rcf-lite 0.28.4 → 0.30.0

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-001.json

@@ -5,7 +5,7 @@
   "description": "The application realises an admin-console surface whose navigation, on load, reads the applied blueprints capability declarations (via source read-back on manifest.blueprints[]) and renders links only for the surfaces the applied capabilities enable. A surface whose gating capability is not applied is neither linked nor reachable from the shell. The shell is the base surface REQ-002 to REQ-006 elaborate on.",
   "deliveredBy": {
     "tacId": "TAC-2201-application-admin-console-shell",
-    "field": "responsibilities.renderShell"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-002.json

@@ -5,7 +5,7 @@
   "description": "When an applied blueprint declares the principalDirectory capability, the console renders a users route: a directory table listing every principal identified by data-user-id, an invite control per row for a principal without an active session, a deactivate control per row for an active principal, and last-active plus status columns. A principal without admin scope reaching /admin renders an access-denied state (REQ-006) with a request-access control routed to a notification. The users table is a datatable (consumer) with the same ARIA APG contract.",
   "deliveredBy": {
     "tacId": "TAC-2201-application-admin-console-shell",
-    "field": "responsibilities.delegateUsersSurface"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-003.json

@@ -5,7 +5,7 @@
   "description": "When an applied blueprint declares the roleModel capability, the console renders a roles route: the Owner + Admin + Member + Viewer baseline (elicited additions per ADR-2202), and a permission matrix as an ARIA APG grid (rows = roles, columns = permissions, cells = allowed/denied). Each cell announces the exact permission string as it takes focus (WCAG 4.1.3). The matrix suppresses when roleModel is not applied.",
   "deliveredBy": {
     "tacId": "TAC-2203-application-admin-console-permission-matrix",
-    "field": "interfaces.renderMatrix"
+    "field": "interfaces[renderMatrix]"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-004.json

@@ -5,7 +5,7 @@
   "description": "When an applied blueprint declares the tenancy capability, the console renders an orgs route: an org switcher control on the shell and an org-scoped invite path from the users surface. The tenancy capability today has no shelf provider (reserved for a future application-tenancy-orgs blueprint per spec section 11); the surface is suppressed until that provider ships.",
   "deliveredBy": {
     "tacId": "TAC-2201-application-admin-console-shell",
-    "field": "responsibilities.delegateOrgsSurface"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-005.json

@@ -5,7 +5,7 @@
   "description": "When the auditLog capability is applied (through the observability-logging companion or a future dedicated audit blueprint), the console renders an audit-log route: an audit table listing every entry identified by data-audit-id and carrying actor, target, before, after, timestamp, and correlationId columns; per-actor filter chrome and per-target filter chrome; retention window per ADR-2204. Consumes application-datatable for the table shell. The retention window is the elicited `audit-retention-days` value (a number of days, default 90): the applied logging companion enforces retention at the write layer against that day-count so entries older than the window are not emitted, and the audit view uses the same day-count when computing the earliest-visible timestamp for the filter chrome. A project sets the value at apply time; a value below 1 is refused at apply.",
   "deliveredBy": {
     "tacId": "TAC-2204-application-admin-console-audit-view",
-    "field": "interfaces.renderAuditView"
+    "field": "interfaces[renderAuditView]"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-006.json

@@ -5,7 +5,7 @@
   "description": "A principal without admin scope reaching an admin route renders an access-denied state under WCAG 2.4.6 Headings and Labels and 3.3.4 Error Prevention: a heading naming the denied action, an explanation of why access was refused, and a request-access control routed to a POST /api/request-access endpoint the applied notification blueprint delivers on. The request-access control is keyboard-reachable and announces its state (idle, submitting, submitted) via a polite live region (WCAG 4.1.3).",
   "deliveredBy": {
     "tacId": "TAC-2201-application-admin-console-shell",
-    "field": "responsibilities.renderAccessDenied"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-007.json

