rcf-lite 0.26.0 → 0.28.0

package/blueprints/persistence-data-sqlite/contributions/probes/wal-checkpoint.mjs

@@ -0,0 +1,137 @@
+// WAL checkpoint probe for persistence-data-sqlite.
+//
+// The FIRST row (AC-5105-3 anchor) observes the complete durability
+// posture the AC names: write-ahead log AND synchronous commit floor
+// AND the absence of consumer configuration. Concretely the row
+// asserts:
+//   - PRAGMA journal_mode returns 'wal' (facade-set at open)
+//   - PRAGMA synchronous returns >= NORMAL (facade-set at open)
+//   - a grep of consumer code (every probe file plus every fixture
+//     src file except the facade store.mjs itself) finds no direct
+//     PRAGMA journal_mode / PRAGMA synchronous statement.
+// A seed put through the facade provides a real integer rowId as the
+// row's resource identifier.
+//
+// The SECOND (wal_checkpoint TRUNCATE size transition) and THIRD
+// (walCheckpoint event) rows observe checkpoint mechanics and a
+// fixture-added event. Neither is one of the four defined lifecycle
+// events on AC-5106-1 {opened, migrated, backupCheckpoint, closed}
+// and neither observes crash recovery (AC-5105-1). Rows de-claimed
+// (conformanceOnly, anchorAcId=null) with limitations naming the
+// nearest shipped ACs.
+import { mkdtemp, readFile, readdir, rm, stat } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { openStore } from '../../../../packages/rcf-lite/test/fixtures/probe-pack-persistence-data-sqlite/src/store.mjs';
+
+export const anchorAcId = 'AC-5105-3';
+export const accountBound = false;
+const AC_PREFIX = "The store's durability posture (write-ahead log";
+
+const LIM_5105_1 = `AC-5105-1: requires a write committed before SIGKILL to be present when a fresh process reopens the same store. Observing wal_checkpoint TRUNCATE size mechanics is engine housekeeping, not a crash-recovery observation.`;
+const LIM_5106_1 = `AC-5106-1: defines the four lifecycle events (opened, migrated, backupCheckpoint, closed). The fixture-extended 'walCheckpoint' event is a fixture-added observation, not one of the four defined events.`;
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const PROBES_DIR = HERE;
+const FIXTURE_SRC_DIR = join(HERE, '..', '..', '..', '..', 'packages', 'rcf-lite', 'test', 'fixtures', 'probe-pack-persistence-data-sqlite', 'src');
+const FACADE_BASENAME = 'store.mjs';
+const PRAGMA_RE = /['"\`]PRAGMA\s+(journal_mode|synchronous)\b/i;
+
+async function safeSize(p) { try { return Number((await stat(p)).size); } catch { return null; } }
+
+async function listMjs(dir) {
+  const out = [];
+  async function walk(d) {
+    let entries = [];
+    try { entries = await readdir(d, { withFileTypes: true }); } catch { return; }
+    for (const e of entries) {
+      const p = join(d, e.name);
+      if (e.isDirectory()) await walk(p);
+      else if (e.isFile() && p.endsWith('.mjs')) out.push(p);
+    }
+  }
+  await walk(dir);
+  return out;
+}
+
+// Consumer grep: every probe file + every fixture src file except the
+// facade store.mjs. A hit is a direct PRAGMA journal_mode / synchronous
+// statement outside the facade - which AC-5105-3 forbids.
+async function greppConsumerFilesForPragmaLeaks() {
+  const probeFiles = (await listMjs(PROBES_DIR)).filter((p) => !p.endsWith('probe-utils.mjs'));
+  const fixtureFilesAll = await listMjs(FIXTURE_SRC_DIR);
+  const fixtureFiles = fixtureFilesAll.filter((p) => !p.endsWith('/' + FACADE_BASENAME));
+  const consumerFiles = [...probeFiles, ...fixtureFiles];
+  const offenders = [];
+  for (const p of consumerFiles) {
+    let text = '';
+    try { text = await readFile(p, 'utf8'); } catch { continue; }
+    if (PRAGMA_RE.test(text)) offenders.push(p);
+  }
+  return { consumerFilesScanned: consumerFiles.map((p) => p.slice(p.indexOf('/rcf-lite') === -1 ? 0 : p.indexOf('/rcf-lite'))), consumerFilesWithPragma: offenders };
+}
+
+export default async function runProbe() {
+  const dir = await mkdtemp(join(tmpdir(), 'rcf-sqlite-wal-'));
+  const path = process.env.RCF_FIXTURE_SQLITE_PATH || join(dir, 'store.sqlite');
+  const events = [];
+  const results = [];
+  let checkpoint, mode, walBefore, walAfter, syncLevel, grep, seedRowId;
+  try {
+    const store = openStore({ path, eventSink: (r) => events.push(r) });
+    mode = store.journalModeNow();
+    syncLevel = store.synchronousNow();
+    grep = await greppConsumerFilesForPragmaLeaks();
+    // Seed put through the facade so the row carries a real integer
+    // rowId as its resource identifier.
+    const seed = store.put('probe-durability-posture', String(Date.now()));
+    seedRowId = seed.rowId;
+    const modeOk = mode === 'wal';
+    // NORMAL = 1, FULL = 2, EXTRA = 3. The AC names a floor, not a
+    // specific level; require >= NORMAL.
+    const syncOk = Number.isInteger(syncLevel) && syncLevel >= 1;
+    const noConsumerPragma = Array.isArray(grep.consumerFilesWithPragma) && grep.consumerFilesWithPragma.length === 0;
+    results.push({
