rcf-lite 0.26.0 → 0.28.0

package/blueprints/persistence-data-postgres/contributions/user-stories/persistence-data-postgres-us-27110.json

@@ -16,10 +16,55 @@
       "when": "the drill primes a fresh Postgres from the artefact and runs SELECT count(*) and a checksum aggregate on the fixture table against both databases",
       "then": "the two counts are equal; the two checksums are equal; recoveryDrillPassed fires on the event sink with { count, checksum }; the fresh Postgres and its artefact primer are torn down on exit",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
+    },
+    {
+      "id": "AC-27110-2",
+      "description": "Recovery drill upstream failure. Given the pg_dump artefact is corrupt (or the target restore database is not empty), when the recovery-drill verb runs, then the drill refuses with a named error kind (recoveryDrillFailed) carrying the psql restore exit code and a sample of the first failing statement; recoveryDrillCompleted does not fire; the corrupt input is not silently accepted.",
+      "given": "a corrupt pg_dump artefact or a non-empty restore target",
+      "when": "the recovery-drill verb runs",
+      "then": "the drill refuses with recoveryDrillFailed carrying psql exit code and first failing statement sample; recoveryDrillCompleted does not fire",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-2804-persistence-data-postgres-recovery-runner",
+        "field": "interfaces.recoveryDrill"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-27110-3",
+      "description": "PITR provider hosted. Given the elicited pitr-provider answers hosted, when the recovery-drill verb completes, then the drill report carries pitrArtefactCitation of shape { provider: 'hosted', vendorPitrWindowHours: <number>, vendorConsoleUrl: <string> } naming the managed cluster's own PITR window setting; the drill refuses if the vendor PITR window is not set on the cluster (vendorPitrDisabled error kind).",
+      "given": "pitr-provider = hosted against a live managed cluster",
+      "when": "the recovery-drill verb runs",
+      "then": "the drill report carries pitrArtefactCitation.provider='hosted' with vendorPitrWindowHours and vendorConsoleUrl; a cluster with PITR unset refuses with vendorPitrDisabled",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "adrId": "ADR-2804-persistence-data-postgres-recovery",
+        "field": "decision"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-27110-4",
+      "description": "PITR provider self-managed. Given the elicited pitr-provider answers self-managed, when the recovery-drill verb completes, then the drill report carries pitrArtefactCitation of shape { provider: 'self-managed', walArchivePath: <string>, basebackupPath: <string>, retainedHours: <number> } naming the WAL-archive destination and the pg_basebackup artefact the drill primed from; the drill refuses if either walArchivePath or basebackupPath is missing (walArchiveUnavailable error kind).",
+      "given": "pitr-provider = self-managed with a WAL archive configured",
+      "when": "the recovery-drill verb runs",
+      "then": "the drill report carries pitrArtefactCitation.provider='self-managed' with walArchivePath, basebackupPath, retainedHours; a missing WAL archive refuses with walArchiveUnavailable",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "adrId": "ADR-2804-persistence-data-postgres-recovery",
+        "field": "decision"
+      },
+      "disposition": "template"
     }
   ],
-  "tacIds": ["TAC-2804-persistence-data-postgres-recovery-runner"],
+  "tacIds": [
+    "TAC-2804-persistence-data-postgres-recovery-runner"
+  ],
   "createdAt": "2026-09-06T15:47:00.000Z",
-  "updatedAt": "2026-09-06T15:47:00.000Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-postgres/docs/topics.md

@@ -60,7 +60,7 @@ This table is maintained shelf-wide across every blueprint's `docs/topics.md`. R
 | platform-docker-compose-host | 38101-38899 | 39xx | shipped v1.0.0 | `containerHostContract` |
 | edge-cloudflare-tunnel | 39101-39899 | 40xx | shipped v1.0.0 | `edgeIngressBridge` |
 
-US 27101-27110 sit at the LOW end of the 27101-27899 band on purpose (watchpost run-4 lesson). A project-side story mechanically derived from a persistence-data-postgres REQ id into the number 27110 would collide against the shipped US-27110; band headroom (27111-27899) leaves that space.
+US 27101-27110 sit at the LOW end of the 27101-27899 band on purpose. A project-side story mechanically derived from a persistence-data-postgres REQ id into the number 27110 would collide against the shipped US-27110; band headroom (27111-27899) leaves that space.
 
