rcf-lite 0.29.0 → 0.31.0

package/blueprints/observability-logging/contributions/user-stories/observability-logging-us-15109.json

@@ -20,7 +20,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1601-observability-logging-logger-factory",
-        "field": "interfaces.Logger"
+        "field": "interfaces[Logger]"
       }
     },
     {
@@ -34,7 +34,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1601-observability-logging-logger-factory",
-        "field": "interfaces.Logger"
+        "field": "interfaces[Logger]"
       }
     },
     {
@@ -48,7 +48,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-1602-observability-logging-redaction-boundary",
-        "field": "interfaces.createRedactionBoundary"
+        "field": "interfaces[createRedactionBoundary]"
       }
     },
     {

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-001.json

@@ -5,7 +5,7 @@
   "description": "The application exposes health probes shaped for the external system that will probe it. The operator declares a target integration by name (`kubernetes`, `loadBalancer`, `uptimeMonitor`, `systemd`, `dockerHealthcheck`, `reverseProxy`, or a project-authored `custom` profile). The profile fixes the probe transport (HTTP GET, TCP socket accept, exec command, or a supervisor notify call), the probe path or command surface, the response contract, and the port topology defaults. Precedence at boot: an explicit `probeInterface.profile` declaration wins; when the declaration is absent, the shipped Kubernetes default (ADR-1503) resolves and the process boots on that profile. A profile name that is neither in the enumerated set nor a resolvable `custom` profile is refused at boot with a stable-coded `PROBE_PROFILE_UNKNOWN` error naming the offending value; a `probeInterface` declaration that is syntactically malformed (a non-object, or an object missing required per-profile keys) is refused with `PROBE_PROFILE_MALFORMED` naming the offending shape. Nothing in the process wires a probe on its own initiative; the profile drives every binding.",
   "deliveredBy": {
     "tacId": "TAC-1501-observability-probe-endpoints-profile-resolver",
-    "field": "interfaces.resolveProbeProfile"
+    "field": "interfaces[resolveProbeProfile]"
   },
   "category": "functional",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-002.json

@@ -5,7 +5,7 @@
   "description": "When the operator selects the `kubernetes` target integration (the shipped default), the profile wires two HTTP GET probe handlers: a liveness handler at path `/live` and a readiness handler at path `/ready`. Both handlers return HTTP 200 for pass and HTTP 503 for fail. The liveness handler answers strictly on in-process event-loop responsiveness and never depends on any external condition. The readiness handler answers on the operator-declared readiness predicate for the profile (default: strict-any-fail over the declared dependency set). Both paths and the port topology are overridable at boot; the defaults hold when the operator does not override.",
   "deliveredBy": {
     "tacId": "TAC-1501-observability-probe-endpoints-profile-resolver",
-    "field": "interfaces.profileLoader"
+    "field": "interfaces[profileLoader]"
   },
   "category": "functional",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-003.json

@@ -5,7 +5,7 @@
   "description": "Every profile the blueprint ships names four things: the probe path or command surface (an HTTP path for HTTP profiles, a TCP port for socket profiles, a shell command for exec profiles, a supervisor call for notify profiles); the response contract (HTTP status code range with an optional minimal JSON body for HTTP profiles, connect-and-close for TCP, exit-code zero for exec, one notify call for supervisor); the transport (HTTP GET, TCP SYN, spawned process, or unix socket for supervisor calls); and the semantic distinction between liveness and readiness (two endpoints for Kubernetes; one health signal for load balancers and uptime monitors that do not distinguish; a boot-time readiness notification followed by a periodic watchdog for systemd; a single command answer for Docker HEALTHCHECK). A profile that does not resolve all four is refused at boot with a stable-coded error naming the missing field.",
   "deliveredBy": {
     "tacId": "TAC-1502-observability-probe-endpoints-handler-set",
-    "field": "interfaces.buildHandlerSet"
+    "field": "interfaces[buildHandlerSet]"
   },
   "category": "functional",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-004.json

