rcf-lite 0.28.4 → 0.30.0

package/blueprints/application-spa/contributions/requirements/application-spa-req-007.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T09:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-205-application-spa-forms-engine",
-    "field": "responsibilities.submit-level"
+    "field": "responsibilities"
   }
 }

package/blueprints/application-spa/contributions/requirements/application-spa-req-014.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T09:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-201-application-spa-app-shell",
-    "field": "responsibilities.network"
+    "field": "responsibilities"
   }
 }

package/blueprints/application-spa/contributions/requirements/application-spa-req-015.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T09:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-203-application-spa-component-library",
-    "field": "responsibilities.hard-coded"
+    "field": "responsibilities"
   }
 }

package/blueprints/application-spa/contributions/requirements/application-spa-req-017.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T09:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-201-application-spa-app-shell",
-    "field": "responsibilities.render"
+    "field": "responsibilities"
   }
 }

package/blueprints/application-spa/contributions/requirements/application-spa-req-018.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-08-19T09:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-209-application-spa-csp-styled-adherence-probe",
-    "field": "responsibilities.content-security-policy"
+    "field": "responsibilities"
   }
 }

package/blueprints/application-spa/contributions/tacs/tac-201-application-spa-app-shell.json

@@ -18,13 +18,13 @@
   "interfaces": [
     {
       "name": "route inventory",
-      "kind": "configuration",
-      "description": "Declared route table consumed to render navigation and breadcrumbs."
+      "kind": "other",
+      "description": "Declared route table consumed to render navigation and breadcrumbs. (legacy kind: configuration)"
     },
     {
       "name": "toast region",
-      "kind": "ui-slot",
-      "description": "Imperative enqueue API for transient notifications, rendered in one landmark-safe region."
+      "kind": "other",
+      "description": "Imperative enqueue API for transient notifications, rendered in one landmark-safe region. (legacy kind: ui-slot)"
     }
   ],
   "dependencies": [

package/blueprints/application-spa/contributions/tacs/tac-202-application-spa-theme-system.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "design tokens",
-      "kind": "asset",
-      "description": "assets/tokens/design-tokens.json, the canonical token values for both themes."
+      "kind": "other",
+      "description": "assets/tokens/design-tokens.json, the canonical token values for both themes. (legacy kind: asset)"
     },
     {
       "name": "theme attribute",
-      "kind": "dom-contract",
-      "description": "data-theme attribute on the document root; components style exclusively via tokens that respond to it."
+      "kind": "other",
+      "description": "data-theme attribute on the document root; components style exclusively via tokens that respond to it. (legacy kind: dom-contract)"
     }
   ],
   "tradeoffs": "Semantic tokens over raw palette references cost one indirection and buy theme parity, contrast checkability, and re-skinning without component edits.",

package/blueprints/application-spa/contributions/tacs/tac-207-application-spa-token-adherence-probe.json

@@ -19,18 +19,18 @@
   "interfaces": [
     {
       "name": "runTokenAdherenceProbe",
-      "kind": "factory",
-      "description": "runTokenAdherenceProbe({ tokensPath, stylesheetGlob, reportDir }) -> Promise<{ verdict, reportPath, violations }>; the sole callable the entry point invokes. `verdict` is `'ok' | 'fail'`; the entry point translates `fail` to a non-zero exit code."
+      "kind": "other",
+      "description": "runTokenAdherenceProbe({ tokensPath, stylesheetGlob, reportDir }) -> Promise<{ verdict, reportPath, violations }>; the sole callable the entry point invokes. `verdict` is `'ok' | 'fail'`; the entry point translates `fail` to a non-zero exit code. (legacy kind: factory)"
     },
     {
       "name": "entry-point CLI",
-      "kind": "cli",
-      "description": "`node <entryPointPath>` with optional flags `--tokens <path>`, `--stylesheet-glob <glob>`, `--report-dir <path>` that override configuration defaults. Exit code is 0 on `ok`, non-zero on `fail`."
+      "kind": "other",
+      "description": "`node <entryPointPath>` with optional flags `--tokens <path>`, `--stylesheet-glob <glob>`, `--report-dir <path>` that override configuration defaults. Exit code is 0 on `ok`, non-zero on `fail`. (legacy kind: cli)"
     },
     {
       "name": "token-adherence report",
-      "kind": "external",
-      "description": "`reports/token-adherence.json` under the configured report directory. Shape: `{ verdict, tokensFile, stylesheetsScanned: string[], rawLiteralViolations: [{ file, line, snippet, category }], parityViolations: [{ key, missingIn: 'light' | 'dark' }], generatedAt }`."
+      "kind": "other",
+      "description": "`reports/token-adherence.json` under the configured report directory. Shape: `{ verdict, tokensFile, stylesheetsScanned: string[], rawLiteralViolations: [{ file, line, snippet, category }], parityViolations: [{ key, missingIn: 'light' | 'dark' }], generatedAt }`. (legacy kind: external)"
     }
   ],
   "dependencies": [