@@ -5,7 +5,7 @@
   "description": "The users surface honours the elicited invite-transport with a runtime clause per option: `email` hands the invite to the applied email companion (an email sibling declaring an email transport) and records success only after the transport reports the message accepted, presenting a delivery-failed refusal with a retryable control when the transport rejects or times out; `in-app-only` never touches the email transport and writes an invite record to the applied notification stream, marking the row with a data-invite-transport=in-app-only attribute so the recipient can see the invite in their own console; `custom` hands the invite payload to the project-supplied invite handler at surface time (a registered function on the applied capability sidecar) and records success only after the handler resolves, refusing the invite when no handler is registered. Every branch writes an audit record naming the transport, the invitee, and the outcome (accepted, failed, or refused).",
   "deliveredBy": {
     "tacId": "TAC-2201-application-admin-console-shell",
-    "field": "responsibilities.deliverInvite"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "user-management",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-008.json

@@ -5,7 +5,7 @@
   "description": "When the tenancy capability is applied, the users surface, the org switcher and the invite path honour the elicited tenancy-shape with a runtime clause per option: `per-user` renders each principal in exactly one org (the directory row carries a single data-org-id and the org switcher only lists the principal's own org), and an org-scoped invite adds the invitee to exactly that org; `per-org` renders every principal in every org they can reach (the directory row carries a data-org-membership=* attribute and the org switcher lists every org the principal can enter), and an org-scoped invite adds the invitee to the currently switched org without touching the other orgs the principal already belongs to; `both` permits either shape per principal (the directory row carries data-org-scope=single or data-org-scope=many) and the invite path prompts for the org set when the invited principal is `many`. Every branch refuses a cross-org action (invite, deactivate) that the shape does not allow with a named error announcing the shape and the refused action.",
   "deliveredBy": {
     "tacId": "TAC-2201-application-admin-console-shell",
-    "field": "responsibilities.tenancyShapeGate"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "tenancy",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-009.json

@@ -5,7 +5,7 @@
   "description": "When the applying project runs its own auth (no shipped security-auth-* blueprint) and answers the four custom-auth-provides-* boolean elicits, the console binds each answer to the appliedCapabilities union with a runtime clause per token: when `blueprint.json.elicits[id=custom-auth-provides-principal-directory]` is `true` the union includes `principalDirectory` and `false` omits it; when `blueprint.json.elicits[id=custom-auth-provides-role-model]` is `true` the union includes `roleModel` and `false` omits it; when `blueprint.json.elicits[id=custom-auth-provides-tenancy]` is `true` the union includes `tenancy` and `false` omits it; when `blueprint.json.elicits[id=custom-auth-provides-audit-log]` is `true` the union includes `auditLog` and `false` omits it. The sidecar the shell reads reflects the exact union the boolean answers produce.",
   "deliveredBy": {
     "tacId": "TAC-2202-application-admin-console-capability-discovery",
-    "field": "responsibilities.runElicitationPhase"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/requirements/application-admin-console-req-014.json

@@ -5,7 +5,7 @@
   "description": "application-admin-console v1.1.0 reads the appliedCapabilities set at apply-time via the shipped readAppliedCapabilities() helper (the visual-round mechanism). When zeroTrustGate is present alongside the sole hard requirement principalDirectory, the admin-console renders the Access-gated sign-in surface (no local login form; principal reads from request.auth via [data-role=principal-read]). When zeroTrustGate is absent the admin-console falls back to the local security-auth-* sign-in surface unchanged from v1.0.0. Q4 default per spec section 5.4.1: consumption is OPTIONAL; requiresAppliedCapabilities.capabilities[] remains [principalDirectory] (making Access-gate hard is a v2.0 change).",
   "deliveredBy": {
     "tacId": "TAC-2214-application-admin-console-access-gated-signin-surface",
-    "field": "responsibilities.renderAccessGatedSurface"
+    "field": "responsibilities"
   },
   "category": "functional",
   "domain": "application",

package/blueprints/application-admin-console/contributions/tacs/tac-2201-application-admin-console-shell.json