@@ -5,7 +5,7 @@
   "description": "Every HTTP-transport profile offers a `probeListener.separatePort` option: when unset, probe handlers bind to the same listener that serves user request traffic (the fused topology); when set to a port number, probe handlers bind to a dedicated HTTP listener on that port and the user-traffic listener does not serve probe paths. The separate-port listener binds the profile's probe path set only; no other route is served on that listener. The option is off by default and opt-in per environment.",
   "deliveredBy": {
     "tacId": "TAC-1503-observability-probe-endpoints-listener-topology",
-    "field": "interfaces.bindListenerTopology"
+    "field": "interfaces[bindListenerTopology]"
   },
   "category": "functional",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-005.json

@@ -5,7 +5,7 @@
   "description": "Every profile's response is exactly what the supervising system reads and nothing more. HTTP-transport profiles that consume status code only (load balancer, uptime monitor, reverse proxy) return an empty response body with the resolved status code. HTTP-transport profiles that consume a body (Kubernetes HTTPGet, where the kubelet ignores body but operators inspect it during triage) return a minimal JSON body of the shape `{ \"status\": \"pass\" }` or `{ \"status\": \"fail\" }` with no additional fields. TCP-transport profiles complete the SYN-ACK handshake on pass and refuse the connection on fail. Exec-transport profiles exit with code 0 on pass and a non-zero code on fail. Supervisor-notify profiles emit exactly the notify calls the supervisor expects (for systemd: `READY=1` at startup, `WATCHDOG=1` on the configured watchdog cadence).",
   "deliveredBy": {
     "tacId": "TAC-1502-observability-probe-endpoints-handler-set",
-    "field": "interfaces.buildHandlerSet"
+    "field": "interfaces[buildHandlerSet]"
   },
   "category": "nonFunctional",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-006.json

@@ -5,7 +5,7 @@
   "description": "The probe response, on every profile that emits a response payload, contains no dependency name, no environment name (dev, staging, live), no hostname, no replica id, no database identifier, no queue name, no internal URL, no build hash, no commit sha, no numeric metric value, no dependency count, no latency measurement, no error rate. The response is bounded to the fields REQ-005 enumerates for the profile and to the resolved status code. A profile that adds any field beyond that set is refused by the profile validator at boot with a stable-coded error naming the offending field.",
   "deliveredBy": {
     "adrId": "ADR-1505-observability-probe-endpoints-external-response-secrecy",
-    "field": "decision.externalResponseSecrecy"
+    "field": "decision"
   },
   "category": "security",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-007.json

@@ -5,7 +5,7 @@
   "description": "For every HTTP-transport profile, the probe path set the profile resolved (e.g., `/live` and `/ready` for Kubernetes default) is exempt from the project's auth middleware on the listener the profile bound those handlers to. The exemption is scoped by exact path match and by listener, never by prefix. When the fused topology is in effect, the exemption applies on the user-traffic listener for those exact paths only; when the separate-port topology is in effect, the exemption applies on the separate probe listener for those exact paths only and no auth middleware runs on the separate listener because no other route is served there. A path near a probe path but not on the resolved set (e.g., `/ready/next` when `/ready` is the probe) receives the project's normal auth treatment.",
   "deliveredBy": {
     "tacId": "TAC-1503-observability-probe-endpoints-listener-topology",
-    "field": "interfaces.exemptListInstaller"
+    "field": "interfaces[exemptListInstaller]"
   },
   "category": "security",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/requirements/observability-probe-endpoints-req-008.json

@@ -5,7 +5,7 @@
   "description": "Switching the target integration from one profile to another (for example, moving a service from a Kubernetes deployment to a Docker Compose deployment behind a load balancer) is expressed as a change to the operator-declared profile name and its per-profile options. The source tree that binds the profile handlers and the profile-resolver call site do not change; the profile shift takes effect on the next process start. A source-tree change is required only when the operator authors a new custom profile or extends the shipped profile set; existing profiles are switched by configuration alone.",
   "deliveredBy": {
     "tacId": "TAC-1501-observability-probe-endpoints-profile-resolver",
-    "field": "interfaces.contractValidator"
+    "field": "interfaces[contractValidator]"
   },
   "category": "nonFunctional",
   "domain": "observability",

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1501-observability-probe-endpoints-profile-resolver.json