 Postgres suffixes for this blueprint use the 2801-2899 block, continuing the widening pattern (persistence-data-sqlite 6xx, persistence-data-d1 14xx, and persistence-data-postgres 28xx).
 

package/blueprints/persistence-data-sqlite/CHANGELOG.md

@@ -0,0 +1,28 @@
+# Changelog
+
+## 1.1.5 - 2026-09-11
+
+Strengthens the shared probe anatomy helper the seven core-shelf blueprints all lean on: rows whose only signal is a parsed log object with a message, a linesExcerpt array, a parsed component list, a rendered-state or -order list, a perFile / entries / commitEntries list, or a locally invented callTrackingId are refused as identifier evidence; retained anchor ids are checked against the applicable blueprint's shipped AC set; the WARN row shortcut that accepted a bare unobservableReason is removed and every WARN must now satisfy exact-skip, notObservableHere (browser-only) or identifier-plus-derived. No SQLite probe change was needed; SQLite remains GREEN.
+
+## 1.1.4 - 2026-09-11
+
+wal-checkpoint AC-5105-3 anchor now observes the complete durability posture (PRAGMA journal_mode=wal + PRAGMA synchronous>=NORMAL + consumer-source grep) with a real integer rowId from a seed put through the facade; boot-open-migrate AC-5101-3 also carries a real rowId. Fixture store.mjs sets PRAGMA synchronous=NORMAL at open time and exposes synchronousNow(). Shared anatomy helper tightened per the strict-evidence contract (strict identifier set, existence check for shipped-AC limitation and notObservableHere.ac, exact-variable skip reason wire-up in all seven anatomy tests, notObservableHere is now refused for non-browser-only ACs, acceptedProfile removed from identifier lists, single JSON log-line string is derived only).
+
+## 1.1.3 - 2026-09-11
+
+Adds a contributions/probes/ pack (boot-open-migrate, facade-round-trip, wal-checkpoint) with a fixture-side node:sqlite store facade under packages/rcf-lite/test/fixtures/probe-pack-persistence-data-sqlite/. Probes run against the real node:sqlite engine on Node 24; record real integer row ids, applied-migration lists, and wal_checkpoint(TRUNCATE) counters with the WAL sidecar shrink after truncate. No account gate.
+
+Anchoring: boot-open-migrate anchors AC-5101-3 (open returns only after migrations run); the AC-5101-1 export-order row and the AC-5101-2 path-from-config row are de-claimed (conformanceOnly, anchorAcId=null) with limitations naming their respective ACs; the reopen row de-claims from AC-5101-3. wal-checkpoint anchors AC-5105-3 (durability posture set at open); the size-transition row and the walCheckpoint event row de-claim from AC-5105-1 and AC-5106-1 respectively. facade-round-trip anchors AC-5107-2 as its module anchor with the runtime CRUD rows de-claiming from AC-5107-2 (facade surface not exhaustively scanned) and the event row de-claiming from AC-5106-1. probe-utils normalisation and thrown-error rows carry an evidence object; the fallback anchorAcId is null (harnessError marks the row) rather than any placeholder id.
+
+## 1.1.1 (register-sweep patch, 2026-09-10)
+
+- Register: neutral wording in shipped prose (no capability change).
+
+## 1.1.0 - 2026-09-09
+Adds deliveredBy on REQ-001. Adds ownerRef on AC-5106-1 and AC-5110-2 (onEvent). US-5109 AC-5109-3 recovers a defective committed migration via a new numbered forward-only file (never editing the committed file in place), aligning with TAC-603 and the migration catalog's forward-only rule. Adds disposition to every AC.
+
+
+
+Version bumped from 1.0.1 to 1.1.0 to reflect the net-added AC contributions on existing stories (permission-denied and concurrent-WAL failure paths added under US-5101; disk-full mid-migration added under US-5104).
+
+Adds deliveredBy on REQ-002 through REQ-011 (ten of eleven mandatory REQs).

package/blueprints/persistence-data-sqlite/README.md

@@ -27,9 +27,9 @@ The doc set is contributions (copied into the project tree by `rcf define bluepr
 
 ## What it contributes, and what it deliberately does not
 
-Contributed kinds: REQ, US (with inline ACs), TAC, ADR. Adherence is expressed as ACs; the blueprint ships no test files (ratified decision 5) and no code.
+Contributed kinds: REQ, US (with inline ACs), TAC, ADR. Adherence is expressed as ACs; the blueprint ships no test files (shipped policy 5) and no code.
 