@@ -18,13 +18,13 @@
   "interfaces": [
     {
       "name": "renderShell",
-      "kind": "factory",
-      "description": "renderShell({ capsSidecarUrl, surfaceRegistry, accessGuard }) -> { mount(rootElement), unmount() }. The project supplies the capsSidecarUrl (where the sidecar is served from), the surfaceRegistry (maps a capability string to a surface component), and the accessGuard (returns whether the current principal has admin scope)."
+      "kind": "other",
+      "description": "renderShell({ capsSidecarUrl, surfaceRegistry, accessGuard }) -> { mount(rootElement), unmount() }. The project supplies the capsSidecarUrl (where the sidecar is served from), the surfaceRegistry (maps a capability string to a surface component), and the accessGuard (returns whether the current principal has admin scope). (legacy kind: factory)"
     },
     {
       "name": "capabilitiesSidecar",
-      "kind": "shape",
-      "description": "{ slug, version, appliedAt, appliedCapabilities: string[], appliedElicitations: {}, skippedSources: Array<{ sourceId, reason }>, allowNoAuthYet?: boolean, notes?: string }. Written by apply, read by the shell."
+      "kind": "other",
+      "description": "{ slug, version, appliedAt, appliedCapabilities: string[], appliedElicitations: {}, skippedSources: Array<{ sourceId, reason }>, allowNoAuthYet?: boolean, notes?: string }. Written by apply, read by the shell. (legacy kind: shape)"
     }
   ],
   "dependencies": [

package/blueprints/application-admin-console/contributions/tacs/tac-2202-application-admin-console-capability-discovery.json

@@ -16,18 +16,18 @@
   "interfaces": [
     {
       "name": "discoverAppliedCapabilities",
-      "kind": "function",
-      "description": "Returns { union: string[], perSlug: Record<slug, string[]> }."
+      "kind": "other",
+      "description": "Returns { union: string[], perSlug: Record<slug, string[]> }. (legacy kind: function)"
     },
     {
       "name": "runElicitationPhase",
-      "kind": "function",
-      "description": "Applies each elicits[] entry against the discovered capability set and coerces answers per kind."
+      "kind": "other",
+      "description": "Applies each elicits[] entry against the discovered capability set and coerces answers per kind. (legacy kind: function)"
     },
     {
       "name": "writeSidecar",
-      "kind": "function",
-      "description": "Writes rcf/blueprints/${slug}.applied.json."
+      "kind": "other",
+      "description": "Writes rcf/blueprints/${slug}.applied.json. (legacy kind: function)"
     }
   ],
   "dependencies": [
@@ -41,4 +41,4 @@
   "notes": "Reads the applied recordss source string. When the source is a library-qualified ref (wsd:auth-oauth2), the source blueprint is not on this local tree and the reader returns an empty capabilities list; the applied record is skipped from the union.",
   "createdAt": "2026-09-05T01:30:00Z",
   "updatedAt": "2026-09-10T00:00:00Z"
-}
+}

package/blueprints/application-admin-console/contributions/tacs/tac-2203-application-admin-console-permission-matrix.json

@@ -15,8 +15,8 @@
   "interfaces": [
     {
       "name": "renderMatrix",
-      "kind": "factory",
-      "description": "renderMatrix({ roles: RoleSpec[], permissions: PermissionSpec[], matrix: Record<roleId, Record<permissionId, boolean>> }) -> { mount(rootElement), unmount() }."
+      "kind": "other",
+      "description": "renderMatrix({ roles: RoleSpec[], permissions: PermissionSpec[], matrix: Record<roleId, Record<permissionId, boolean>> }) -> { mount(rootElement), unmount() }. (legacy kind: factory)"
     }
   ],
   "dependencies": [

package/blueprints/application-admin-console/contributions/tacs/tac-2204-application-admin-console-audit-view.json