+      anchorAcId: 'AC-5105-3',
+      verdict: modeOk && syncOk && noConsumerPragma && Number.isInteger(seedRowId) && seedRowId > 0 ? 'pass' : 'fail',
+      detail: `${AC_PREFIX} and synchronous commit floor)  -  observed the facade's PRAGMA journal_mode='${mode}' AND PRAGMA synchronous=${syncLevel} (>=1 required); consumer-source grep across ${grep.consumerFilesScanned.length} .mjs files finds ${grep.consumerFilesWithPragma.length} direct PRAGMA journal_mode/synchronous statements outside the facade store.mjs. Seed put returned rowId=${seedRowId} through the facade.`,
+      evidence: {
+        rowId: seedRowId,
+        pragmaJournalMode: mode,
+        pragmaSynchronous: `level=${syncLevel}`,
+        consumerFilesScannedCount: grep.consumerFilesScanned.length,
+        consumerFilesWithPragma: grep.consumerFilesWithPragma,
+        consumerConfiguresPragmas: !noConsumerPragma,
+        bodyExcerpt: `journal_mode=${mode} synchronous=${syncLevel} consumerPragmaHits=${grep.consumerFilesWithPragma.length} seedRowId=${seedRowId}`,
+      },
+    });
+    for (let i = 0; i < 200; i++) store.put(`k/${i}`, `v-${i}-${Date.now()}`);
+    walBefore = await safeSize(walPath(path));
+    checkpoint = store.walCheckpoint('TRUNCATE');
+    walAfter = await safeSize(walPath(path));
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5105_1,
+      verdict: checkpoint.busy === 0 && Number.isInteger(checkpoint.pagesLog) && Number.isInteger(checkpoint.pagesCheckpointed) && typeof walBefore === 'number' && walBefore > 0 && walAfter === 0 ? 'pass' : 'fail',
+      detail: `observed wal_checkpoint(TRUNCATE) busy=${checkpoint.busy} pagesLog=${checkpoint.pagesLog} pagesCheckpointed=${checkpoint.pagesCheckpointed}; walSizeBytes before=${walBefore} after=${walAfter}.`,
+      evidence: { checkpoint, walSizeBefore: walBefore, walSizeAfter: walAfter, bodyExcerpt: `walSize ${walBefore} -> ${walAfter}` },
+    });
+    const ev = events.find((e) => e.event === 'walCheckpoint');
+    results.push({
+      anchorAcId: null,
+      conformanceOnly: true,
+      limitation: LIM_5106_1,
+      verdict: ev && ev.mode === 'TRUNCATE' ? 'pass' : 'fail',
+      detail: `observed the fixture-added walCheckpoint event mode=${ev?.mode} timestamp=${ev?.timestamp} on the eventSink after the TRUNCATE checkpoint (not one of the four defined events on AC-5106-1).`,
+      evidence: { event: ev ? { event: ev.event, mode: ev.mode, timestamp: ev.timestamp } : null, bodyExcerpt: `event=${ev?.event}` },
+    });
+    store.close();
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+  return { results, extra: { envDeclared: ['RCF_FIXTURE_SQLITE_PATH'], writtenRows: 200, journalMode: mode, synchronousLevel: syncLevel, seedRowId, checkpoint, walSize: { before: walBefore, after: walAfter }, consumerGrep: grep } };
+}
+
+function walPath(base) { return base + '-wal'; }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-001.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-601-persistence-data-sqlite-store",
+    "field": "responsibilities.open"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-002.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-603-persistence-data-sqlite-migration-catalog",
+    "field": "responsibilities.catalog"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-003.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-602-persistence-data-sqlite-migration-runner",
+    "field": "responsibilities.refuseNewer"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-004.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-602-persistence-data-sqlite-migration-runner",
+    "field": "responsibilities.applyInOrder"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-005.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "adrId": "ADR-601-persistence-data-sqlite-store-model",
+    "field": "decision.walCrashSafety"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-006.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-601-persistence-data-sqlite-store",
+    "field": "responsibilities.events"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-007.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "adrId": "ADR-604-persistence-data-sqlite-store-boundary",
+    "field": "decision.soleImporter"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-008.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-604-persistence-data-sqlite-backup-runner",
+    "field": "responsibilities.snapshot"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-009.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-602-persistence-data-sqlite-migration-runner",
+    "field": "responsibilities.failedMigration"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-010.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "adrId": "ADR-603-persistence-data-sqlite-event-secrecy",
+    "field": "decision.metadataOnly"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/requirements/persistence-data-sqlite-req-011.json