package/blueprints/application-spa/contributions/tacs/tac-208-application-spa-icon-adherence-probe.json

@@ -18,18 +18,18 @@
   "interfaces": [
     {
       "name": "runIconAdherenceProbe",
-      "kind": "factory",
-      "description": "runIconAdherenceProbe({ registryPath, componentGlob, reportDir }) -> Promise<{ verdict, reportPath, violations }>; the sole callable the entry point invokes. `verdict` is `'ok' | 'fail'`; the entry point translates `fail` to a non-zero exit code."
+      "kind": "other",
+      "description": "runIconAdherenceProbe({ registryPath, componentGlob, reportDir }) -> Promise<{ verdict, reportPath, violations }>; the sole callable the entry point invokes. `verdict` is `'ok' | 'fail'`; the entry point translates `fail` to a non-zero exit code. (legacy kind: factory)"
     },
     {
       "name": "entry-point CLI",
-      "kind": "cli",
-      "description": "`node <entryPointPath>` with optional flags `--registry <path>`, `--component-glob <glob>`, `--report-dir <path>` that override configuration defaults. Exit code is 0 on `ok`, non-zero on `fail`."
+      "kind": "other",
+      "description": "`node <entryPointPath>` with optional flags `--registry <path>`, `--component-glob <glob>`, `--report-dir <path>` that override configuration defaults. Exit code is 0 on `ok`, non-zero on `fail`. (legacy kind: cli)"
     },
     {
       "name": "icon-adherence report",
-      "kind": "external",
-      "description": "`reports/icon-adherence.json` under the configured report directory. Shape: `{ verdict, registryFile, componentsScanned: string[], inlineSvgViolations: [{ file, line, snippet }], unknownAliasViolations: [{ file, line, name }], generatedAt }`."
+      "kind": "other",
+      "description": "`reports/icon-adherence.json` under the configured report directory. Shape: `{ verdict, registryFile, componentsScanned: string[], inlineSvgViolations: [{ file, line, snippet }], unknownAliasViolations: [{ file, line, name }], generatedAt }`. (legacy kind: external)"
     }
   ],
   "dependencies": [

package/blueprints/application-spa/contributions/tacs/tac-209-application-spa-csp-styled-adherence-probe.json

@@ -23,18 +23,18 @@
   "interfaces": [
     {
       "name": "runCspStyledAdherenceProbe",
-      "kind": "factory",
-      "description": "runCspStyledAdherenceProbe({ bootServer, routes, stylesheetUrl, reportDir }) -> Promise<{ verdict, reportPath, refusals }>; the sole callable the entry point invokes. `bootServer` is a factory returning `{ url, close }` for a server booted through the production entry-point path. `verdict` is `'ok' | 'fail'`; the entry point translates `fail` to a non-zero exit code."
+      "kind": "other",
+      "description": "runCspStyledAdherenceProbe({ bootServer, routes, stylesheetUrl, reportDir }) -> Promise<{ verdict, reportPath, refusals }>; the sole callable the entry point invokes. `bootServer` is a factory returning `{ url, close }` for a server booted through the production entry-point path. `verdict` is `'ok' | 'fail'`; the entry point translates `fail` to a non-zero exit code. (legacy kind: factory)"
     },
     {
       "name": "entry-point CLI",
-      "kind": "cli",
-      "description": "`node <entryPointPath>` with optional flags `--boot <module>`, `--routes <comma-list>`, `--stylesheet <url>`, `--report-dir <path>` that override configuration defaults. Exit code is 0 on `ok`, non-zero on `fail`."
+      "kind": "other",
+      "description": "`node <entryPointPath>` with optional flags `--boot <module>`, `--routes <comma-list>`, `--stylesheet <url>`, `--report-dir <path>` that override configuration defaults. Exit code is 0 on `ok`, non-zero on `fail`. (legacy kind: cli)"
     },
     {
       "name": "reports/csp-styled-adherence.json",
-      "kind": "artefact",
-      "description": "`reports/csp-styled-adherence.json` under the configured report directory. Shape: `{ verdict, stylesheetUrl, stylesheetResponse: { status, contentType }, routes: [{ route, landedPath, csp, inlineStyleDetected, computed: { backgroundColor, fontFamily }, refusals }], generatedAt }`. `landedPath` is the pathname the browser's final URL resolved to after any redirect chain; when it does not equal `route`, the entry's `refusals` includes a `pathMismatch` class naming both paths and the run verdict is `fail`."
+      "kind": "fileFormat",
+      "description": "`reports/csp-styled-adherence.json` under the configured report directory. Shape: `{ verdict, stylesheetUrl, stylesheetResponse: { status, contentType }, routes: [{ route, landedPath, csp, inlineStyleDetected, computed: { backgroundColor, fontFamily }, refusals }], generatedAt }`. `landedPath` is the pathname the browser's final URL resolved to after any redirect chain; when it does not equal `route`, the entry's `refusals` includes a `pathMismatch` class naming both paths and the run verdict is `fail`. (legacy kind: artefact)"
     }
   ],
   "dependencies": [