@@ -15,8 +15,8 @@
   "interfaces": [
     {
       "name": "renderAuditView",
-      "kind": "factory",
-      "description": "renderAuditView({ eventStream, columns, retentionWindow }) -> { mount(rootElement), unmount() }."
+      "kind": "other",
+      "description": "renderAuditView({ eventStream, columns, retentionWindow }) -> { mount(rootElement), unmount() }. (legacy kind: factory)"
     }
   ],
   "dependencies": [

package/blueprints/application-admin-console/contributions/tacs/tac-2214-application-admin-console-access-gated-signin-surface.json

@@ -16,8 +16,9 @@
   "interfaces": [
     {
       "name": "GET /admin/sign-in",
-      "kind": "route",
-      "summary": "Sign-in surface route the admin-console shell renders per applied-capability set."
+      "kind": "other",
+      "summary": "Sign-in surface route the admin-console shell renders per applied-capability set.",
+      "description": "(legacy kind: route)"
     }
   ],
   "dependencies": [

package/blueprints/application-admin-console/contributions/user-stories/application-admin-console-us-21107.json

@@ -17,7 +17,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-2201-application-admin-console-shell",
-        "field": "interfaces.capabilitiesSidecar"
+        "field": "interfaces[capabilitiesSidecar]"
       }
     },
     {
@@ -31,7 +31,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-2201-application-admin-console-shell",
-        "field": "interfaces.capabilitiesSidecar"
+        "field": "interfaces[capabilitiesSidecar]"
       }
     }
   ],

package/blueprints/application-admin-console/contributions/user-stories/application-admin-console-us-21111.json

@@ -27,11 +27,7 @@
       "then": "each users row carries the per-org membership attribute defined by `REQ-008.description`, the switcher enumerates every reachable org, and the invite POST records the invitee against exactly the switched org (verified in the audit stream)",
       "testable": true,
       "scope": "runtime",
-      "disposition": "fixed",
-      "ownerRef": {
-        "reqId": "application-admin-console-REQ-008",
-        "field": "description"
-      }
+      "disposition": "fixed"
     },
     {
       "id": "AC-21111-3",
@@ -61,11 +57,7 @@
       "then": "the row is suppressed and data-error=SHAPE_MISMATCH is emitted",
       "testable": true,
       "scope": "runtime",
-      "disposition": "fixed",
-      "ownerRef": {
-        "reqId": "application-admin-console-REQ-008",
-        "field": "description"
-      }
+      "disposition": "fixed"
     }
   ],
   "tacIds": [
@@ -73,4 +65,4 @@
   ],
   "createdAt": "2026-09-10T00:00:00Z",
   "updatedAt": "2026-09-10T00:00:00Z"
-}
+}

package/blueprints/application-admin-console/contributions/user-stories/application-admin-console-us-21112.json

@@ -20,7 +20,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-2202-application-admin-console-capability-discovery",
-        "field": "responsibilities.runElicitationPhase"
+        "field": "responsibilities"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-2202-application-admin-console-capability-discovery",
-        "field": "responsibilities.runElicitationPhase"
+        "field": "responsibilities"
       }
     },
     {
@@ -48,7 +48,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-2202-application-admin-console-capability-discovery",
-        "field": "responsibilities.runElicitationPhase"
+        "field": "responsibilities"
       }
     },
     {
@@ -62,7 +62,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-2202-application-admin-console-capability-discovery",
-        "field": "responsibilities.runElicitationPhase"
+        "field": "responsibilities"
       }
     }
   ],

package/blueprints/application-admin-console/contributions/user-stories/application-admin-console-us-21815.json

@@ -20,7 +20,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-2214-application-admin-console-access-gated-signin-surface",
-        "field": "interfaces.GET /admin/sign-in"
+        "field": "interfaces[GET /admin/sign-in]"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-2214-application-admin-console-access-gated-signin-surface",
-        "field": "interfaces.GET /admin/sign-in"
+        "field": "interfaces[GET /admin/sign-in]"
       }
     }
   ],

package/blueprints/application-admin-console/contributions/user-stories/application-admin-console-us-21816.json