-No FBS contributions, as a matter of principle (ratified policy 2026-08-19): FBSs are the work of the implementing agent, not the blueprint; project constraints have to be applied at the time of creation. The blueprint contributes the WHAT (the store facade contract, the migration runner contract, the migration catalog shape, the backup runner contract, the event log discipline); the implementing agent derives the HOW-tasks (FBS) in the host project, where the ACs contributed here get picked up by the project's own build sequencing.
+No FBS contributions, as a matter of principle (policy): FBSs are the work of the implementing agent, not the blueprint; project constraints have to be applied at the time of creation. The blueprint contributes the WHAT (the store facade contract, the migration runner contract, the migration catalog shape, the backup runner contract, the event log discipline); the implementing agent derives the HOW-tasks (FBS) in the host project, where the ACs contributed here get picked up by the project's own build sequencing.
 
 Deliberately not contributed: the domain schema (the tables the project's own entities live in are project-authored, not blueprint-authored; the blueprint governs the store facade and the migration discipline, not the domain shape); ORMs, query builders, and any framework-shaped abstraction above the named CRUD verbs (the facade is a project-authored surface; how it internally implements its verbs is not blueprint-owned); a Postgres engine TAC (deferred; see ADR-601's alternatives and the guide 'when it does not fit'); logical schema-aware dumps (out of scope; see ADR-605's alternatives); connection pooling (an implementation detail of the facade when a project selects an engine that benefits from it, not a blueprint contribution).
 