package/blueprints/application-spa/contributions/tacs/tac-210-application-spa-external-dependency-provisioning-probe.json

@@ -22,23 +22,23 @@
   "interfaces": [
     {
       "name": "runExternalDependencyProvisioningProbe",
-      "kind": "factory",
-      "description": "runExternalDependencyProvisioningProbe({ manifestPath, bootServer, deferralsStorePath, reportDir }) -> Promise<{ verdict, reportPath, refusals }>; the sole callable the entry point invokes. 'bootServer' is a factory returning '{ url, close, env }' for a server booted through the production entry-point path with the runtime environment the shipped instance observes. 'verdict' is 'ok' | 'deployed-with-defects'; the entry point translates 'deployed-with-defects' to a non-zero exit code."
+      "kind": "other",
+      "description": "runExternalDependencyProvisioningProbe({ manifestPath, bootServer, deferralsStorePath, reportDir }) -> Promise<{ verdict, reportPath, refusals }>; the sole callable the entry point invokes. 'bootServer' is a factory returning '{ url, close, env }' for a server booted through the production entry-point path with the runtime environment the shipped instance observes. 'verdict' is 'ok' | 'deployed-with-defects'; the entry point translates 'deployed-with-defects' to a non-zero exit code. (legacy kind: factory)"
     },
     {
       "name": "entry-point CLI",
-      "kind": "cli",
-      "description": "'node <entryPointPath>' with optional flags '--manifest <path>', '--boot <module>', '--deferrals <path>', '--report-dir <path>' that override configuration defaults. Exit code is 0 on 'ok', non-zero on 'deployed-with-defects'."
+      "kind": "other",
+      "description": "'node <entryPointPath>' with optional flags '--manifest <path>', '--boot <module>', '--deferrals <path>', '--report-dir <path>' that override configuration defaults. Exit code is 0 on 'ok', non-zero on 'deployed-with-defects'. (legacy kind: cli)"
     },
     {
       "name": "reports/external-dependency-provisioning.json",
-      "kind": "artefact",
-      "description": "'reports/external-dependency-provisioning.json' under the configured report directory. Shape: '{ verdict, dependencies: [{ id, purpose, provider, credentialField, status, placeholderCheck: { verdict, matchedPattern? }, verifiedEvidence?: { providerMessageId?, providerStatus?, capturedAt }, deferralRecord?: { path, ackedBy, ackedAt, reason, resolutionRoute }, refusals: [...] }], generatedAt }'."
+      "kind": "fileFormat",
+      "description": "'reports/external-dependency-provisioning.json' under the configured report directory. Shape: '{ verdict, dependencies: [{ id, purpose, provider, credentialField, status, placeholderCheck: { verdict, matchedPattern? }, verifiedEvidence?: { providerMessageId?, providerStatus?, capturedAt }, deferralRecord?: { path, ackedBy, ackedAt, reason, resolutionRoute }, refusals: [...] }], generatedAt }'. (legacy kind: artefact)"
     },
     {
       "name": "external-service-dependency manifest (project-owned)",
-      "kind": "artefact",
-      "description": "A project-owned JSON manifest the probe reads. Shape: '{ dependencies: [{ id, purpose, provider, credentialField, status: \"verified\" | \"deferred\" }] }'. Named at ship time; the probe refuses when the manifest is missing or malformed."
+      "kind": "fileFormat",
+      "description": "A project-owned JSON manifest the probe reads. Shape: '{ dependencies: [{ id, purpose, provider, credentialField, status: \"verified\" | \"deferred\" }] }'. Named at ship time; the probe refuses when the manifest is missing or malformed. (legacy kind: artefact)"
     }
   ],
   "dependencies": [

package/blueprints/application-spa/contributions/tacs/tac-211-application-spa-core-flow-e2e-probe.json

