new section in this guide covering how to declare durable steps through the workflow adapter.
@@ -136,7 +136,7 @@ The `workflows` scheduler mode arrives at v1.1.0 per Baz section 5.7 and round-6
 What does NOT change:
 
 - The `backgroundJobModel` topic answer (still retry-and-schedule at ADR-3101).
-- The job-definition module shape (`name`, `handler`, `inputSchema`, `retryPolicy`, `timeoutMs`).
+- The job-definition module shape owned on `TAC-3101-jobs-background-job-definition.interfaces.jobModule.default`.
 - The run-log envelope whitelist (`event`, `jobId`, `jobName`, `attempts`, `duration`, `timestamp`, optional `terminalErrorCode`).
 - The `requiresAppliedCapabilities` block on the applying blueprint.
 
@@ -144,4 +144,4 @@ What does NOT change:
 
 - `observability-logging` (companion): supplies the run-log upstream so the four lifecycle events flow through the applied logger's channel policy.
 - `application-error-handling` (companion): supplies the error record factory a `jobFailed` constructs on the terminal path.
-- `messaging-queue-cloudflare`: the shipped `queue` capability provider today. The `messaging-queue-postgres` sibling (reserved slug per Baz decision 7 in the T-3 documentation) mints on demand and composes here without any change to `jobs-background`.
+- `messaging-queue-cloudflare`: the shipped `queue` capability provider today. The `messaging-queue-postgres` sibling (reserved slug per maintainer decision in the documentation) mints on demand and composes here without any change to `jobs-background`.