package/blueprints/persistence-data-sqlite/blueprint.json

@@ -1,34 +1,138 @@
 {
   "slug": "persistence-data-sqlite",
-  "version": "1.0.0",
+  "version": "1.1.5",
   "category": "persistence",
   "contributions": [
-    { "id": "persistence-data-sqlite-REQ-001", "kind": "req", "path": "requirements/persistence-data-sqlite-req-001.json" },
-    { "id": "persistence-data-sqlite-REQ-002", "kind": "req", "path": "requirements/persistence-data-sqlite-req-002.json" },
-    { "id": "persistence-data-sqlite-REQ-003", "kind": "req", "path": "requirements/persistence-data-sqlite-req-003.json" },
-    { "id": "persistence-data-sqlite-REQ-004", "kind": "req", "path": "requirements/persistence-data-sqlite-req-004.json" },
-    { "id": "persistence-data-sqlite-REQ-005", "kind": "req", "path": "requirements/persistence-data-sqlite-req-005.json" },
-    { "id": "persistence-data-sqlite-REQ-006", "kind": "req", "path": "requirements/persistence-data-sqlite-req-006.json" },
-    { "id": "persistence-data-sqlite-REQ-007", "kind": "req", "path": "requirements/persistence-data-sqlite-req-007.json" },
-    { "id": "persistence-data-sqlite-REQ-008", "kind": "req", "path": "requirements/persistence-data-sqlite-req-008.json" },
-    { "id": "persistence-data-sqlite-REQ-009", "kind": "req", "path": "requirements/persistence-data-sqlite-req-009.json" },
-    { "id": "persistence-data-sqlite-REQ-010", "kind": "req", "path": "requirements/persistence-data-sqlite-req-010.json" },
-    { "id": "persistence-data-sqlite-REQ-011", "kind": "req", "path": "requirements/persistence-data-sqlite-req-011.json" },
-    { "id": "persistence-data-sqlite-US-5101", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5101.json" },
-    { "id": "persistence-data-sqlite-US-5102", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5102.json" },
-    { "id": "persistence-data-sqlite-US-5103", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5103.json" },
-    { "id": "persistence-data-sqlite-US-5104", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5104.json" },
-    { "id": "persistence-data-sqlite-US-5105", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5105.json" },
-    { "id": "persistence-data-sqlite-US-5106", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5106.json" },
-    { "id": "persistence-data-sqlite-US-5107", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5107.json" },
-    { "id": "persistence-data-sqlite-US-5108", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5108.json" },
-    { "id": "persistence-data-sqlite-US-5109", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5109.json" },
-    { "id": "persistence-data-sqlite-US-5110", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5110.json" },
-    { "id": "persistence-data-sqlite-US-5111", "kind": "us", "path": "user-stories/persistence-data-sqlite-us-5111.json" },
-    { "id": "TAC-601-persistence-data-sqlite-store", "kind": "tac", "path": "tacs/tac-601-persistence-data-sqlite-store.json" },
-    { "id": "TAC-602-persistence-data-sqlite-migration-runner", "kind": "tac", "path": "tacs/tac-602-persistence-data-sqlite-migration-runner.json" },
-    { "id": "TAC-603-persistence-data-sqlite-migration-catalog", "kind": "tac", "path": "tacs/tac-603-persistence-data-sqlite-migration-catalog.json" },
-    { "id": "TAC-604-persistence-data-sqlite-backup-runner", "kind": "tac", "path": "tacs/tac-604-persistence-data-sqlite-backup-runner.json" },
+    {