@@ -22,23 +22,23 @@
   "interfaces": [
     {
       "name": "runCoreFlowE2eProbe",
-      "kind": "factory",
-      "description": "runCoreFlowE2eProbe({ manifestPath, bootServer, reportDir }) -> Promise<{ verdict, reportPath, refusals }>; the sole callable the entry point invokes. 'bootServer' is a factory returning '{ url, close }' for a server booted through the production entry-point path (same construction, same headers, same middleware). 'verdict' is 'ok' | 'deployed-with-defects'; the entry point translates 'deployed-with-defects' to a non-zero exit code."
+      "kind": "other",
+      "description": "runCoreFlowE2eProbe({ manifestPath, bootServer, reportDir }) -> Promise<{ verdict, reportPath, refusals }>; the sole callable the entry point invokes. 'bootServer' is a factory returning '{ url, close }' for a server booted through the production entry-point path (same construction, same headers, same middleware). 'verdict' is 'ok' | 'deployed-with-defects'; the entry point translates 'deployed-with-defects' to a non-zero exit code. (legacy kind: factory)"
     },
     {
       "name": "entry-point CLI",
-      "kind": "cli",
-      "description": "'node <entryPointPath>' with optional flags '--manifest <path>', '--boot <module>', '--report-dir <path>' that override configuration defaults. Exit code is 0 on 'ok', non-zero on 'deployed-with-defects'."
+      "kind": "other",
+      "description": "'node <entryPointPath>' with optional flags '--manifest <path>', '--boot <module>', '--report-dir <path>' that override configuration defaults. Exit code is 0 on 'ok', non-zero on 'deployed-with-defects'. (legacy kind: cli)"
     },
     {
       "name": "reports/core-flow-e2e-adherence.json",
-      "kind": "artefact",
-      "description": "'reports/core-flow-e2e-adherence.json' under the configured report directory. Shape: '{ verdict, flows: [{ id, entryPointRoute, verdict, steps: [{ index, action, route, status, timingMs }], terminalAssertion: { kind, expected, actual }, providerEvidence?: { messageIds }, refusals: [...] }], generatedAt }'."
+      "kind": "fileFormat",
+      "description": "'reports/core-flow-e2e-adherence.json' under the configured report directory. Shape: '{ verdict, flows: [{ id, entryPointRoute, verdict, steps: [{ index, action, route, status, timingMs }], terminalAssertion: { kind, expected, actual }, providerEvidence?: { messageIds }, refusals: [...] }], generatedAt }'. (legacy kind: artefact)"
     },
     {
       "name": "core-flow manifest (project-owned)",
-      "kind": "artefact",
-      "description": "A project-owned JSON manifest the probe reads. Shape: '{ flows: [{ id, entryPointRoute, steps: [{ action, target?, input? }], terminalAssertion: { kind, expected } }] }'. Authentication must be enumerated when the application declares any application-spa-REQ-009 surface; otherwise the manifest scanner refuses ship."
+      "kind": "fileFormat",
+      "description": "A project-owned JSON manifest the probe reads. Shape: '{ flows: [{ id, entryPointRoute, steps: [{ action, target?, input? }], terminalAssertion: { kind, expected } }] }'. Authentication must be enumerated when the application declares any application-spa-REQ-009 surface; otherwise the manifest scanner refuses ship. (legacy kind: artefact)"
     }
   ],
   "dependencies": [

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1101.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-201-application-spa-app-shell",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "template"
     },
@@ -53,7 +53,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-201-application-spa-app-shell",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1102.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-201-application-spa-app-shell",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "template"
     },

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1107.json

@@ -70,7 +70,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-202-application-spa-theme-system",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       }
     }
   ],

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1117.json

@@ -19,7 +19,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-201-application-spa-app-shell",
-        "field": "interfaces[0].name"
+        "field": "interfaces"
       },
       "disposition": "template"
     },

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1129.json

@@ -20,7 +20,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-207-application-spa-token-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       }
     },
     {
@@ -33,7 +33,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-207-application-spa-token-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },
@@ -48,7 +48,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-207-application-spa-token-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       }
     },
     {
@@ -62,7 +62,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-207-application-spa-token-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       }
     }
   ],

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1130.json

@@ -20,7 +20,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-208-application-spa-icon-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-208-application-spa-icon-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       }
     },
     {
@@ -48,7 +48,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-208-application-spa-icon-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       }
     },
     {
@@ -62,7 +62,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-208-application-spa-icon-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       }
     }
   ],

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1131.json

@@ -59,7 +59,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-209-application-spa-csp-styled-adherence-probe",
-        "field": "interfaces[2].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1132.json

@@ -20,7 +20,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-210-application-spa-external-dependency-provisioning-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-210-application-spa-external-dependency-provisioning-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       }
     },
     {
@@ -48,7 +48,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-210-application-spa-external-dependency-provisioning-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       }
     },
     {
@@ -62,7 +62,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-210-application-spa-external-dependency-provisioning-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       }
     },
     {
@@ -75,7 +75,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-210-application-spa-external-dependency-provisioning-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },
@@ -90,7 +90,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-210-application-spa-external-dependency-provisioning-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       }
     }
   ],

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1133.json

@@ -20,7 +20,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-211-application-spa-core-flow-e2e-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-207-application-spa-token-adherence-probe",
-        "field": "interfaces[1].name"
+        "field": "interfaces"
       }
     },
     {
@@ -58,7 +58,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-207-application-spa-token-adherence-probe",
-        "field": "interfaces[1].name"
+        "field": "interfaces"
       }
     },
     {
@@ -71,7 +71,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-211-application-spa-core-flow-e2e-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       },
       "disposition": "fixed"
     },
@@ -86,7 +86,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-211-application-spa-core-flow-e2e-probe",
-        "field": "interfaces[3].name"
+        "field": "interfaces"
       }
     }
   ],

package/blueprints/application-spa/contributions/user-stories/application-spa-us-1134.json

@@ -20,7 +20,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-207-application-spa-token-adherence-probe",
-        "field": "interfaces[1].name"
+        "field": "interfaces"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-208-application-spa-icon-adherence-probe",
-        "field": "interfaces.runIconAdherenceProbe"
+        "field": "interfaces[runIconAdherenceProbe]"
       }
     }
   ],

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-001.json

@@ -5,7 +5,7 @@
   "description": "The commit-triggered workflows the materialiser produces (per REQ-014 for feature-branch and REQ-015 for trunk-based) run the required check set on every trigger event the elicited branch model defines: for feature-branch, pushes to the default branch and pull requests targeting the default branch; for trunk-based, pushes to the trunk branch (and, in the sub-shape where `trunkPullRequests: sometimes`, pull requests targeting the trunk branch). The workflows' aggregate exit status is the merge criterion: the branch protection or equivalent policy refuses to admit a change whose most recent aggregate run did not exit zero, per the merge-policy AC binding for the branch model in play (AC-6114-3, AC-6115-1, AC-6115-2). No manual override path bypasses the required check set; a hotfix that skips it requires a documented ADR trail.",
   "deliveredBy": {
     "tacId": "TAC-704-delivery-ci-workflows-workflow-materialiser",
-    "field": "interfaces.materialise"
+    "field": "interfaces[materialise]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-002.json

@@ -5,7 +5,7 @@
   "description": "The project realises a single Node entry point script that runs every RCF gate in order. The entry point is a plain Node process invoked by whatever runner the project's CI provider ships (GitHub Actions job step, GitLab job script, CircleCI step, Buildkite command, Jenkins stage). The CI-provider job definition contains one invocation line and the standard Node and package-manager setup steps; every gate-specific piece of logic lives in the Node entry point.",
   "deliveredBy": {
     "tacId": "TAC-701-delivery-ci-workflows-gate-runner",
-    "field": "interfaces.runGates"
+    "field": "interfaces[runGates]"
   },
   "category": "technical",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-003.json