@@ -14,5 +14,9 @@
   "version": "1.0.0",
   "status": "approved",
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z",
+  "deliveredBy": {
+    "tacId": "TAC-602-persistence-data-sqlite-migration-runner",
+    "field": "responsibilities.noopAtVersion"
+  }
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5101.json

@@ -16,7 +16,8 @@
       "when": "the boot sequence runs",
       "then": "the store event log contains exactly one opened event whose timestamp precedes the timestamp of the first served request",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5101-2",
@@ -25,7 +26,8 @@
       "when": "the boot sequence runs the open entry point",
       "then": "the store event log's opened event carries the same store identifier the configuration supplied, and a grep of the source tree finds the identifier resolved from configuration rather than hard-coded",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5101-3",
@@ -34,7 +36,36 @@
       "when": "consumer code queries the schema version via the store facade",
       "then": "the reported version equals the build's max known migration version",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
+    },
+    {
+      "id": "AC-5101-4",
+      "description": "Permission denied on the store file refuses open. Given the configured store file path resides in a directory the process user cannot read or write (chmod 000, or a file owned by a different uid without read permission), when the store facade opens, then the underlying engine surfaces a SQLITE_CANTOPEN-family error and the facade re-throws a named storePermissionDenied error carrying the resolved path (never carrying any credential material or file contents), and no opened event fires on the sink.",
+      "given": "store file path unreadable or unwritable by the process user",
+      "when": "the store facade opens",
+      "then": "the underlying engine surfaces SQLITE_CANTOPEN; the facade re-throws storePermissionDenied naming the resolved path; no opened event fires",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-601-persistence-data-sqlite-store",
+        "field": "responsibilities.open"
+      },
+      "disposition": "template"
+    },
+    {
+      "id": "AC-5101-5",
+      "description": "Concurrent WAL writer against the same store file. Given two processes both opening the same SQLite file in WAL mode against the same on-disk artifact, when both invoke a write verb concurrently, then the SQLite WAL semantics serialise the writes (one commits, the other retries the transaction via the busy handler up to the configured busy timeout) and no writer is silently dropped; a busy-timeout exhaustion surfaces as a storeBusy error carrying the elapsed wait, and neither writer observes partial state from the other.",
+      "given": "two processes opening the same on-disk store file in WAL mode with concurrent write verbs",
+      "when": "both invoke a write concurrently",
+      "then": "WAL serialises the writes via the busy handler; a busy-timeout exhaustion surfaces storeBusy naming the elapsed wait; no writer observes partial cross-process state",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "adrId": "ADR-601-persistence-data-sqlite-store-model",
+        "field": "decision.walCrashSafety"
+      },
+      "disposition": "template"
     }
   ],
   "tacIds": [
@@ -42,5 +73,5 @@
     "TAC-602-persistence-data-sqlite-migration-runner"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5102.json