+      "id": "persistence-data-sqlite-REQ-001",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-001.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-002",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-002.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-003",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-003.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-004",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-004.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-005",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-005.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-006",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-006.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-007",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-007.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-008",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-008.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-009",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-009.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-010",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-010.json"
+    },
+    {
+      "id": "persistence-data-sqlite-REQ-011",
+      "kind": "req",
+      "path": "requirements/persistence-data-sqlite-req-011.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5101",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5101.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5102",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5102.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5103",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5103.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5104",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5104.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5105",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5105.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5106",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5106.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5107",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5107.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5108",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5108.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5109",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5109.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5110",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5110.json"
+    },
+    {
+      "id": "persistence-data-sqlite-US-5111",
+      "kind": "us",
+      "path": "user-stories/persistence-data-sqlite-us-5111.json"
+    },
+    {
+      "id": "TAC-601-persistence-data-sqlite-store",
+      "kind": "tac",
+      "path": "tacs/tac-601-persistence-data-sqlite-store.json"
+    },
+    {
+      "id": "TAC-602-persistence-data-sqlite-migration-runner",
+      "kind": "tac",
+      "path": "tacs/tac-602-persistence-data-sqlite-migration-runner.json"
+    },
+    {
+      "id": "TAC-603-persistence-data-sqlite-migration-catalog",
+      "kind": "tac",
+      "path": "tacs/tac-603-persistence-data-sqlite-migration-catalog.json"
+    },
+    {
+      "id": "TAC-604-persistence-data-sqlite-backup-runner",
+      "kind": "tac",
+      "path": "tacs/tac-604-persistence-data-sqlite-backup-runner.json"
+    },
     {
       "id": "ADR-601-persistence-data-sqlite-store-model",
       "kind": "adr",
@@ -43,8 +147,21 @@
       "scope": "global",
       "topic": "migrationDiscipline"
     },
-    { "id": "ADR-603-persistence-data-sqlite-event-secrecy", "kind": "adr", "path": "adrs/adr-603-persistence-data-sqlite-event-secrecy.json" },
-    { "id": "ADR-604-persistence-data-sqlite-store-boundary", "kind": "adr", "path": "adrs/adr-604-persistence-data-sqlite-store-boundary.json" },
-    { "id": "ADR-605-persistence-data-sqlite-backup-model", "kind": "adr", "path": "adrs/adr-605-persistence-data-sqlite-backup-model.json" }
-  ]
+    {
+      "id": "ADR-603-persistence-data-sqlite-event-secrecy",
+      "kind": "adr",
+      "path": "adrs/adr-603-persistence-data-sqlite-event-secrecy.json"
+    },
+    {
+      "id": "ADR-604-persistence-data-sqlite-store-boundary",
+      "kind": "adr",
+      "path": "adrs/adr-604-persistence-data-sqlite-store-boundary.json"
+    },
+    {
+      "id": "ADR-605-persistence-data-sqlite-backup-model",
+      "kind": "adr",
+      "path": "adrs/adr-605-persistence-data-sqlite-backup-model.json"
+    }
+  ],
+  "updatedAt": "2026-09-11"
 }

package/blueprints/persistence-data-sqlite/contributions/probes/boot-open-migrate.mjs

@@ -0,0 +1,90 @@
+// Boot-time open-and-migrate probe for persistence-data-sqlite.
+//
+// AC-5101-1 requires ONE named module export invoked exactly ONCE
+// before request handlers bind. A storeOpened event fired on the
+// sink is not proof of "invoked exactly once before handlers bind"
+// (there are no handlers). Row de-claimed (anchorAcId=null,
+// conformanceOnly true) with the limitation naming AC-5101-1.
+//
+// AC-5101-2 requires (a) the store to open with a path sourced from
+// application configuration AND (b) a grep of the source tree to
+// find the identifier resolved from configuration rather than
+// hard-coded. This row observes only clause (a) (path equality on
+// the opened event); a shelf probe cannot cheaply prove absence of
+// hard-coded paths across every consumer module in a downstream
+// project. Row de-claimed with the limitation naming AC-5101-2.
+//
+// AC-5101-3 (open returns only after migrations have run) IS
+// observable as schemaVersion === MAX_SCHEMA_VERSION after open and
+// is kept as a real AC anchor.
+//
+// The reopen row (no migrations applied on second open) is not
+// AC-5101-3 (that AC is about first open completing migrations); it
+// belongs to REQ-002 (idempotent reopen). Row de-claimed with the
+// limitation naming AC-5101-3.
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { openStore, MAX_SCHEMA_VERSION } from '../../../../packages/rcf-lite/test/fixtures/probe-pack-persistence-data-sqlite/src/store.mjs';
+
+export const anchorAcId = 'AC-5101-3';
+export const accountBound = false;
+const AC3 = 'The open entry point returns only after migrations';
+const LIM_5101_1 = `AC-5101-1: requires a SINGLE named module export invoked exactly ONCE before request handlers bind on the running process. A storeOpened event on the fixture eventSink is not evidence of an application-level export invocation ordering against handler binding.`;
+const LIM_5101_2 = `AC-5101-2: requires (a) the store to open with a path sourced from application configuration AND (b) a grep of the source tree to find the identifier resolved from configuration rather than hard-coded. This row observes only clause (a); the shelf cannot cheaply prove absence of hard-coded paths across every consumer module of a downstream project.`;
+const LIM_5101_3_REOPEN = `AC-5101-3: asserts the open entry point returns only after migrations have RUN (first open). Reopen idempotency (a no-migration second open) is a related but distinct property not stated on AC-5101-3.`;
+
+export default async function runProbe() {
+  const dir = await mkdtemp(join(tmpdir(), 'rcf-sqlite-boot-'));
+  const path = process.env.RCF_FIXTURE_SQLITE_PATH || join(dir, 'store.sqlite');
+  const events = [];
+  const results = [];
+  let bootReport, reopenReport;
+  try {
+    const store = openStore({ path, eventSink: (r) => events.push(r) });
+    const opened = events.filter((e) => e.event === 'storeOpened');
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5101_1,
+      verdict: opened.length === 1 ? 'pass' : 'fail',
+      detail: `observed storeOpened emitted ${opened.length} time(s) on the eventSink; path=${opened[0]?.path} timestamp=${opened[0]?.timestamp}. Not evidence of a named export invocation ordering against handler binding.`,
+      evidence: { event: opened[0], appliedMigrations: store.appliedMigrations, bodyExcerpt: `storeOpened count=${opened.length}` },
+    });
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5101_2,
+      verdict: opened[0]?.path === path ? 'pass' : 'fail',
+      detail: `observed opened event path=${opened[0]?.path} matches the configuration input path=${path}. Absence of hard-coded paths across every consumer module of a downstream project not observed.`,
+      evidence: { pathFromConfig: path, pathOnEvent: opened[0]?.path, bodyExcerpt: `path=${opened[0]?.path}` },
+    });
+    const schemaAtOpen = store.schemaVersion();
+    // Seed put through the facade so the row carries a real integer
+    // rowId as its resource identifier (real returned engine row id).
+    const seed = store.put('probe-boot-open-migrate', String(Date.now()));
+    results.push({
+      anchorAcId: 'AC-5101-3',
+      verdict: schemaAtOpen === MAX_SCHEMA_VERSION && Number.isInteger(seed.rowId) && seed.rowId > 0 ? 'pass' : 'fail',
+      detail: `${AC3} have run  -  observed schema version after open=${schemaAtOpen} equals build max known=${MAX_SCHEMA_VERSION}; appliedMigrations=${JSON.stringify(store.appliedMigrations)}; a seed put through the facade returned real integer rowId=${seed.rowId}.`,
+      evidence: { rowId: seed.rowId, schemaVersion: schemaAtOpen, appliedMigrations: store.appliedMigrations, bodyExcerpt: `schema=${schemaAtOpen} applied=${JSON.stringify(store.appliedMigrations)} rowId=${seed.rowId}` },
+    });
+    bootReport = { appliedMigrations: [...store.appliedMigrations], schemaVersion: schemaAtOpen };
+    store.close();
+
+    const store2 = openStore({ path, eventSink: (r) => events.push(r) });
+    reopenReport = { appliedMigrations: [...store2.appliedMigrations], schemaVersion: store2.schemaVersion() };
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5101_3_REOPEN,
+      verdict: store2.appliedMigrations.length === 0 && store2.schemaVersion() === MAX_SCHEMA_VERSION ? 'pass' : 'fail',
+      detail: `observed reopen appliedMigrations=${JSON.stringify(store2.appliedMigrations)}; schema=${store2.schemaVersion()} (idempotent reopen at max version; distinct property from AC-5101-3 first-open-completes-migrations).`,
+      evidence: { schemaVersion: reopenReport.schemaVersion, appliedMigrations: reopenReport.appliedMigrations, bodyExcerpt: `reopen applied=${JSON.stringify(reopenReport.appliedMigrations)}` },
+    });
+    store2.close();
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+  return { results, extra: { envDeclared: ['RCF_FIXTURE_SQLITE_PATH'], bootReport, reopenReport, eventCount: events.length } };
+}

package/blueprints/persistence-data-sqlite/contributions/probes/facade-round-trip.mjs

@@ -0,0 +1,82 @@
+// Facade round-trip probe for persistence-data-sqlite.
+//
+// The CRUD rows (put/get/delete via the fixture's store facade) do
+// NOT observe AC-5107-1's sole-importer property (an import-graph
+// scan over the project's source modules) and do not exhaustively
+// verify AC-5107-2's absence of a general-purpose query method
+// across the facade's public surface. Rows are de-claimed
+// (conformanceOnly, anchorAcId=null) with the limitation naming
+// AC-5107-2 (nearest shipped AC on the CRUD verb surface).
+//
+// The event row observes entryPut / entryRead / entryDeleted which
+// are NOT among the four defined lifecycle events on AC-5106-1
+// (opened, migrated, backupCheckpoint, closed). Row de-claimed
+// with the limitation naming AC-5106-1.
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { openStore } from '../../../../packages/rcf-lite/test/fixtures/probe-pack-persistence-data-sqlite/src/store.mjs';
+
+export const anchorAcId = 'AC-5107-2';
+export const accountBound = false;
+
+const LIM_5107_2 = `AC-5107-2: requires the store facade to expose named verbs for every persistence operation the domain requires AND not to expose a general-purpose query method accepting raw engine-native queries. Runtime CRUD round-trips through the facade demonstrate that the facade's put/get/delete verbs WORK; a probe would still need an exhaustive scan of the facade's public surface to prove absence of a general-purpose query method. Row observes only the narrow-verb round-trip.`;
+const LIM_5106_1 = `AC-5106-1: defines the four lifecycle events (opened, migrated, backupCheckpoint, closed) the store facade must emit. The fixture-extended entryPut/entryRead/entryDeleted events are fixture-added observations, not any of the four defined events.`;
+
+export default async function runProbe() {
+  const dir = await mkdtemp(join(tmpdir(), 'rcf-sqlite-round-'));
+  const path = process.env.RCF_FIXTURE_SQLITE_PATH || join(dir, 'store.sqlite');
+  const events = [];
+  const results = [];
+  let rowId, value = 'hello-world-' + Date.now();
+  try {
+    const store = openStore({ path, eventSink: (r) => events.push(r) });
+    const putResult = store.put('probe/key', value);
+    rowId = putResult.rowId;
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5107_2,
+      verdict: Number.isInteger(rowId) && rowId > 0 && putResult.changes === 1 ? 'pass' : 'fail',
+      detail: `observed put returned real integer rowId=${rowId} changes=${putResult.changes} through the facade's narrow put verb (no raw SQL).`,
+      evidence: { rowId, changes: putResult.changes, bodyExcerpt: `put rowId=${rowId} changes=${putResult.changes}` },
+    });
+    const got = store.get('probe/key');
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5107_2,
+      verdict: got && got.value === value && got.rowId === rowId ? 'pass' : 'fail',
+      detail: `observed get returned rowId=${got?.rowId} valueBytes=${got?.value?.length} match=${got?.value === value} through the facade's narrow get verb.`,
+      evidence: { rowIdOnRead: got?.rowId, valueExcerpt: got?.value?.slice(0, 32), bodyExcerpt: `get rowId=${got?.rowId}` },
+    });
+    const del = store.delete('probe/key');
+    const missed = store.get('probe/key');
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5107_2,
+      verdict: del.changes === 1 && missed === null ? 'pass' : 'fail',
+      detail: `observed delete changes=${del.changes}; re-read after delete=${missed === null ? 'absent' : 'present'} through the facade's narrow delete then get verbs.`,
+      evidence: { rowIdCreatedThenDeleted: rowId, deleteChanges: del.changes, presentAfterDelete: missed !== null, bodyExcerpt: `delete changes=${del.changes} presentAfterDelete=${missed !== null}` },
+    });
+    const evPut = events.filter((e) => e.event === 'entryPut');
+    const evRead = events.filter((e) => e.event === 'entryRead');
+    const evDel = events.filter((e) => e.event === 'entryDeleted');
+    const eventOk = evPut.length === 1 && evRead.length === 2 && evDel.length === 1;
+    const allowedKeys = new Set(['event', 'key', 'size', 'hit', 'timestamp']);
+    const extraKeys = [...evPut, ...evRead, ...evDel].flatMap((e) => Object.keys(e)).filter((k) => !allowedKeys.has(k));
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5106_1,
+      verdict: eventOk && extraKeys.length === 0 ? 'pass' : 'fail',
+      detail: `observed event counts put=${evPut.length} read=${evRead.length} delete=${evDel.length}; extraFields=${JSON.stringify(extraKeys)} on the eventSink; the fixture-extended entry* events carry only metadata fields.`,
+      evidence: { entryPut: evPut[0], entryReadHit: evRead[0], entryReadMiss: evRead[1], entryDeleted: evDel[0], bodyExcerpt: `entryPut=${evPut.length} entryRead=${evRead.length} entryDeleted=${evDel.length}` },
+    });
+    store.close();
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+  return { results, extra: { envDeclared: ['RCF_FIXTURE_SQLITE_PATH'], rowIdCreatedThenDeleted: rowId, valueBytes: value.length } };
+}

package/blueprints/persistence-data-sqlite/contributions/probes/probe-utils.mjs

@@ -0,0 +1,83 @@
+// Shared helpers for persistence-data-sqlite probes.
+//
+// Runtime posture: probes import the fixture's store facade at
+// packages/rcf-lite/test/fixtures/probe-pack-persistence-data-sqlite/src/store.mjs
+// which opens node:sqlite (Node 24 built-in). No probe uses a mock;
+// every probe runs against the real engine and records positive
+// evidence (a real integer row id, a real migration list, the real
+// WAL checkpoint counters).
+//
+// The blueprint has no account-bound branch, so the accountBoundSkipped
+// path is not exercised by this pack; the helper is retained for
+// symmetry with the shelf's probe-utils shape.
+
+import { mkdir, writeFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+export const PROJECT_ROOT = resolve(HERE, '..', '..', '..', '..');
+export const FIXTURE_DIR = resolve(
+  PROJECT_ROOT,
+  'packages/rcf-lite/test/fixtures/probe-pack-persistence-data-sqlite',
+);
+export const REPORT_DIR = resolve(
+  PROJECT_ROOT,
+  '.rcf/reports/blueprints/persistence-data-sqlite',
+);
+
+export const DECLARED_ENV = new Set([
+  'RCF_FIXTURE_SQLITE_PATH',
+]);
+
+export function aggregate(results) {
+  if (!Array.isArray(results) || results.length === 0) return 'fail';
+  if (results.some((r) => r.verdict === 'fail')) return 'fail';
+  if (results.some((r) => r.verdict === 'warn')) return 'warn';
+  return 'pass';
+}
+export function isSkipped(results) { return Array.isArray(results) && results.length > 0 && results.every((r) => r.accountBoundSkipped === true); }
+
+export async function writeReport({ probeName, engine, results, extra }) {
+  await mkdir(REPORT_DIR, { recursive: true });
+  const normalised = (Array.isArray(results) && results.length > 0)
+    ? results
+    : [{ anchorAcId: null, harnessError: true, verdict: 'fail', detail: 'no checks ran', evidence: { reason: 'no checks ran', probeName, runAt: new Date().toISOString(), engine } }];
+  const raw = aggregate(normalised);
+  const aggregateVerdict = isSkipped(normalised) ? 'pass' : raw;
+  const report = {
+    slug: 'persistence-data-sqlite',
+    probeName,
+    runAt: new Date().toISOString(),
+    engine,
+    results: normalised,
+    aggregateVerdict,
+    ...(extra ?? {}),
+  };
+  const path = resolve(REPORT_DIR, `${probeName}.json`);
+  await writeFile(path, JSON.stringify(report, null, 2) + '\n', 'utf8');
+  return { report, path };
+}
+
+export async function runShim(probeName, engine, mainFn) {
+  try {
+    const outcome = (await mainFn()) ?? { results: [] };
+    const { results, extra } = outcome;
+    const { report, path } = await writeReport({ probeName, engine, results, extra });
+    process.stdout.write(JSON.stringify(report, null, 2) + '\n');
+    process.stdout.write(`report written to ${path}\n`);
+    if (report.aggregateVerdict === 'fail') process.exitCode = 1;
+  } catch (err) {
+    const results = [{
+      anchorAcId: null, harnessError: true,
+      verdict: 'fail',
+      detail: `probe threw: ${err && err.message ? err.message : String(err)}`,
+      evidence: { thrown: true, message: err && err.message ? err.message : String(err), name: err && err.name ? err.name : 'Error', probeName, runAt: new Date().toISOString(), engine },
+    }];
+    const { report, path } = await writeReport({ probeName, engine, results });
+    process.stdout.write(JSON.stringify(report, null, 2) + '\n');
+    process.stderr.write(`probe error: ${err && err.stack ? err.stack : String(err)}\n`);
+    process.stderr.write(`report written to ${path}\n`);
+    process.exitCode = 1;
+  }
+}

package/blueprints/persistence-data-sqlite/contributions/probes/run-boot-open-migrate.mjs

@@ -0,0 +1,5 @@
+import runProbe from './boot-open-migrate.mjs';
+import { runShim } from './probe-utils.mjs';
+
+const engine = { kind: 'sqlite', driver: 'node:sqlite (Node 24 built-in)', healthy: true };
+runShim('boot-open-migrate', engine, runProbe);

package/blueprints/persistence-data-sqlite/contributions/probes/run-facade-round-trip.mjs

@@ -0,0 +1,5 @@
+import runProbe from './facade-round-trip.mjs';
+import { runShim } from './probe-utils.mjs';
+
+const engine = { kind: 'sqlite', driver: 'node:sqlite (Node 24 built-in)', healthy: true };
+runShim('facade-round-trip', engine, runProbe);

package/blueprints/persistence-data-sqlite/contributions/probes/run-wal-checkpoint.mjs

@@ -0,0 +1,5 @@
+import runProbe from './wal-checkpoint.mjs';
+import { runShim } from './probe-utils.mjs';
+
+const engine = { kind: 'sqlite', driver: 'node:sqlite (Node 24 built-in)', healthy: true, walMode: true };
+runShim('wal-checkpoint', engine, runProbe);