@@ -5,7 +5,7 @@
   "description": "The Node entry point invokes `rcf define validate` as a required gate. The gate runs with the project's tree at the pull request's head commit. A non-zero exit code from `rcf define validate` terminates the suite and marks the aggregate result as failed. The failing invocation's stdout and stderr are captured to the gate report file so the reviewer can read the specific schema or reference issue without re-running the gate.",
   "deliveredBy": {
     "tacId": "TAC-701-delivery-ci-workflows-gate-runner",
-    "field": "interfaces.runGates"
+    "field": "interfaces[runGates]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-004.json

@@ -5,7 +5,7 @@
   "description": "The Node entry point invokes `rcf audit coverage --strict` as a required gate. The gate runs against the tree at the pull request's head commit and reports per-AC coverage: every AC on every US must resolve to a TC whose testPointer points at a real test. A non-zero exit code (mechanism exit 4 on gaps) terminates the suite and marks the aggregate result as failed. The strict-flag invocation is the sole coverage mode the suite runs; shallow-any is not accepted as a substitute.",
   "deliveredBy": {
     "tacId": "TAC-701-delivery-ci-workflows-gate-runner",
-    "field": "interfaces.runGates"
+    "field": "interfaces[runGates]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-005.json

@@ -5,7 +5,7 @@
   "description": "Every gate the suite invokes writes a JSON report file at a stable relative path under a project-configured report directory (default `.rcf/reports/ci/`). The per-gate report file is written whether the gate passed or failed. The report file carries the gate name, the underlying CLI invocation, the exit code, the start and end ISO-8601 timestamps, the duration in milliseconds, the tool version invoked, the captured stdout and stderr strings, and (v2 addition) a `checkKind` field naming the elicited-check kind (`validate`, `coverage-strict`, `linter`, `formatter`, `typecheck`, `unitTest`, `securityScan`, or `custom:<name>`). The report file's schema is stable within a blueprint major version; v1 additive fields (the `checkKind` addition) are preserved from v1.0.0 to v2.0.0.",
   "deliveredBy": {
     "tacId": "TAC-702-delivery-ci-workflows-gate-report",
-    "field": "interfaces.writeGateReport"
+    "field": "interfaces[writeGateReport]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-006.json

@@ -5,7 +5,7 @@
   "description": "The suite writes a single aggregate JSON report at a stable path under the same report directory (default `.rcf/reports/ci/pipeline.json`). The aggregate report carries the suite's own start and end ISO-8601 timestamps, the total duration, an overall pass/fail verdict, the fixed ordered list of gates the suite ran, and for each gate an entry naming the gate, its outcome, its duration, and the relative path to the per-gate report file. The aggregate schema is stable within a blueprint major version.",
   "deliveredBy": {
     "tacId": "TAC-703-delivery-ci-workflows-aggregate-report",
-    "field": "interfaces.writeAggregateReport"
+    "field": "interfaces[writeAggregateReport]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-007.json

@@ -5,7 +5,7 @@
   "description": "When any gate in the suite fails, the Node entry point writes an operator-readable failure summary to its own stderr and to the aggregate report's `failure` field. The summary names the failing gate, the failing invocation's exit code, the first few lines of the captured stderr, and the relative path to the per-gate report file the reviewer can open for the full detail. The suite continues past a failing gate to run the remaining required gates and record their outcomes; the aggregate exit is non-zero if any gate failed.",
   "deliveredBy": {
     "tacId": "TAC-701-delivery-ci-workflows-gate-runner",
-    "field": "interfaces.runGates"
+    "field": "interfaces[runGates]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-008.json

@@ -5,7 +5,7 @@
   "description": "The aggregate report's `gates` array lists every required gate in fixed configured order. If the suite completes without a corresponding per-gate report on disk for any required gate (a runner crash, an unhandled exception in a gate invocation, a report directory that was not writable), the aggregate report records the missing gate as `missing` with an explanatory reason, the aggregate verdict is `failed`, and the suite exits non-zero. A missing report is never treated as an implicit pass.",
   "deliveredBy": {
     "tacId": "TAC-703-delivery-ci-workflows-aggregate-report",
-    "field": "interfaces.writeAggregateReport"
+    "field": "interfaces[writeAggregateReport]"
   },
   "category": "nonFunctional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-009.json