@@ -20,7 +20,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-2214-application-admin-console-access-gated-signin-surface",
-        "field": "interfaces.GET /admin/sign-in"
+        "field": "interfaces[GET /admin/sign-in]"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-2214-application-admin-console-access-gated-signin-surface",
-        "field": "interfaces.GET /admin/sign-in"
+        "field": "interfaces[GET /admin/sign-in]"
       }
     }
   ],

package/blueprints/application-api-rest/contributions/requirements/application-api-rest-req-001.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T10:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-301-application-api-rest-request-pipeline",
-    "field": "responsibilities.endpoint"
+    "field": "responsibilities"
   }
 }

package/blueprints/application-api-rest/contributions/requirements/application-api-rest-req-002.json

@@ -16,7 +16,6 @@
   "createdAt": "2026-08-19T10:00:00Z",
   "updatedAt": "2026-08-19T10:00:00Z",
   "deliveredBy": {
-    "tacId": "TAC-301-application-api-rest-request-pipeline",
-    "field": "purpose.content-type"
+    "tacId": "TAC-301-application-api-rest-request-pipeline"
   }
 }

package/blueprints/application-api-rest/contributions/requirements/application-api-rest-req-004.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T10:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-303-application-api-rest-contract-surface",
-    "field": "responsibilities.hand-written"
+    "field": "responsibilities"
   }
 }

package/blueprints/application-api-rest/contributions/requirements/application-api-rest-req-008.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T10:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-301-application-api-rest-request-pipeline",
-    "field": "interfaces.problem-details"
+    "field": "interfaces"
   }
 }

package/blueprints/application-api-rest/contributions/requirements/application-api-rest-req-016.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T10:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-301-application-api-rest-request-pipeline",
-    "field": "interfaces.per-endpoint"
+    "field": "interfaces"
   }
 }

package/blueprints/application-api-rest/contributions/tacs/tac-301-application-api-rest-request-pipeline.json

@@ -19,13 +19,13 @@
   "interfaces": [
     {
       "name": "endpoint metadata",
-      "kind": "configuration",
-      "description": "Per-endpoint declarations (auth class, rate-limit override, idempotency requirement) consumed to parameterise the shared pipeline; the same declarations the contract surface publishes."
+      "kind": "other",
+      "description": "Per-endpoint declarations (auth class, rate-limit override, idempotency requirement) consumed to parameterise the shared pipeline; the same declarations the contract surface publishes. (legacy kind: configuration)"
     },
     {
       "name": "error boundary",
-      "kind": "middleware",
-      "description": "Terminal handler converting any failure into a problem-details response with the request id in the instance field."
+      "kind": "other",
+      "description": "Terminal handler converting any failure into a problem-details response with the request id in the instance field. (legacy kind: middleware)"
     }
   ],
   "dependencies": [

package/blueprints/application-api-rest/contributions/tacs/tac-302-application-api-rest-auth-middleware.json

@@ -18,13 +18,13 @@
   "interfaces": [
     {
       "name": "class selection",
-      "kind": "configuration",
-      "description": "The endpoint's declared class, read from the same metadata the OpenAPI x-auth-class extension publishes."
+      "kind": "other",
+      "description": "The endpoint's declared class, read from the same metadata the OpenAPI x-auth-class extension publishes. (legacy kind: configuration)"
     },
     {
       "name": "resolved principal",
-      "kind": "request-context",
-      "description": "The identity (user or service principal) the slot resolves, exposed read-only to handlers and observability."
+      "kind": "other",
+      "description": "The identity (user or service principal) the slot resolves, exposed read-only to handlers and observability. (legacy kind: request-context)"
     }
   ],
   "dependencies": [

package/blueprints/application-api-rest/contributions/tacs/tac-303-application-api-rest-contract-surface.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "generated spec",
-      "kind": "artefact",
-      "description": "The OpenAPI 3.1 document, emitted at build time and served at runtime; the single contract clients and the conformance driver both consume."
+      "kind": "fileFormat",
+      "description": "The OpenAPI 3.1 document, emitted at build time and served at runtime; the single contract clients and the conformance driver both consume. (legacy kind: artefact)"
     },
     {
       "name": "documentation endpoints",
-      "kind": "http",
-      "description": "/openapi.json, /openapi.yaml, and /docs, exposure-policy controlled."
+      "kind": "other",
+      "description": "/openapi.json, /openapi.yaml, and /docs, exposure-policy controlled. (legacy kind: http)"
     }
   ],
   "dependencies": [