@@ -18,18 +18,18 @@
   "interfaces": [
     {
       "name": "resolveProbeProfile",
-      "kind": "factory",
-      "description": "resolveProbeProfile({ config, profileLoader, contractValidator }) -> { profile, getExemptPathSet }. Called once at boot; the returned profile drives the handler-set binder (TAC-1502), the listener-topology binder (TAC-1503), and the non-HTTP adapter selector (TAC-1504)."
+      "kind": "other",
+      "description": "resolveProbeProfile({ config, profileLoader, contractValidator }) -> { profile, getExemptPathSet }. Called once at boot; the returned profile drives the handler-set binder (TAC-1502), the listener-topology binder (TAC-1503), and the non-HTTP adapter selector (TAC-1504). (legacy kind: factory)"
     },
     {
       "name": "profileLoader",
-      "kind": "read-api",
-      "description": "Function that resolves a profile name to the profile module. Shipped profiles resolve to the blueprint's own modules; a `custom:<name>` value resolves to the project's `profiles/custom/<name>` slot. Injected so the project supplies its module discovery."
+      "kind": "other",
+      "description": "Function that resolves a profile name to the profile module. Shipped profiles resolve to the blueprint's own modules; a `custom:<name>` value resolves to the project's `profiles/custom/<name>` slot. Injected so the project supplies its module discovery. (legacy kind: read-api)"
     },
     {
       "name": "contractValidator",
-      "kind": "read-api",
-      "description": "Schema-check function against the profile contract. Returns a validated frozen profile object on success and a typed error naming the missing or extraneous field on refusal."
+      "kind": "other",
+      "description": "Schema-check function against the profile contract. Returns a validated frozen profile object on success and a typed error naming the missing or extraneous field on refusal. (legacy kind: read-api)"
     }
   ],
   "dependencies": [],

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1502-observability-probe-endpoints-handler-set.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "buildHandlerSet",
-      "kind": "factory",
-      "description": "buildHandlerSet({ profile, readinessPredicate, now }) -> { handlers }. `profile` is the frozen object from TAC-1501. `readinessPredicate` is a project-supplied `() -> 'pass' | 'fail'` function (default: strict-any-fail over declared dependency cached state). `now` is a `() -> Date` for test isolation. Returns a map of resolved path to stateless async handler. Called once at boot."
+      "kind": "other",
+      "description": "buildHandlerSet({ profile, readinessPredicate, now }) -> { handlers }. `profile` is the frozen object from TAC-1501. `readinessPredicate` is a project-supplied `() -> 'pass' | 'fail'` function (default: strict-any-fail over declared dependency cached state). `now` is a `() -> Date` for test isolation. Returns a map of resolved path to stateless async handler. Called once at boot. (legacy kind: factory)"
     },
     {
       "name": "readinessPredicate",
-      "kind": "read-api",
-      "description": "Project-supplied synchronous function returning the current readiness state as `'pass'` or `'fail'`. The handler set never reads dependency state directly; the predicate boundary is where per-project logic lives."
+      "kind": "other",
+      "description": "Project-supplied synchronous function returning the current readiness state as `'pass'` or `'fail'`. The handler set never reads dependency state directly; the predicate boundary is where per-project logic lives. (legacy kind: read-api)"
     }
   ],
   "dependencies": [

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1503-observability-probe-endpoints-listener-topology.json

@@ -17,18 +17,18 @@
   "interfaces": [
     {
       "name": "bindListenerTopology",
-      "kind": "factory",
-      "description": "bindListenerTopology({ profile, handlerSet, userTrafficListener, listenerFactory, exemptListInstaller }) -> { bound, exemptSet }. Called once at boot after TAC-1502 has built the handler set. The `userTrafficListener` is the project's HTTP router or server object; `listenerFactory(port)` is a project-supplied constructor for a fresh listener on the given port; `exemptListInstaller` is the project's auth-middleware exempt-list installer."
+      "kind": "other",
+      "description": "bindListenerTopology({ profile, handlerSet, userTrafficListener, listenerFactory, exemptListInstaller }) -> { bound, exemptSet }. Called once at boot after TAC-1502 has built the handler set. The `userTrafficListener` is the project's HTTP router or server object; `listenerFactory(port)` is a project-supplied constructor for a fresh listener on the given port; `exemptListInstaller` is the project's auth-middleware exempt-list installer. (legacy kind: factory)"
     },
     {
       "name": "listenerFactory",
-      "kind": "read-api",
-      "description": "Project-supplied `(port: number) -> Listener` factory. Called only when the separate-port topology is in effect. Returns a new HTTP listener bound to the given port with no middleware installed."
+      "kind": "other",
+      "description": "Project-supplied `(port: number) -> Listener` factory. Called only when the separate-port topology is in effect. Returns a new HTTP listener bound to the given port with no middleware installed. (legacy kind: read-api)"
     },
     {
       "name": "exemptListInstaller",
-      "kind": "write-api",
-      "description": "Project-supplied installer that receives a `{ listener, paths: string[], matcher: 'exact' }` record and registers the exempt set with the auth middleware on the named listener. Refuses on the topology component's side if the paths carry a wildcard or prefix marker."
+      "kind": "other",
+      "description": "Project-supplied installer that receives a `{ listener, paths: string[], matcher: 'exact' }` record and registers the exempt set with the auth middleware on the named listener. Refuses on the topology component's side if the paths carry a wildcard or prefix marker. (legacy kind: write-api)"
     }
   ],
   "dependencies": [

package/blueprints/observability-probe-endpoints/contributions/tacs/tac-1504-observability-probe-endpoints-non-http-adapters.json

@@ -16,13 +16,13 @@
   "interfaces": [
     {
       "name": "selectAdapter",
-      "kind": "factory",
-      "description": "selectAdapter({ profile, readinessPredicate, notifyImplementation, tcpFactory }) -> { adapter }. Returns the correct adapter object for the profile's transport. `notifyImplementation` is a project-supplied `(msg: string) -> void` wrapping the supervisor notify call for the runtime (systemd's `NOTIFY_SOCKET` on Linux, a stub in tests). `tcpFactory` is a project-supplied `(port) -> TcpListener`. Called once at boot when the profile transport is non-HTTP."
+      "kind": "other",
+      "description": "selectAdapter({ profile, readinessPredicate, notifyImplementation, tcpFactory }) -> { adapter }. Returns the correct adapter object for the profile's transport. `notifyImplementation` is a project-supplied `(msg: string) -> void` wrapping the supervisor notify call for the runtime (systemd's `NOTIFY_SOCKET` on Linux, a stub in tests). `tcpFactory` is a project-supplied `(port) -> TcpListener`. Called once at boot when the profile transport is non-HTTP. (legacy kind: factory)"
     },
     {
       "name": "notifyImplementation",
-      "kind": "write-api",
-      "description": "Project-supplied notify writer accepting a supervisor-format message string. For systemd, this writes to the `NOTIFY_SOCKET` datagram address. For tests, a stub accumulator. Injected so the blueprint holds no operating-system-specific dependency."
+      "kind": "other",
+      "description": "Project-supplied notify writer accepting a supervisor-format message string. For systemd, this writes to the `NOTIFY_SOCKET` datagram address. For tests, a stub accumulator. Injected so the blueprint holds no operating-system-specific dependency. (legacy kind: write-api)"
     }
   ],
   "dependencies": [

package/blueprints/observability-probe-endpoints/contributions/user-stories/observability-probe-endpoints-us-14101.json

@@ -30,7 +30,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "adrId": "ADR-1503-observability-probe-endpoints-kubernetes-default",
-        "field": "decision.kubernetesDefault"
+        "field": "decision"
       }
     },
     {
@@ -54,7 +54,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-1501-observability-probe-endpoints-profile-resolver",
-        "field": "interfaces.contractValidator"
+        "field": "interfaces[contractValidator]"
       }
     }
   ],

package/blueprints/observability-probe-endpoints/contributions/user-stories/observability-probe-endpoints-us-14102.json

@@ -60,7 +60,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1502-observability-probe-endpoints-handler-set",
-        "field": "interfaces.readinessPredicate"
+        "field": "interfaces[readinessPredicate]"
       }
     }
   ],

package/blueprints/observability-probe-endpoints/contributions/user-stories/observability-probe-endpoints-us-14105.json

@@ -50,7 +50,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1504-observability-probe-endpoints-non-http-adapters",
-        "field": "interfaces.notifyImplementation"
+        "field": "interfaces[notifyImplementation]"
       }
     },
     {
@@ -64,7 +64,7 @@
       "disposition": "template",
       "ownerRef": {
         "tacId": "TAC-1504-observability-probe-endpoints-non-http-adapters",
-        "field": "interfaces.selectAdapter"
+        "field": "interfaces[selectAdapter]"
       }
     },
     {
@@ -78,7 +78,7 @@
       "disposition": "fixed",
       "ownerRef": {
         "tacId": "TAC-1504-observability-probe-endpoints-non-http-adapters",
-        "field": "interfaces.selectAdapter"
+        "field": "interfaces[selectAdapter]"
       }
     }
   ],

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-001.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1401-persistence-data-d1-facade",
-    "field": "responsibilities.facade"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-002.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1402-persistence-data-d1-migration-catalog",
-    "field": "responsibilities.migrations"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-003.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1403-persistence-data-d1-deploy-gate",
-    "field": "responsibilities.gate"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-004.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-10T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1401-persistence-data-d1-facade",
-    "field": "responsibilities.prepare"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-005.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1401-persistence-data-d1-facade",
-    "field": "responsibilities.batchAtomicity"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-006.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-1404-persistence-data-d1-recovery-runner",
-    "field": "responsibilities.timeTravel"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-d1/contributions/requirements/persistence-data-d1-req-007.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "adrId": "ADR-1403-persistence-data-d1-event-secrecy",
-    "field": "decision.metadataOnly"
+    "field": "decision"
   }
 }

package/blueprints/persistence-data-d1/contributions/tacs/tac-1401-persistence-data-d1-facade.json

@@ -17,18 +17,18 @@
   "interfaces": [
     {
       "name": "createStore",
-      "kind": "factory",
-      "description": "createStore({ env, bindingName, onEvent }) -> Store; the sole entry point every consumer calls. Reads env[bindingName] as the D1 binding; hands back a Store whose methods are the named CRUD verbs."
+      "kind": "other",
+      "description": "createStore({ env, bindingName, onEvent }) -> Store; the sole entry point every consumer calls. Reads env[bindingName] as the D1 binding; hands back a Store whose methods are the named CRUD verbs. (legacy kind: factory)"
     },
     {
       "name": "onEvent",
-      "kind": "callback",
-      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady and queryFailed events. Never invoked with domain-row values."
+      "kind": "other",
+      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady and queryFailed events. Never invoked with domain-row values. (legacy kind: callback)"
     },
     {
       "name": "store.verbs",
-      "kind": "read-write-api",
-      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code."
+      "kind": "other",
+      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-d1/contributions/tacs/tac-1402-persistence-data-d1-migration-catalog.json

@@ -15,13 +15,13 @@
   "interfaces": [
     {
       "name": "migrations/",
-      "kind": "directory",
-      "description": "The source-tree directory named on `d1_databases[].migrations_dir`; holds one numbered `.sql` file per shipped migration."
+      "kind": "other",
+      "description": "The source-tree directory named on `d1_databases[].migrations_dir`; holds one numbered `.sql` file per shipped migration. (legacy kind: directory)"
     },
     {
       "name": "d1_migrations",
-      "kind": "table",
-      "description": "The D1-side bookkeeping table named on `d1_databases[].migrations_table`; wrangler writes one row per applied migration. Read via `wrangler d1 execute <database> --command \"SELECT * FROM <table>\"` for verification."
+      "kind": "other",
+      "description": "The D1-side bookkeeping table named on `d1_databases[].migrations_table`; wrangler writes one row per applied migration. Read via `wrangler d1 execute <database> --command \"SELECT * FROM <table>\"` for verification. (legacy kind: table)"
     }
   ],
   "dependencies": [],

package/blueprints/persistence-data-d1/contributions/tacs/tac-1403-persistence-data-d1-deploy-gate.json

@@ -15,13 +15,13 @@
   "interfaces": [
     {
       "name": "ciStep.migrationsApply",
-      "kind": "ci-step",
-      "description": "The CI job step that runs `wrangler d1 migrations apply <database> --env <target>`; declared as a prerequisite for the deploy step."
+      "kind": "other",
+      "description": "The CI job step that runs `wrangler d1 migrations apply <database> --env <target>`; declared as a prerequisite for the deploy step. (legacy kind: ci-step)"
     },
     {
       "name": "ciStep.deploy",
-      "kind": "ci-step",
-      "description": "The CI job step that runs `wrangler deploy --env <target>`; declares the migrations-apply step as its prerequisite (needs, depends-on, or sequential ordering per the CI tool)."
+      "kind": "other",
+      "description": "The CI job step that runs `wrangler deploy --env <target>`; declares the migrations-apply step as its prerequisite (needs, depends-on, or sequential ordering per the CI tool). (legacy kind: ci-step)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-d1/contributions/tacs/tac-1404-persistence-data-d1-recovery-runner.json

@@ -16,13 +16,13 @@
   "interfaces": [
     {
       "name": "recovery.timeTravelRestore",
-      "kind": "ops-command",
-      "description": "recovery.timeTravelRestore({ database, env, timestamp }) invokes `wrangler d1 time-travel restore` and emits the timeTravelRestored event."
+      "kind": "other",
+      "description": "recovery.timeTravelRestore({ database, env, timestamp }) invokes `wrangler d1 time-travel restore` and emits the timeTravelRestored event. (legacy kind: ops-command)"
     },
     {
       "name": "recovery.export",
-      "kind": "ops-command",
-      "description": "recovery.export({ database, env, outputPath }) invokes `wrangler d1 export` and emits the backupExported event."
+      "kind": "other",
+      "description": "recovery.export({ database, env, outputPath }) invokes `wrangler d1 export` and emits the backupExported event. (legacy kind: ops-command)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-d1/contributions/user-stories/persistence-data-d1-us-13101.json

@@ -49,7 +49,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "responsibilities.readBinding"
+        "field": "responsibilities"
       },
       "disposition": "template"
     },
@@ -63,7 +63,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "responsibilities.queryFailedRateLimit"
+        "field": "responsibilities"
       },
       "disposition": "template"
     }

package/blueprints/persistence-data-d1/contributions/user-stories/persistence-data-d1-us-13102.json

@@ -49,7 +49,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1403-persistence-data-d1-deploy-gate",
-        "field": "responsibilities.gate"
+        "field": "responsibilities"
       },
       "disposition": "template",
       "vendorCitation": {

package/blueprints/persistence-data-d1/contributions/user-stories/persistence-data-d1-us-13107.json

@@ -29,7 +29,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "interfaces.onEvent"
+        "field": "interfaces[onEvent]"
       },
       "disposition": "fixed"
     },
@@ -43,7 +43,7 @@
       "scope": "runtime",
       "ownerRef": {
         "tacId": "TAC-1401-persistence-data-d1-facade",
-        "field": "interfaces.onEvent"
+        "field": "interfaces[onEvent]"
       },
       "disposition": "fixed"
     }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-001.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2801-persistence-data-postgres-facade",
-    "field": "responsibilities.facadeReady"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-002.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2802-persistence-data-postgres-migration-runner",
-    "field": "responsibilities.migrations"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-003.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2801-persistence-data-postgres-facade",
-    "field": "responsibilities.parameter"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-004.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-10T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2803-persistence-data-postgres-transaction-helper",
-    "field": "responsibilities.transactionAtomicity"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-005.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2804-persistence-data-postgres-recovery-runner",
-    "field": "responsibilities.pg_dump"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-006.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "tacId": "TAC-2801-persistence-data-postgres-facade",
-    "field": "responsibilities.pool"
+    "field": "responsibilities"
   }
 }

package/blueprints/persistence-data-postgres/contributions/requirements/persistence-data-postgres-req-007.json

@@ -17,6 +17,6 @@
   "updatedAt": "2026-09-09T00:00:00Z",
   "deliveredBy": {
     "adrId": "ADR-2801-persistence-data-postgres-driver",
-    "field": "decision.advisoryLock"
+    "field": "decision"
   }
 }

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2801-persistence-data-postgres-facade.json

@@ -18,18 +18,18 @@
   "interfaces": [
     {
       "name": "createStore",
-      "kind": "factory",
-      "description": "createStore({ connectionUrl, onEvent, poolConfig, advisoryLockHelper }) -> Store. The sole entry point every consumer calls. Opens a pg.Pool against connectionUrl; wires the sink; hands back a Store whose methods are the named CRUD verbs plus withTransaction and (optionally) withAdvisoryLock."
+      "kind": "other",
+      "description": "createStore({ connectionUrl, onEvent, poolConfig, advisoryLockHelper }) -> Store. The sole entry point every consumer calls. Opens a pg.Pool against connectionUrl; wires the sink; hands back a Store whose methods are the named CRUD verbs plus withTransaction and (optionally) withAdvisoryLock. (legacy kind: factory)"
     },
     {
       "name": "onEvent",
-      "kind": "callback",
-      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady, migrationsApplied, transactionRolledBack, backupExported, recoveryDrillPassed, queryFailed events. Never invoked with domain-row values."
+      "kind": "other",
+      "description": "Structured-event sink invoked with { event, ts, ... } for facadeReady, migrationsApplied, transactionRolledBack, backupExported, recoveryDrillPassed, queryFailed events. Never invoked with domain-row values. (legacy kind: callback)"
     },
     {
       "name": "store.verbs",
-      "kind": "read-write-api",
-      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code."
+      "kind": "other",
+      "description": "The named domain CRUD verbs the facade exposes. Each verb has typed parameters; no verb accepts a raw SQL string or a general query object from consumer code. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2802-persistence-data-postgres-migration-runner.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "run",
-      "kind": "cli",
-      "description": "node migrate.mjs applies every un-applied file in order; exits 0 on success, non-zero on any failure with the failing filename in stderr."
+      "kind": "other",
+      "description": "node migrate.mjs applies every un-applied file in order; exits 0 on success, non-zero on any failure with the failing filename in stderr. (legacy kind: cli)"
     },
     {
       "name": "applyAll",
-      "kind": "read-write-api",
-      "description": "applyAll({ connectionUrl, migrationsDir, bookkeepingTable, onEvent }) -> Promise<{ applied: string[] }>. Library entry point the facade may call in atBoot mode."
+      "kind": "other",
+      "description": "applyAll({ connectionUrl, migrationsDir, bookkeepingTable, onEvent }) -> Promise<{ applied: string[] }>. Library entry point the facade may call in atBoot mode. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2803-persistence-data-postgres-transaction-helper.json

@@ -17,8 +17,8 @@
   "interfaces": [
     {
       "name": "withTransaction",
-      "kind": "read-write-api",
-      "description": "await store.withTransaction(async (tx) => { await tx.query(...); await tx.query(...); }). The helper acquires a pg.PoolClient from the pool and issues the transaction-control primitives around the callback: `client.query('BEGIN')` before the first wrapped-client query, `client.query('COMMIT')` on the callback's successful return, and `client.query('ROLLBACK')` on any thrown error before releasing the client. On rollback the helper fires transactionRolledBack on the injected event sink with { statementIndex, code } and re-throws the underlying pg error."
+      "kind": "other",
+      "description": "await store.withTransaction(async (tx) => { await tx.query(...); await tx.query(...); }). The helper acquires a pg.PoolClient from the pool and issues the transaction-control primitives around the callback: `client.query('BEGIN')` before the first wrapped-client query, `client.query('COMMIT')` on the callback's successful return, and `client.query('ROLLBACK')` on any thrown error before releasing the client. On rollback the helper fires transactionRolledBack on the injected event sink with { statementIndex, code } and re-throws the underlying pg error. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [

package/blueprints/persistence-data-postgres/contributions/tacs/tac-2804-persistence-data-postgres-recovery-runner.json

@@ -17,13 +17,13 @@
   "interfaces": [
     {
       "name": "exportDatabase",
-      "kind": "read-write-api",
-      "description": "await exportDatabase({ connectionUrl, destination, onEvent, pgDumpArgs }) -> { artefactPath, completedAt }. Runs pg_dump, writes the artefact, fires backupExported."
+      "kind": "other",
+      "description": "await exportDatabase({ connectionUrl, destination, onEvent, pgDumpArgs }) -> { artefactPath, completedAt }. Runs pg_dump, writes the artefact, fires backupExported. (legacy kind: read-write-api)"
     },
     {
       "name": "recoveryDrill",
-      "kind": "read-write-api",
-      "description": "await recoveryDrill({ sourceUrl, destination, onEvent }) -> { count, checksum }. Runs exportDatabase, primes a fresh Postgres from the artefact, compares row-count and checksum on the fixture table, fires recoveryDrillPassed."
+      "kind": "other",
+      "description": "await recoveryDrill({ sourceUrl, destination, onEvent }) -> { count, checksum }. Runs exportDatabase, primes a fresh Postgres from the artefact, compares row-count and checksum on the fixture table, fires recoveryDrillPassed. (legacy kind: read-write-api)"
     }
   ],
   "dependencies": [