@@ -5,7 +5,7 @@
   "description": "The blueprint's package resources include one illustrative GitHub Actions workflow file per workflow the v2 matrix materialises (`pull-request-checks.yml`, `default-branch-checks.yml`, `release.yml`, and `scheduled-audit.yml` under `assets/ci-provider-examples/github-actions/`). Each file names the required trigger set for its workflow, sets up Node and the package manager, installs dependencies, invokes the corresponding Node entry point (gate-runner for the check-set workflows, release orchestrator for the release workflow, scheduled-audit runner for the cron workflow), and uploads the report directory as a workflow artefact. The blueprint's guide names GitLab CI, CircleCI, Buildkite, and Jenkins as equally supported providers, calls out the four-point mapping (job trigger, Node setup, single-line entry-point invocation, artefact upload) applied to each workflow in the matrix, and states that the blueprint does not ship provider-specific configuration for those runners in v2.0.0; sibling asset packs (v2.1 candidate) can ship them without changing the AC contracts.",
   "deliveredBy": {
     "tacId": "TAC-704-delivery-ci-workflows-workflow-materialiser",
-    "field": "interfaces.materialise"
+    "field": "interfaces[materialise]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-010.json

@@ -5,7 +5,7 @@
   "description": "The Node entry point script is invocable on a developer's machine with the same command the CI provider invokes, against the same tree the developer has checked out, and produces the same per-gate reports and aggregate report at the same stable paths. A developer reproducing a CI failure runs the same one line the CI job ran; no CI-only wrapper or environment shim is on the CI code path but not the developer's.",
   "deliveredBy": {
     "tacId": "TAC-701-delivery-ci-workflows-gate-runner",
-    "field": "interfaces.runGates"
+    "field": "interfaces[runGates]"
   },
   "category": "nonFunctional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-011.json

@@ -5,7 +5,7 @@
   "description": "The project ships a `workflowShape` declaration at the stable path `.rcf/config/delivery-ci-workflows.json` on the project tree. The declaration carries three required top-level fields (`branchModel`, `checkSet`, `providerHint`), one optional top-level field (`releaseMode`; absent has the same effect as `releaseMode: none`, per Q6-B ratification), one optional fifth field (`scheduledAudit`, default false), and one optional sub-field (`trunkPullRequests`) that qualifies `branchModel: trunk`. The four-field composed form (`branchModel`, `checkSet`, `releaseMode`, `providerHint`, with `releaseMode` defaulted to `none` when absent) is the authoritative representation the downstream workflow-materialiser (TAC-704) and every AC in this blueprint bind against; the profile-alias convenience surface (REQ-013) expands to the same composed form before any consumer reads it. The declaration is a data file, not code; the workflow-materialiser reads it once at the start of every materialisation run and refuses to proceed when the file is absent or malformed. The `providerHint` field currently accepts one shipped-asset value, `githubActions`, whose runtime clause is: the workflow-materialiser reads `githubActions` from the declaration and seeds the shipped illustrative GitHub Actions workflow files from `assets/ci-provider-examples/github-actions/` (per REQ-009 and ADR-708). Other named provider hints are elicit-accepted but do not seed provider assets in v2 (per ADR-708-delivery-ci-workflows-provider-hint-shape); AC-6113-1 binds the four-field expansion including `providerHint: githubActions`.",
   "deliveredBy": {
     "tacId": "TAC-704-delivery-ci-workflows-workflow-materialiser",
-    "field": "interfaces.materialise"
+    "field": "interfaces[materialise]"
   },
   "category": "functional",
   "domain": "continuous-integration",

package/blueprints/delivery-ci-workflows/contributions/requirements/delivery-ci-workflows-req-012.json

@@ -5,7 +5,7 @@
   "description": "The workflow-materialiser performs a boot-check on the `workflowShape` declaration before any workflow file is produced. Any of the three required top-level fields (`branchModel`, `checkSet`, `providerHint`) being absent causes the materialiser to exit non-zero with a stable-coded error message that names the missing field. Any field (required or optional) carrying a value not in the recognised enumeration causes the same failure shape, with the message additionally naming the value it received and the allowed set. `releaseMode` being absent is NOT a failure (Q6-B ratification): the materialiser treats it as `releaseMode: none` and ships no release workflow. A `releaseMode: deployHandoff:<slug>` value additionally triggers a manifest boot-check (REQ-022) that names the required deploy blueprint if it is missing from `manifest.blueprints[]`. The boot-check runs before any workflow file is written; a partial workflow set never lands on disk.",
   "deliveredBy": {
     "tacId": "TAC-704-delivery-ci-workflows-workflow-materialiser",
-    "field": "interfaces.materialise"
+    "field": "interfaces[materialise]"
   },
   "category": "functional",
   "domain": "continuous-integration",