@@ -16,7 +16,8 @@
       "when": "the store facade imports the catalog at boot",
       "then": "the loaded catalog is an ordered sequence whose version integers start at 1 and increase by exactly 1 per entry, and every entry carries a non-empty description and a non-empty statements list",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5102-2",
@@ -25,7 +26,8 @@
       "when": "consumer code calls the schemaVersion read operation",
       "then": "the returned integer equals the max value of the bookkeeping table's version column, and matches the max version integer in the loaded catalog",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
     },
     {
       "id": "AC-5102-3",
@@ -34,7 +36,8 @@
       "when": "the migration runner completes",
       "then": "the bookkeeping table holds one row per applied migration with the appliedAt timestamp set to a value not in the future and not preceding the store-opened event",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
     }
   ],
   "tacIds": [
@@ -42,5 +45,5 @@
     "TAC-603-persistence-data-sqlite-migration-catalog"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5103.json

@@ -16,7 +16,8 @@
       "when": "the boot sequence invokes the open entry point",
       "then": "the entry point throws an error whose code is a stable identifier for the refuse-newer condition, whose message contains both the integer N and the integer M, and the process fails to reach its request-serving state",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5103-2",
@@ -25,7 +26,22 @@
       "when": "the failed open attempt returns control",
       "then": "a fresh snapshot of the same store artifact is byte-identical to the pre-attempt snapshot, and no new bookkeeping row has been written",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
+    },
+    {
+      "id": "AC-5103-3",
+      "description": "Repeat-boot after a same-version store is a no-op that emits no migrated event. Given the store artefact on disk at exactly the build's max known version, when the process boots and closes and boots again, then each boot completes with schemaOpened but no migrated event fires; a mutation SIMULATE_DOUBLE_MIGRATE=true forces a spurious migrated event on the second boot and the sink observer FAILS with the leaked event id.",
+      "given": "the store artefact at exactly the build's max known version",
+      "when": "the process boots, closes, and boots again",
+      "then": "each boot fires schemaOpened but no migrated event; the double-migrate mutation FAILS",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-601-persistence-data-sqlite-store",
+        "field": "interfaces.onEvent"
+      },
+      "disposition": "fixed"
     }
   ],
   "tacIds": [
@@ -33,5 +49,5 @@
     "TAC-602-persistence-data-sqlite-migration-runner"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5104.json

@@ -16,7 +16,8 @@
       "when": "the migration runner completes successfully",
       "then": "the bookkeeping table holds one row for each of v_k+1 through v_n in ascending order, and every domain table shape reflects the union of statements from those migrations",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5104-2",
@@ -25,7 +26,8 @@
       "when": "the migration runner attempts v_k+1 and its transaction fails",
       "then": "the bookkeeping table's highest row remains v_k, no partial DDL from v_k+1 is present, and the migration runner throws an error naming version v_k+1 and the failing description",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5104-3",
@@ -34,12 +36,27 @@
       "when": "the migration runner runs and fails on v_k+1",
       "then": "no domain-table statements from v_k+2 have been executed and the bookkeeping table holds no row for v_k+2",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
+    },
+    {
+      "id": "AC-5104-4",
+      "description": "Disk full mid-migration leaves the previous version intact. Given a migration whose statements would exceed the filesystem's remaining free space (simulated by a bind-mounted tmpfs at a small quota), when the migration runner opens the transaction and executes statements, then the underlying engine surfaces a SQLITE_FULL error, the runner rolls the transaction back (leaving the bookkeeping table unchanged), the runner re-throws a named migrationDiskFull error carrying the target version, and a subsequent open at the previous version succeeds unchanged with the same row-count and checksum.",
+      "given": "a migration that would exceed the filesystem's free space (tmpfs quota probe)",
+      "when": "the migration runner executes statements",
+      "then": "engine surfaces SQLITE_FULL; runner rolls back; migrationDiskFull re-thrown naming the target version; the previous version reopens unchanged",
+      "testable": true,
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-602-persistence-data-sqlite-migration-runner",
+        "field": "responsibilities.applyInOrder"
+      },
+      "disposition": "template"
     }
   ],
   "tacIds": [
     "TAC-602-persistence-data-sqlite-migration-runner"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5105.json

@@ -16,7 +16,8 @@
       "when": "a fresh process opens the same store artifact and reads through the facade",
       "then": "the read returns W with the same values that were committed, and the store event log's opened event for the fresh process is present with no accompanying corruption error",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5105-2",
@@ -25,7 +26,8 @@
       "when": "a fresh process opens the same store artifact and reads through the facade",
       "then": "the reads for W_a's affected rows return the pre-transaction state and no post-transaction state, and no partial subset of W_a is visible",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5105-3",
@@ -34,12 +36,13 @@
       "when": "the durability posture is inspected via an engine-native introspection query executed through the facade",
       "then": "the returned posture matches the facade's declared crash-safety configuration, and a grep of consumer code finds no direct configuration of these pragmas or engine-native equivalents",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     }
   ],
   "tacIds": [
     "TAC-601-persistence-data-sqlite-store"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5106.json

@@ -16,7 +16,12 @@
       "when": "the sink is inspected after each lifecycle moment",
       "then": "the sink has received one record for each moment with the event name field set to opened, migrated, backupCheckpoint, and closed respectively, each carrying a valid ISO-8601 timestamp",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "ownerRef": {
+        "tacId": "TAC-601-persistence-data-sqlite-store",
+        "field": "interfaces.onEvent"
+      },
+      "disposition": "template"
     },
     {
       "id": "AC-5106-2",
@@ -25,7 +30,8 @@
       "when": "the migrated event fires",
       "then": "the event record contains a from field equal to v_k, a to field equal to v_n, and an applied field whose value is the array of integers v_k+1 through v_n in ascending order",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
     },
     {
       "id": "AC-5106-3",
@@ -34,7 +40,8 @@
       "when": "the opened and backupCheckpoint events fire",
       "then": "the opened event's store identifier field equals I and the backupCheckpoint event's artifact path field equals B, both as strings the operator can pass back into their tooling verbatim",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "template"
     }
   ],
   "tacIds": [
@@ -42,5 +49,5 @@
     "TAC-604-persistence-data-sqlite-backup-runner"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5107.json

@@ -16,7 +16,8 @@
       "when": "the import graph is inspected for uses of the engine binding module",
       "then": "the engine binding is imported by exactly one file (the store facade) and no other file in the source tree imports it, verified by an import-graph query or a targeted grep",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5107-2",
@@ -25,7 +26,8 @@
       "when": "the surface is inspected",
       "then": "every exported function has a domain-shaped name and typed parameters (not a raw query string parameter), and no exported function accepts an engine-native query object or raw SQL string as a call argument from consumer code",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5107-3",
@@ -34,12 +36,13 @@
       "when": "the domain code runs against the double in place of the facade",
       "then": "the domain code executes to completion without importing the engine binding at any point in its call path and its behaviour is unchanged from a facade-backed run for the operations under test",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     }
   ],
   "tacIds": [
     "TAC-601-persistence-data-sqlite-store"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }

package/blueprints/persistence-data-sqlite/contributions/user-stories/persistence-data-sqlite-us-5108.json

@@ -16,7 +16,8 @@
       "when": "the backup runner completes and the served-request log for the snapshot window is inspected",
       "then": "an artifact file exists at P and every request served during the snapshot window reports its normal outcome, with no request marked failed on account of the backup operation",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5108-2",
@@ -25,7 +26,8 @@
       "when": "the fresh process's boot sequence completes and consumer code reads through the facade",
       "then": "the fresh process's opened event names P as its store identifier, the reported schema version equals the source store's schema version at snapshot completion, and reads of rows committed at or before the snapshot completion timestamp return the committed values",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     },
     {
       "id": "AC-5108-3",
@@ -34,7 +36,8 @@
       "when": "the event log is inspected",
       "then": "the log contains exactly one backupCheckpoint event whose artifact path field equals P and whose completion timestamp field equals T",
       "testable": true,
-      "scope": "runtime"
+      "scope": "runtime",
+      "disposition": "fixed"
     }
   ],
   "tacIds": [
@@ -42,5 +45,5 @@
     "TAC-601-persistence-data-sqlite-store"
   ],
   "createdAt": "2026-08-21T00:00:00Z",
-  "updatedAt": "2026-08-21T00:00:00Z"
+  "updatedAt": "2026-09-09T00:00:00Z"
 }