package/blueprints/application-api-rest/contributions/tacs/tac-304-application-api-rest-resource-layer.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "resource registration",
-      "kind": "configuration",
-      "description": "Each resource declares its routes, representation schema, filters, sortable fields, and auth classes in one registration record."
+      "kind": "other",
+      "description": "Each resource declares its routes, representation schema, filters, sortable fields, and auth classes in one registration record. (legacy kind: configuration)"
     },
     {
       "name": "collection envelope",
-      "kind": "wire-format",
-      "description": "The pagination envelope (items, next, prev, optional total) every collection response uses."
+      "kind": "other",
+      "description": "The pagination envelope (items, next, prev, optional total) every collection response uses. (legacy kind: wire-format)"
     }
   ],
   "dependencies": [

package/blueprints/application-api-rest/contributions/tacs/tac-305-application-api-rest-observability.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "telemetry context",
-      "kind": "request-context",
-      "description": "Request id, trace context, auth class, path template, and timing, shared by all three emitters."
+      "kind": "other",
+      "description": "Request id, trace context, auth class, path template, and timing, shared by all three emitters. (legacy kind: request-context)"
     },
     {
       "name": "signal exporters",
-      "kind": "configuration",
-      "description": "Where logs, metrics, and traces go is deployment configuration; the shapes emitted are contract."
+      "kind": "other",
+      "description": "Where logs, metrics, and traces go is deployment configuration; the shapes emitted are contract. (legacy kind: configuration)"
     }
   ],
   "dependencies": [

package/blueprints/application-api-rest/contributions/tacs/tac-306-application-api-rest-operability.json

@@ -18,13 +18,13 @@
   "interfaces": [
     {
       "name": "readiness check registry",
-      "kind": "configuration",
-      "description": "Declared named checks (database, cache, queues) with their timeout budgets; the set the ready probe reports on."
+      "kind": "other",
+      "description": "Declared named checks (database, cache, queues) with their timeout budgets; the set the ready probe reports on. (legacy kind: configuration)"
     },
     {
       "name": "probe endpoints",
-      "kind": "http",
-      "description": "The three probe surfaces (liveness, readiness, startup) at their resolved paths, and /v1/_meta, with their specified response schemas. The path resolution is delegated to observability-probe-endpoints or to project-level probeInterface.paths configuration; this TAC binds NO literal path strings for the probe surfaces from v2.0.0."
+      "kind": "other",
+      "description": "The three probe surfaces (liveness, readiness, startup) at their resolved paths, and /v1/_meta, with their specified response schemas. The path resolution is delegated to observability-probe-endpoints or to project-level probeInterface.paths configuration; this TAC binds NO literal path strings for the probe surfaces from v2.0.0. (legacy kind: http)"
     }
   ],
   "dependencies": [

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2102.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2103.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[1].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2104.json

@@ -29,7 +29,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },
@@ -43,7 +43,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },
@@ -67,7 +67,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "template"
     },
@@ -81,7 +81,7 @@
       "scope": "deployed",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[1].name"
+        "field": "interfaces"
       },
       "disposition": "template"
     }

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2105.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },
@@ -33,7 +33,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2108.json

@@ -100,7 +100,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-306-application-api-rest-operability",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       }
     }
   ],

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2110.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "template"
     },

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2111.json

@@ -33,7 +33,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed",
       "vendorCitation": {

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2118.json

@@ -69,7 +69,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "template"
     }

package/blueprints/application-api-rest/contributions/user-stories/application-api-rest-us-2119.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },
@@ -53,7 +53,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-303-application-api-rest-contract-surface",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },