Classified protocol registry / 分级协议注册表

This document is generated from protocols/registry.json. It describes compatibility governance only: it never grants runtime authority, capabilities, protocol deletion, data migration, or historical checksum changes.

Registry summary

Family	Class	Owner	Active IDs	Persisted/exported
activity-event-projection	`projection`	Run activity and HTTP maintainers	5	true
agent-browser-supervisor-ledger	`internal-durable`	Agent browser, Supervisor tool, and persistence maintainers	11	true
agent-scheduling-delivery-ledgers	`internal-durable`	Agent graph, scheduler, and batch-delivery maintainers	75	true
analyzer-interchange	`external-durable`	Analyzer contract maintainers	40	true
authority-approval-ledgers	`internal-durable`	Execution authority and approval maintainers	49	true
browser-cdp-process-session	`ephemeral`	Browser runtime maintainers	23	false
browser-ui-evidence-ledgers	`internal-durable`	Browser and UI evidence maintainers	44	true
capability-readiness-projection	`projection`	Application readiness maintainers	4	true
cli-headless-contract	`external-durable`	CLI and headless surface maintainers	2	true
control-plane-ledgers	`internal-durable`	Core Go control-plane maintainers	114	true
credential-provider-ledgers	`internal-durable`	Credential, provider, model-route, and pricing maintainers	23	true
desktop-risk-restart-session	`ephemeral`	Desktop shell lifecycle maintainers	2	false
desktop-web-presentation-state	`projection`	Desktop and React workbench maintainers	16	true
docker-attach-process-session	`ephemeral`	Docker runtime transport maintainers	1	false
exported-evidence-and-handoff	`external-durable`	Evidence, verification, report, and handoff maintainers	35	true
extension-package-contracts	`external-durable`	Skill, Plugin, Hook, and extension maintainers	48	true
http-openapi-contract	`external-durable`	HTTP/OpenAPI and generated-client maintainers	121	true
in-memory-token-session	`ephemeral`	Credential and bootstrap maintainers	1	false
lsp-process-session	`ephemeral`	Code intelligence maintainers	1	false
mcp-interchange	`external-durable`	MCP client/server maintainers	6	true
operation-receipt-projection	`projection`	Operation receipt maintainers	2	true
process-runtime-lifecycle	`internal-durable`	Command, model, terminal, and runner lifecycle maintainers	55	true
project-configuration-contract	`external-durable`	Project configuration and instruction maintainers	6	true
provider-stream-presentation	`ephemeral`	Model streaming and renderer maintainers	4	false
registry-governance-contract	`external-durable`	Protocol and Surface governance maintainers	2	true
release-and-packaging-contracts	`external-durable`	Desktop release and packaging maintainers	4	true
report-summary-projections	`projection`	Finding, repository, and summary maintainers	5	true
sandbox-docker-lifecycle	`internal-durable`	Sandbox and Docker lifecycle maintainers	203	true
sandbox-environment-settings	`internal-durable`	Desktop sandbox environment maintainers	1	true
standard-code-delivery-ledger	`external-durable`	Standard Code delivery and public projection maintainers	8	true
supervisor-input-delivery-projection	`projection`	Supervisor input and context maintainers	1	true
supervisor-tool-rejection-diagnostics	`internal-durable`	Supervisor terminal accounting and private diagnostic maintainers	1	true
thread-run-session-ledgers	`internal-durable`	Thread, Run, Session, context, and message maintainers	52	true
thread-transcript-projection	`projection`	Thread transcript maintainers	1	true
tool-mutation-ledgers	`internal-durable`	Tool gateway, file edit, Git, and mutation maintainers	41	true
ui-reference-testing-contracts	`projection`	React workbench and visual-regression maintainers	4	true
workspace-repository-ledgers	`internal-durable`	Workspace and repository maintainers	11	true

Families

activity-event-projection

Class: projection
Owner: Run activity and HTTP maintainers
Source of truth: internal/runactivity, internal/store
Persistence/export boundary: Materialized or queried activity DTOs may persist, but durable Run/event rows remain authoritative.
Compatibility rule: Rebuild from durable Run and event rows while preserving stable order, high-water cursors, and redaction.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Durable Run, lifecycle, and redacted event rows in internal/store.
Writers:
- activity-event-projection-writer (v1, write-current) at internal/store
Readers:
- activity-event-projection-reader (v1, active) at internal/runactivity

5 active identifiers

operator_action_center.v1
operator_action_item.v1
run-event-poll.v1
run-events.v1
run_activity.v1

agent-browser-supervisor-ledger

Class: internal-durable
Owner: Agent browser, Supervisor tool, and persistence maintainers
Source of truth: internal/application, internal/store, internal/toolgateway
Persistence/export boundary: SQLite preserves exact Supervisor calls, authority, payloads, approvals, dispatch markers, results, and screenshot receipts; process-local browser sessions and manager boot identities are intentionally invalid after restart.
Compatibility rule: Keep durable call and receipt readers for every stored version, reject unknown action payloads, and require fresh runtime authority before any post-restart dispatch.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- agent-browser-supervisor-ledger-writer (v1, v2, write-new) at internal/application
Readers:
- agent-browser-supervisor-ledger-reader (v1, v2, active) at internal/store
- agent-browser-supervisor-authority-reader (v1, v2, active) at internal/toolgateway

11 active identifiers

agent-browser-actions.v1
browser_click.v2
browser_key.v2
browser_navigate.v2
browser_screenshot.v2
browser_screenshot_result.v2
browser_scroll.v2
browser_sensitive_intent.v1
browser_snapshot.v2
browser_status.v2
browser_type.v2

agent-scheduling-delivery-ledgers

Class: internal-durable
Owner: Agent graph, scheduler, and batch-delivery maintainers
Source of truth: internal/application, internal/domain, internal/store
Persistence/export boundary: SQLite retains agent ownership, attempts, dependencies, wakes, mailboxes, and delivery decisions.
Compatibility rule: Add versions without reinterpreting generations or exactly-once keys; retain old readers until migration or indefinite support is proven.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- agent-scheduling-delivery-ledgers-writer (v1, v2, write-new) at internal/application
Readers:
- agent-scheduling-delivery-ledgers-reader (v1, v2, active) at internal/store

75 active identifiers

agent-code-edit.v1
agent_admission_operation.v1
agent_admission_request.v1
agent_attempt.v1
agent_attempt_continue.v1
agent_attempt_crash.v1
agent_attempt_failure.v1
agent_attempt_operation.v1
agent_attempt_start.v1
agent_attempt_usage.v1
agent_completion.v1
agent_completion_operation.v1
agent_completion_request.v1
agent_dependency.v1
agent_dependency_edge_operation.v1
agent_dependency_edge_request.v1
agent_message_operation.v1
agent_message_request.v1
batch-deliveries-list.v1
batch-delivery-edit.v1
batch-delivery-mailbox-request.v1
batch-delivery-mailbox.v1
batch-delivery-merge-queue.v1
batch-delivery-merge-request.v1
batch-delivery-receipt-request.v1
batch-delivery-receipt.v1
batch-delivery-request.v1
batch-delivery-review-request.v1
batch-delivery-review.v1
batch-delivery-tools.v1
batch-delivery-workspace-tools.v1
batch-edit-proposal.v1
batch-validation-output.v2
batch-validation-process.v1
batch_delivery_cancel.v1
batch_delivery_merge.v1
batch_delivery_prepare.v1
batch_delivery_reconcile.v1
batch_delivery_renew_owner.v1
batch_delivery_review_control.v1
child_task_admit.v1
child_task_dedup.v1
child_task_proposal.v1
child_task_proposals.v1
child_task_request.v1
child_task_review.v1
child_task_review_request.v1
delivery_checkpoint.v1
delivery_checkpoint_request.v1
delivery_source.v1
plan_delivery_proposal_request.v1
plan_delivery_selection_request.v1
readonly_fanout.v1
readonly_fanout_cancel.v1
readonly_fanout_capabilities.v1
readonly_fanout_execution_request.v1
readonly_fanout_executions.v1
readonly_fanout_finding.v1
readonly_fanout_model_input.v1
readonly_fanout_plan_request.v1
readonly_fanout_report.v1
readonly_fanout_shard.v1
readonly_fanout_snapshot.v1
run_wake_cancel_request.v1
run_wake_consumption.v1
run_wake_consumption_handoff.v1
run_wake_operation.v1
run_wake_schedule_request.v1
run_wake_worker.v1
specialist_delegation.v1
specialist_delegation_application_policy.v1
specialist_delegation_application_request.v1
specialist_delegation_request.v1
specialist_delegation_review.v1
specialist_operator_step.v1

analyzer-interchange

Class: external-durable
Owner: Analyzer contract maintainers
Source of truth: analyzers/fixture/src, analyzers/testdata, internal/analyzer
Persistence/export boundary: Analyzer descriptors, requests, results, release metadata, and evidence cross the Go/Rust or third-party boundary.
Compatibility rule: Write the newest reviewed format, dual-read supported old formats, keep shared vectors, and reject unknown versions.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- analyzer-interchange-writer (v1, write-current) at internal/analyzer
Readers:
- analyzer-interchange-reader (v1, active) at internal/analyzer

40 active identifiers

analyzer_artifact_candidate.v1
analyzer_descriptor.v1
analyzer_durable_start_request.v1
analyzer_embedded_wasi_execution.v1
analyzer_embedded_wasi_invocation_ownership.v1
analyzer_embedded_wasi_isolation_profile.v1
analyzer_embedded_wasi_module_assessment.v1
analyzer_embedded_wasi_release_decision.v1
analyzer_error.v1
analyzer_executable_format.v1
analyzer_executable_identity.v1
analyzer_execution_capability.v1
analyzer_execution_consumption.v1
analyzer_execution_record.v1
analyzer_invocation.v1
analyzer_invocation_outcome.v1
analyzer_invocation_preflight.v1
analyzer_launch_plan.v1
analyzer_launch_plan_review.v1
analyzer_operator_start_capability_contract.v1
analyzer_operator_start_capability_request.v1
analyzer_product_adapter_admission_matrix.v1
analyzer_product_adapter_recovery_acceptance.v1
analyzer_product_adapter_threat_model.v1
analyzer_protocol.v1
analyzer_provenance_statement.v1
analyzer_provenance_verification.v1
analyzer_release_allowlist.v1
analyzer_release_candidate.v1
analyzer_release_manifest.v1
analyzer_result.v1
analyzer_scope_limits_approval.v1
analyzer_start_intent.v1
analyzer_start_lifecycle_receipt.v1
analyzer_validated_result_candidate.v1
ed25519.v1
embedded_analyzer_execution_control.v1
embedded_analyzer_operator_request.v1
embedded_wazero_wasip1.v1
fixture.digest.v1

authority-approval-ledgers

Class: internal-durable
Owner: Execution authority and approval maintainers
Source of truth: internal/approval, internal/executionauth, internal/store, internal/toolcontract
Persistence/export boundary: SQLite snapshots preserve permission, profile, interaction, approval, lease, and generation facts.
Compatibility rule: Authority changes are additive and fail closed; old readers remain for every supported stored snapshot.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- authority-approval-ledgers-writer (v1, write-current) at internal/application
- universal-tool-binding-writer (v1, write-new) at internal/toolcontract
- approval-preference-writer (v2, write-new) at internal/application/run_execution_permission.go
Readers:
- authority-approval-ledgers-reader (v1, active) at internal/store
- universal-tool-binding-reader (v1, active) at internal/executionauth
- approval-preference-reader (v1, v2, active) at internal/domain

49 active identifiers

approval_grant_consumption.v1
approval_grant_operation_key.v1
approval_operation_key.v1
approval_record.v1
executionauth.authorization.v1
full-cdp-session-operation.v1
once_command.v1
once_command_policy.v1
operator_steering_cancellation_operation.v1
operator_steering_cancellation_request.v1
operator_steering_delivery_mode.v1
operator_steering_image_request.v1
operator_steering_operation.v1
operator_steering_promotion_cancel.v1
operator_steering_promotion_enqueue.v1
operator_steering_promotion_operation.v1
operator_steering_promotion_request.v1
operator_steering_request.v1
run_browser_cdp_permission_change_request.v1
run_browser_cdp_permission_operation.v1
run_execution_handoff_operation.v1
run_execution_handoff_request.v1
run_execution_interaction_change_request.v1
run_execution_interaction_operation.v1
run_execution_permission_browser_cdp_operation.v1
run_execution_permission_change_request.v1
run_execution_permission_operation.v1
run_execution_profile_change_request.v1
run_execution_profile_operation.v1
run_mode_operation.v1
run_network_authority_operation.v1
run_network_authority_request.v1
run_phase_change_request.v1
thread_execution_permission.v1
thread_execution_permission.v2
thread_execution_permission_browser_cdp_materialization_operation.v1
thread_execution_permission_browser_cdp_operation.v1
thread_execution_permission_change_request.v1
thread_execution_permission_current_run_operation.v1
thread_execution_permission_materialization_operation.v1
thread_execution_permission_operation.v1
thread_message_image_intent_request.v1
thread_message_intent_operation.v1
thread_message_intent_request.v1
thread_model_route_operation.v1
thread_model_route_request.v1
toolcontract.discovery.v1
toolcontract.launch.v1
toolcontract.operation.v1

3 retained retirement records

once_command_approval.v1: ADR 0165 retires the Once execution producer; remove its uncalled approval fingerprint helper.
once_command_request.v1: ADR 0165 retires the Once execution producer; remove its uncalled request fingerprint helper.
once_command_spec.v1: ADR 0165 retires the Once execution producer; remove its uncalled command-spec fingerprint helper.

browser-cdp-process-session

Class: ephemeral
Owner: Browser runtime maintainers
Source of truth: internal/browserruntime
Persistence/export boundary: CDP requests and target handles exist only for one admitted browser generation.
Compatibility rule: Re-admit and rebind every request after restart; unknown versions fail closed.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Browser runtime restart tests create a fresh generation and never adopt prior CDP targets or request handles.
Writers:
- browser-cdp-process-session-writer (v1, write-current) at internal/browserruntime
Readers:
- browser-cdp-process-session-reader (v1, active) at internal/browserruntime

23 active identifiers

browser-action-tools.v1
browser_cdp_outcome.v1
browser_cdp_request.v1
browser_click.v1
browser_navigate.v1
browser_navigate_result.v1
browser_screenshot.v1
browser_screenshot_result.v1
browser_snapshot.v1
browser_status.v1
browser_status_result.v1
browser_target_scope.v1
browser_type.v1
full_cdp_cookie_access.v1
full_cdp_interaction.v1
full_cdp_page_snapshot.v1
full_cdp_request_capture.v1
full_cdp_runtime_receipt.v1
full_cdp_screenshot.v1
restricted_browser_dom_metadata.v1
restricted_browser_navigation.v1
restricted_browser_screenshot.v1
restricted_cdp_authorization.v1

browser-ui-evidence-ledgers

Class: internal-durable
Owner: Browser and UI evidence maintainers
Source of truth: internal/browserruntime, internal/store, internal/uievidence
Persistence/export boundary: SQLite and receipts retain launch, containment, ownership, cleanup, capture, and source-binding evidence.
Compatibility rule: Preserve generation, source, redaction, and cleanup bindings until durable migration or retention is proven.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- browser-full-cdp-authorization-writer (v2, write-current) at internal/browserruntime
- browser-ui-evidence-ledgers-writer (v1, write-current) at internal/browserruntime
Readers:
- browser-full-cdp-authorization-reader (v2, active) at internal/browserruntime
- browser-ui-evidence-ledgers-reader (v1, active) at internal/store

44 active identifiers

agent-browser-runtime.v1
agent_browser_process.v1
agent_browser_profile.v1
browser-launch-budget.v1
browser-launch-lease-owner-request.v1
browser-launch-owner.v1
browser-launch-preparation-operation.v1
browser-launch-preparation-request.v1
browser-launch-review-operation.v1
browser-launch-review-request.v1
browser-launch-reviewer-request.v1
browser-launch-reviewer.v1
browser-network-evidence-operation.v1
browser-network-evidence-request.v1
browser-network-review-operation.v1
browser-network-review-request.v1
browser-profile-marker.v1
browser-profile-owner.v1
browser-synthetic-process.v1
browser_executable_acceptance.v1
browser_executable_identity.v1
browser_full_cdp_authorization.v2
browser_full_cdp_start_authorization.v2
browser_launch_attempt.v1
browser_launch_lease.v1
browser_launch_review.v1
browser_lifecycle_observation.v1
browser_lifecycle_reconciliation.v1
browser_network_containment_plan.v1
browser_network_containment_review.v1
browser_process_exit.v1
browser_profile.v1
browser_profile_cleanup.v1
browser_profile_marker.v1
browser_profile_observation.v1
browser_profile_ownership.v1
browser_profile_reconciliation.v1
browser_profile_runtime_lease.v1
browser_publisher_policy.v1
browser_runtime_checkpoint.v1
browser_runtime_receipt.v1
browser_session_plan.v1
browser_start_authorization.v1
browser_start_spec.v1

2 retained retirement records

browser_full_cdp_authorization.v1: ADR 0106 replaced v1 with v2 exact execution-snapshot, activation-generation, and authorization-fence bindings.
browser_full_cdp_start_authorization.v1: ADR 0106 replaced v1 with v2 exact execution-snapshot, activation-generation, and authorization-fence bindings.

capability-readiness-projection

Class: projection
Owner: Application readiness maintainers
Source of truth: internal/application, internal/store
Persistence/export boundary: Readiness documents are non-authorizing status projections and may be persisted or exported.
Compatibility rule: Rebuild from current selections, leases, startup gates, backend evidence, and Go policy; capability_grant stays false.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Current persisted Run selections, leases, startup gates, backend evidence, and Go-owned policy.
Writers:
- capability-readiness-projection-writer (v1, v2, write-new) at internal/application
Readers:
- capability-readiness-projection-reader (v1, v2, active) at internal/httpapi

4 active identifiers

model_availability.v2
run_capability_readiness.v1
runtime_capabilities.v1
search_diagnostics.v1

cli-headless-contract

Class: external-durable
Owner: CLI and headless surface maintainers
Source of truth: cmd/cyberagent, internal/headless
Persistence/export boundary: Machine-readable CLI/headless output and diagnostics are exported to scripts and operators.
Compatibility rule: Add fields and aliases compatibly; preserve command and exit categories and reject unknown machine formats.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- cli-headless-contract-writer (v1, write-current) at internal/headless
Readers:
- cli-headless-contract-reader (v1, active) at internal/headless

2 active identifiers

drydock-api.v1
headless.v1

control-plane-ledgers

Class: internal-durable
Owner: Core Go control-plane maintainers
Source of truth: internal/application, internal/domain, internal/llm/anthropic_replay.go, internal/llm/gemini_replay.go, internal/llm/kimi_replay.go, internal/llm/provider_replay.go, internal/providerhistory, internal/store, internal/webevidence
Persistence/export boundary: Reviewed cross-domain separators and lifecycle records remain audit/recovery evidence. Provider-private tool replay remains in run_supervisor_provider_replay.replay_blob under its Run/turn/attempt/model-attempt/round fences, blob hash, and accepted tool-batch binding. Schema 176 adds separate run_supervisor_assistant_replay candidates and immutable run_supervisor_assistant_replay_bindings for successful zero-tool v4 responses accepted as exact public session-message projections. All private state is retained in SQLite backups and absent from public DTOs.
Compatibility rule: Preserve identity, replay, generation, cleanup, and unknown-version refusal; narrower registered families take precedence. Provider-private replay uses numeric envelope v1 for OpenAI Responses, v2 for Anthropic Messages, v3 for scoped Google AI Studio Gemini 3 Chat tool rounds, and v4 for exact mapped Kimi K3 on the distinct official Moonshot HTTPS Chat origins. DecodeProviderReplay reads all four; prior serialization and stored v1/v2/v3 rows remain supported. v4 retains only typed presence-aware nullable reasoning, accepted content, native response/tool identities and route/wire/runtime bindings; every assistant in native history needs its original replay. Separate ordinary-history bindings retain source/session provenance and complete recorded tool segments across reopen without restoring execution authority. Missing/imported/summarized/corrupt history refuses; no blind extensions, backfill, cross-version reinterpretation, old-row rewrite or reader retirement occurs. Unknown versions and transport mismatches fail closed. After schema 176 or v4 rows have been written, rollback to an older binary lacking that reader requires a matching pre-change database backup; retain the original database and its private replay evidence for recovery.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Provider-private replay readers remain while any supported database or backup requires v1, v2, v3 or v4; retain internal/llm/provider_replay_test.go, internal/llm/anthropic_thinking_replay_test.go, internal/llm/gemini_replay_test.go, internal/llm/kimi_replay_test.go, internal/llm/kimi_http_replay_test.go, internal/store/supervisor_provider_replay_test.go, internal/store/supervisor_anthropic_replay_test.go, internal/store/supervisor_gemini_replay_test.go, internal/store/supervisor_assistant_replay_test.go and internal/application/supervisor_kimi_replay_test.go coverage until a separately reviewed retirement proves compatibility and rollback; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- control-plane-ledgers-writer (v1, v2, v3, write-new) at internal/application
- provider-private-replay-anthropic-v2-writer (v2, write-new) at internal/llm/anthropic_replay.go
- provider-private-replay-responses-v1-writer (v1, write-current) at internal/llm/provider_replay.go
- provider-private-replay-gemini-v3-writer (v3, write-new) at internal/llm/gemini_replay.go
- provider-private-replay-kimi-v4-writer (v4, write-new) at internal/llm/kimi_replay.go
Readers:
- control-plane-ledgers-reader (v1, v2, v3, active) at internal/store
- provider-private-replay-envelope-reader (v1, v2, v3, v4, active) at internal/llm/provider_replay.go
- provider-private-replay-kimi-v4-history-reader (v4, active) at internal/store/supervisor_assistant_replay.go

114 active identifiers

byte_identical.v1
data_store_scope.v1
direct_exe_signing.v1
direct_exe_signing_handoff.v1
direct_exe_signing_request.v1
drydock-checkpoint-request.v1
drydock-checkpoint.v1
drydock-cleanup-request.v1
drydock-create-request.v1
drydock-delivery-proposal.v1
drydock-delivery-request.v1
drydock-file-boundary-cursor.v1
drydock-fork-request.v1
drydock-lifecycle-receipt.v1
drydock-reconcile.v1
drydock-rewind-request.v1
drydock-use-request.v1
drydock-workspace-trust.v1
drydock-workspace.v1
finding_acceptance_request.v1
finding_facts.v1
finding_fix_request.v1
finding_report.v1
finding_validation_request.v1
github-public.v1
hacker-news-public.v1
lexical_window.v1
macos_portable_compatibility.v1
msix_manifest.v1
msix_manifest.v2
pe_authenticode_normalized.v1
provider_grounded_citation.v1
recovery.data_store_seed.v1
rss-atom-public.v1
sanitized_host_environment.v1
scheduled-job-worker.v1
scheduled_job_create_observation_consent.v1
scheduled_job_create_request.v1
scheduled_job_observation.v1
scheduled_job_observation_consent_request.v1
scheduled_job_operation.v1
scheduled_job_transition_request.v1
script_process.v1
script_process_approval.v1
script_process_operation_key.v1
script_process_proposal.v1
script_run_create.v1
source_search.v1
specialist_context.v1
specialist_lifecycle.v1
specialist_model_action.v1
specialist_model_cancellation_operation.v1
specialist_model_cancellation_request.v1
specialist_model_input.v1
specialist_native_tool_batch.v1
specialist_operator_schedule_request.v1
specialist_skill_assignment.v1
specialist_skill_context.v1
specialist_task_brief.v1
specialist_tool_result.v1
specialist_tool_schedule.v1
standard-code-backend-readiness.v1
standard-code-command-result.v1
standard-code-command.v1
standard-code-docker-runner.v1
standard-code-docker-runner.v2
standard-code-git-metadata-mask.v1
standard_code_attack_matrix.v1
standard_code_command_failure.v1
standard_code_docker_capability.v1
standard_code_docker_operation.v1
standard_code_mutation_checkpoint.v1
standard_code_preset_operation.v1
standard_code_preset_request.v1
standard_code_supervisor.v1
standard_code_supervisor_intent.v1
standard_code_supervisor_ledger.v1
standard_code_supervisor_ledger_request.v1
standard_code_supervisor_snapshot.v1
structured_tool_operation.v1
supervisor_structured_tool.v1
supervisor_tool_call_id.v1
supervisor_tool_result.v1
untrusted_context.v1
user_terminal_policy.v1
user_terminal_session.v1
wazero_interpreter_wasip1.v1
web-evidence-tools.v1
web-ui.v1
web_citation.v1
web_evidence_operation.v1
web_evidence_presentation.v1
web_fetch.v1
web_fetch_authorization.v1
web_fetch_continuation.v1
web_question_excerpt.v1
web_search.v1
windows-two-deliverable-contract.v1
windows_artifact_attestations.v1
windows_browser_job.v2
windows_portable_compatibility.v1
windows_release_completion.v1
windows_restricted_token_job_candidate.v1
windows_store_lifecycle.v1
windows_store_lifecycle_row.v1
windows_store_listing_readback.v1
windows_store_readback.v1
work_board.v1
work_item_create.v1
workbench.prayu.desktop.credentials.v1
workspace-checkpoint-api.v1
workspace-checkpoint-transaction.v1
workspace-checkpoint.v1
yaml.v3

credential-provider-ledgers

Class: internal-durable
Owner: Credential, provider, model-route, and pricing maintainers
Source of truth: internal/credential, internal/modelregistry, internal/store, internal/webevidence
Persistence/export boundary: Secret-free references, provider diagnostics, qualifications, and declared snapshots survive restart.
Compatibility rule: Never weaken credential separation or qualification; retain readers for every supported stored snapshot.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- credential-provider-ledgers-writer (v1, write-current) at internal/application
Readers:
- credential-provider-ledgers-reader (v1, active) at internal/store

23 active identifiers

anthropic_native_search.v1
anthropic_native_search_cache.v1
anthropic_native_search_negative.v1
model_cancellation_operation.v1
model_cancellation_request.v1
model_context_window.v1
model_harness_probe.v1
provider-search-adapter.v1
provider-search-binding.v1
provider_definition.v1
provider_definition_collection.v1
provider_definition_control.v1
provider_definitions.v1
provider_native_search_binding.v1
provider_native_search_cache.v1
provider_native_search_declared_binding.v1
provider_native_search_negative.v1
provider_native_search_tool.v1
provider_registry_reload.v1
provider_request_runtime.v1
specialist_model_cost.v1
supervisor_model_cost.v1
supervisor_model_cost_steering.v1

desktop-risk-restart-session

Class: ephemeral
Owner: Desktop shell lifecycle maintainers
Source of truth: cmd/cyberagent-desktop, internal/desktop
Persistence/export boundary: The parent/helper readiness channel exists only for one same-executable restart attempt and grants no durable authority.
Compatibility rule: Fail closed unless the helper proves the expected parent and exact readiness protocol before the parent exits.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Every restart creates a fresh one-shot readiness channel; the helper cannot reuse a prior channel or carry authority across attempts.
Writers:
- desktop-risk-restart-session-writer (v1, write-current) at cmd/cyberagent-desktop
Readers:
- desktop-risk-restart-session-reader (v1, active) at cmd/cyberagent-desktop

2 active identifiers

desktop_risk_restart.ready.v1
desktop_sandbox_restart.v1

desktop-web-presentation-state

Class: projection
Owner: Desktop and React workbench maintainers
Source of truth: internal/desktop, web/src
Persistence/export boundary: Renderer settings and Desktop DTO projections may be stored locally but grant no execution authority.
Compatibility rule: Rebuild or default from Go-owned state while preserving user presentation settings and redaction.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Go Application DTOs plus explicitly user-owned local presentation settings.
Writers:
- desktop-web-presentation-state-writer (v1, write-current) at web/src
Readers:
- desktop-web-presentation-state-reader (v1, active) at web/src

16 active identifiers

desktop_clipboard_files.v1
desktop_connection_bootstrap.v1
desktop_debug_terminal_agent_input.v1
desktop_file_selection.v1
desktop_risk_restart.v1
desktop_skill_package_dialog.v1
desktop_skill_package_install.v1
desktop_skill_package_preview.v1
desktop_user_terminal.v1
desktop_workspace_import.v1
desktop_workspace_launcher_list.v1
desktop_workspace_open.v1
prayu.run-navigation.v1
universal-code.batch-workbench.v1
universal-code.specialist.v1
v2_file_upload.v1

2 retained retirement records

prayu.settings.sidebar.width.v1: Remove the unreachable legacy SettingsView and its private sidebar-width preference reader/writer.
prayu.sidebar.width.v1: The authorized unified-shell replacement removed the legacy App sidebar reader/writer. This is presentation retirement only; existing localStorage values are neither deleted nor migrated.

docker-attach-process-session

Class: ephemeral
Owner: Docker runtime transport maintainers
Source of truth: internal/sandbox
Persistence/export boundary: Attach/stdin writers and live transport handles exist only in one process generation.
Compatibility rule: Restart closes live writers and requires fresh durable admission and container-generation checks.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Docker restart tests reject process-local stdin writers and require fresh durable admission.
Writers:
- docker-attach-process-session-writer (v2, write-current) at internal/sandbox
Readers:
- docker-attach-process-session-reader (v2, active) at internal/sandbox

1 active identifiers

command_runtime_stdin.v2

exported-evidence-and-handoff

Class: external-durable
Owner: Evidence, verification, report, and handoff maintainers
Source of truth: internal/report, internal/runner, internal/verification
Persistence/export boundary: Receipts, evidence envelopes, reports, snapshots, and handoffs are exported user/audit data.
Compatibility rule: Use additive formats or new versions, keep old fixtures/readers, preserve hashes/redaction, and reject unknown versions.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- exported-evidence-and-handoff-writer (v1, write-current) at internal/application
Readers:
- exported-evidence-and-handoff-reader (v1, active) at internal/report

35 active identifiers

browser_network_containment_evidence.v1
code_handoff_export.v1
context_memory_export.v1
finding_artifact_evidence.v1
finding_artifact_evidence_request.v1
finding_remediation_evidence.v1
finding_remediation_evidence_request.v1
github-review-evidence.v1
operator_verification_evidence_operation.v1
operator_verification_evidence_request.v1
operator_verification_plan.v1
operator_verification_plan_evidence_association.v1
operator_verification_plan_evidence_association_operation.v1
operator_verification_plan_evidence_association_request.v1
operator_verification_plan_inventory.v1
operator_verification_plan_item.v1
operator_verification_plan_item_snapshot_receipt_operation.v1
operator_verification_plan_item_snapshot_receipt_request.v1
operator_verification_plan_item_snapshot_receipt_review_operation.v1
operator_verification_plan_item_snapshot_receipt_review_request.v1
operator_verification_plan_operation.v1
operator_verification_plan_request.v1
runner_deadline_budget_evidence.v1
runner_evidence_set_receipt.v1
runner_exit_evidence.v1
runner_lifecycle_contract.v1
runner_lifecycle_timeline_evidence.v1
runner_resource_limit_evidence.v1
runner_runtime_evidence.v1
runner_termination_cause_evidence.v1
sandbox_backend_evidence.v1
sandbox_docker_production_evidence.v1
standard_code_command_evidence.v1
standard_code_tool_evidence.v1
web_evidence.v1

extension-package-contracts

Class: external-durable
Owner: Skill, Plugin, Hook, and extension maintainers
Source of truth: internal/hooks, internal/plugins, internal/skills
Persistence/export boundary: Signed packages, manifests, installations, and selections cross independently versioned extension boundaries.
Compatibility rule: Treat packages as untrusted; write new versions, retain bounded inert readers, and never weaken signature meaning.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- extension-package-contracts-writer (v1, v2, write-new) at internal/skills
- portable-plugin-installation-writer (v2, write-new) at internal/plugins
Readers:
- extension-package-contracts-reader (v1, v2, active) at internal/skills
- plugin-installation-reader (v1, v2, active) at internal/plugins

48 active identifiers

agent-package-snapshot.v1
extension-control.v1
extension-inventory.v1
extension-onboarding.v1
external_skill_context.v1
external_skill_guidance.v1
external_skill_selection.v1
external_skill_selection.v2
external_skill_selection_intent.v1
external_skill_selection_intent.v2
external_skill_selection_operation.v1
external_specialist_skill_context.v1
plugin-installation.v1
plugin-installation.v2
plugin-publisher-trust.v1
plugin-signature.v1
plugin.v1
restricted-hooks.v1
skill.v1
skill_candidate.v1
skill_candidate_import.v1
skill_candidate_import.v2
skill_candidate_import_operation.v1
skill_candidate_import_request.v1
skill_candidate_import_request.v2
skill_candidate_proposal.v1
skill_candidate_request.v1
skill_candidate_review.v1
skill_candidate_review_operation.v1
skill_candidate_review_request.v1
skill_context.v1
skill_mode.v1
skill_package.v1
skill_package.v2
skill_package_install_operation.v1
skill_package_install_result.v1
skill_package_installation_intent.v1
skill_package_installation_intent.v2
skill_package_object.v1
skill_package_removal.v1
skill_package_removal_intent.v1
skill_package_remove_operation.v1
skill_package_signature.v1
skill_selection.v1
skill_selection_operation.v1
skill_selection_request.v1
specialist_instruction.v1
specialist_instruction.v2

http-openapi-contract

Class: external-durable
Owner: HTTP/OpenAPI and generated-client maintainers
Source of truth: docs/openapi.json, internal/httpapi/openapi.go
Persistence/export boundary: Loopback HTTP DTO protocol values are exported through OpenAPI to generated TypeScript.
Compatibility rule: Keep API v1 additive, regenerate clients from Go, retain old readers, and reject unknown authority-bearing values.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- http-openapi-contract-writer (v0, v1, v2, write-new) at internal/httpapi/openapi.go
Readers:
- http-openapi-contract-reader (v0, v1, v2, active) at web/src/api

121 active identifiers

agent-code-tools.v1
agent_browser_close.v1
agent_browser_status.v1
agent_graph.v1
api.v1
approval_control.v1
approval_queue.v1
batch-delivery-workbench.v1
batch-delivery.v1
browser_cdp_permission_policy.v1
browser_network_containment_policy.v2
browser_safe_web_readiness.v1
code-intel-configuration.v1
code-intel-lsp.v1
code_handoff.v1
command-runtime.v2
context_provenance.v0
context_provenance.v1
debug-query.v1
diagnostic-bundle.v1
docker_environment.v1
doctor-snapshot.v1
execution_interaction_policy.v1
execution_permission_policy.v1
execution_permission_policy.v2
execution_profile_policy.v1
file_edit_apply.v1
file_edit_change_set.v1
file_edit_proposal.v1
file_edit_proposal_recovery.v1
file_edit_review.v1
full_cdp_preview.v1
full_cdp_preview_action.v1
full_cdp_session.v1
full_cdp_session_close.v1
hook-diagnostics.v1
mcp-credential.v1
mode_policy.v1
model_harness.v1
model_harness_qualification.v1
model_route_catalog.v1
model_route_control.v1
operation_receipt.v1
operator_verification_evidence.v1
operator_verification_inventory.v1
operator_verification_plan_coverage.v1
operator_verification_plan_item_coverage.v1
operator_verification_plan_item_snapshot.v1
operator_verification_plan_item_snapshot_export.v1
operator_verification_plan_item_snapshot_receipt.v1
operator_verification_plan_item_snapshot_receipt_inventory.v1
operator_verification_plan_item_snapshot_receipt_review.v1
operator_verification_plan_item_snapshot_receipt_review_inventory.v1
plan_delivery.v1
plan_delivery_control.v1
plugin-lifecycle.v1
provider_credential.v1
provider_diagnostic.v1
provider_model_discovery.v1
provider_search_readiness.v1
repository_commit_comparison.v1
repository_commit_file_preview.v1
repository_diff.v1
repository_file_history.v1
repository_state.v1
restricted-cdp-ui-evidence.v1
run_browser_cdp_permission.v1
run_creation.v1
run_execution_handoff.v1
run_execution_interaction.v1
run_execution_permission.v1
run_execution_permission.v2
run_execution_profile.v1
run_lifecycle_control.v1
run_mode.v1
run_network_authority.v1
run_network_authority_control.v1
run_wake_consumer.v1
run_wake_control.v1
run_wake_intent.v1
run_wake_worker_health.v1
sandbox.readiness.v1
scheduled-job-authorization.v1
scheduled-job-control.v1
scheduled-job-round.v1
scheduled-job-worker-health.v1
scheduled-job.v1
session_evidence_attachment.v1
session_evidence_inventory.v1
session_message_submission.v1
session_steering_cancellation.v1
session_steering_promotion.v1
session_steering_revision.v1
skill_package_installation.v1
specialist_tools.v1
standard_code_preset.v1
task_configuration.v1
thread.v1
thread_activity_artifact.v1
thread_activity_detail.v2
thread_activity_summary.v1
thread_application_services.v1
thread_creation.v1
thread_execution.v1
thread_export.v1
thread_lifecycle.v1
thread_message_submission.v1
thread_model_route.v1
thread_model_route_control.v1
thread_queued_messages.v1
thread_run_recovery.v1
ui-evidence-artifact.v1
ui-evidence-attempt.v1
ui-evidence-step.v1
ui-evidence.v1
windows_wfp_dynamic.v1
workspace_explorer.v1
workspace_file_upload.v1
workspace_image_upload.v1
workspace_import.v1
workspace_search.v1

2 retained retirement records

thread_activity_detail.v1: The unreleased generic facts prototype was replaced by thread_activity_detail.v2 before merge so every public activity detail is a strict Go-owned discriminated union.
thread_activity_tool_facts.v1: The generic name/value facts projection was removed from every public Thread and Legacy Inspector HTTP response in favor of the closed thread_activity_detail.v2 discriminated union.

in-memory-token-session

Class: ephemeral
Owner: Credential and bootstrap maintainers
Source of truth: internal/credential, internal/desktop
Persistence/export boundary: Access tokens, bootstrap secrets, and process ownership tokens last one process generation.
Compatibility rule: Rotate on restart, never persist secret material, and never treat token metadata as authority.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Credential and Desktop restart tests rotate secrets and retain only non-secret metadata.
Writers:
- in-memory-token-session-writer (v1, write-current) at internal/desktop
Readers:
- in-memory-token-session-reader (v1, active) at internal/desktop

1 active identifiers

browser-profile-token.v1

lsp-process-session

Class: ephemeral
Owner: Code intelligence maintainers
Source of truth: internal/codeintel
Persistence/export boundary: LSP JSON-RPC sessions and qualified executable handles live for one language-server process.
Compatibility rule: Restart re-qualifies executable/config identity and rebinds Workspace URIs without inherited authority.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Code-intelligence restart tests establish a new process identity and discard prior JSON-RPC handles.
Writers:
- lsp-process-session-writer (v1, write-current) at internal/codeintel
Readers:
- lsp-process-session-reader (v1, active) at internal/codeintel

1 active identifiers

code-intel-config.v1

mcp-interchange

Class: external-durable
Owner: MCP client/server maintainers
Source of truth: internal/mcp, internal/toolgateway
Persistence/export boundary: MCP messages and local extension DTOs cross process/version boundaries; audit records may persist.
Compatibility rule: Follow upstream negotiation and bounded local parsing; negotiated capabilities never grant local Go authority.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- mcp-interchange-writer (v1, v2, write-current) at internal/mcp
Readers:
- mcp-interchange-reader (v1, v2, active) at internal/mcp

6 active identifiers

mcp-client-call-audit.v1
mcp-client-server.v1
mcp-client.v1
mcp-client.v2
mcp.call.input.v1
mcp.capabilities.v1

operation-receipt-projection

Class: projection
Owner: Operation receipt maintainers
Source of truth: internal/operationreceipt, internal/store
Persistence/export boundary: Receipt history is a content-free projection over authoritative operations and receipts.
Compatibility rule: Rebuild from domain operation/receipt rows; never infer transaction success or authority from the projection.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Authoritative domain operation rows and immutable receipts in internal/store.
Writers:
- operation-receipt-projection-writer (v1, write-current) at internal/operationreceipt
Readers:
- operation-receipt-projection-reader (v1, active) at internal/httpapi

2 active identifiers

operation_receipt_history.v1
operation_receipt_history_item.v1

process-runtime-lifecycle

Class: internal-durable
Owner: Command, model, terminal, and runner lifecycle maintainers
Source of truth: internal/application, internal/runner, internal/store
Persistence/export boundary: Durable intent, executable identity, bounds, cancellation, terminal state, and cleanup survive failure.
Compatibility rule: Preserve write-ahead intent, generation fencing, result binding, and cleanup; retain supported readers.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- process-runtime-lifecycle-writer (v1, v2, write-new) at internal/application
Readers:
- process-runtime-lifecycle-reader (v1, v2, active) at internal/store

55 active identifiers

application_docker_container_lifecycle_post_exit.v1
application_docker_container_lifecycle_running.v1
application_docker_container_lifecycle_start_authority.v1
command-runtime-adapter-authority.v1
command-runtime-adapter-authority.v2
command-runtime-batch.v2
command-runtime-policy.v2
command-runtime-result.v2
command-runtime-workspace-boundary.v1
command_grant_binding.v1
command_grant_review.v1
command_runtime_adapter_generation.v1
command_runtime_docker_adapter_operation.v1
command_runtime_local_sandbox_operation.v1
command_runtime_operation.v2
command_runtime_request.v2
controlled_command_execution.v1
controlled_command_execution_intent.v1
controlled_command_execution_operation.v1
controlled_command_execution_policy.v1
controlled_command_plan.v1
controlled_command_policy.v1
controlled_command_proposal.v1
controlled_command_proposal_policy.v1
controlled_command_proposal_result.v1
controlled_command_proposal_review.v1
debug_terminal.v1
debug_terminal_agent_input.v1
debug_terminal_agent_input_audit_record.v1
debug_terminal_agent_input_operation.v1
debug_terminal_agent_input_policy.v1
file_attachment_inputs.v1
host-process.v1
host_command.v1
host_command_execution.v1
host_command_execution_intent.v1
host_command_execution_operation.v1
host_command_execution_policy.v1
host_command_execution_receipt.v1
host_command_policy.v1
host_command_proposal.v1
host_command_proposal_result.v1
host_command_review.v1
once_execution.v1
operator_command_key.v1
operator_command_request.v1
permission_runtime_epoch.v1
project-actions.v1
risk_escalation.v1
risk_escalation_policy.v1
risk_escalation_resume.v1
terminal_agent_input_audit.v1
terminal_agent_input_bridge.v1
terminal_input_lease.v1
windows-fixed-restricted.v1

6 retained retirement records

controlled_command_proposal_review_operation.v1: ADR 0165 removes the legacy proposal execution and review writers; new commands use Command Runtime and the common operation authorizer.
host_command_proposal_execution_operation.v1: ADR 0165 removes the legacy proposal execution and review writers; new commands use Command Runtime and the common operation authorizer.
host_command_proposal_review_operation.v1: ADR 0165 removes the legacy proposal execution and review writers; new commands use Command Runtime and the common operation authorizer.
risk_escalation_execution.v1: ADR 0165 removes the legacy proposal execution and review writers; new commands use Command Runtime and the common operation authorizer.
risk_escalation_invalidation.v1: ADR 0165 removes the legacy proposal execution and review writers; new commands use Command Runtime and the common operation authorizer.
risk_escalation_result.v1: ADR 0165 removes the legacy proposal execution and review writers; new commands use Command Runtime and the common operation authorizer.

project-configuration-contract

Class: external-durable
Owner: Project configuration and instruction maintainers
Source of truth: configs, internal/application/project_instruction_delivery.go, internal/projectconfig, internal/store/run_instruction_snapshots.go
Persistence/export boundary: .prayu configuration, instruction precedence, fingerprints and opt-in delivery classifications persist in user projects and immutable Run snapshot revisions; project-rule.v1 identities persist in source-bound model-start audits.
Compatibility rule: Use deterministic dual-read for path/precedence changes, reject conflicts, and keep old-project fixtures. ADR 0162 retains legacy fingerprints and optional selection when delivery is absent; new readers also validate classified snapshots. InstructionDelivery and ProjectInstructionDelivery tests prove classified binding, old-reader rejection and SQLite close/reopen revision retention. Retain the classified snapshot and dispatch readers on writer rollback; never rewrite historical fingerprints or audit identities.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Classified Run readers and dispatch fences remain until every classified revision and model-start audit has migration or retention evidence; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- project-configuration-contract-writer (v1, write-current) at internal/projectconfig
- project-instruction-audit-writer (v1, write-current) at internal/application/agent_runner.go
Readers:
- project-configuration-contract-reader (v1, active) at internal/projectconfig
- project-instruction-dispatch-reader (v1, active) at internal/application/project_instruction_delivery.go
- project-instruction-history-reader (v1, active) at internal/store/run_instruction_snapshots.go

6 active identifiers

prayu.locale.v1
project-rule.v1
project_config.v1
project_instruction_delivery.v1
project_instruction_guidance.v1
project_instruction_snapshot.v1

provider-stream-presentation

Class: ephemeral
Owner: Model streaming and renderer maintainers
Source of truth: internal/llm, web/src
Persistence/export boundary: Provider deltas and pending renderer cards last only until durable reconciliation.
Compatibility rule: Discard incomplete deltas on restart, redact private reasoning, and reconcile only by durable item identity.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Streaming tests discard unmatched deltas/cards and reconstruct presentation from durable items after restart.
Writers:
- provider-stream-presentation-writer (v1, v3, write-new) at internal/llm
Readers:
- provider-stream-presentation-reader (v1, v3, active) at web/src

4 active identifiers

llm.item_stream.v1
model_public_commentary.v1
model_public_stream.v3
model_public_stream_poll.v1

registry-governance-contract

Class: external-durable
Owner: Protocol and Surface governance maintainers
Source of truth: docs/convergence/surface-registry.json, internal/protocolregistry, internal/surfacegovernance, protocols
Persistence/export boundary: The versioned registry is committed review metadata and generated documentation, never runtime authority.
Compatibility rule: Evolve the schema additively, retain historical reader records, compare against the Git baseline, and fail closed on unknown fields.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- registry-governance-contract-writer (v1, write-current) at internal/protocolregistry
- surface-tier-registry-writer (v1, write-current) at internal/surfacegovernance
Readers:
- registry-governance-contract-reader (v1, active) at internal/protocolregistry
- surface-tier-registry-reader (v1, active) at internal/surfacegovernance

2 active identifiers

protocol-family-registry.v1
surface-tier-registry.v1

release-and-packaging-contracts

Class: external-durable
Owner: Desktop release and packaging maintainers
Source of truth: internal/buildinfo, packaging, scripts
Persistence/export boundary: Release manifests, identities, checksums, SBOMs, and compatibility documents are exported artifacts.
Compatibility rule: Historical artifacts are immutable; identity changes require upgrade/downgrade evidence and reader retention.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- release-and-packaging-contracts-writer (v1, write-current) at scripts
Readers:
- release-and-packaging-contracts-reader (v1, active) at internal/buildinfo

4 active identifiers

macos_release_archive.v1
portable_build_diagnostic.v1
portable_release_metadata.v1
portable_zip_manifest.v1

report-summary-projections

Class: projection
Owner: Finding, repository, and summary maintainers
Source of truth: internal/report, internal/store
Persistence/export boundary: Generated summaries may be exported or cached while findings, Git objects, and evidence stay authoritative.
Compatibility rule: Rebuild from content-addressed sources and preserve annotations, ordering, and redaction.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Content-addressed findings, evidence, Git objects, installations, and accepted review decisions.
Writers:
- report-summary-projections-writer (v1, write-current) at internal/report
Readers:
- report-summary-projections-reader (v1, active) at internal/httpapi

5 active identifiers

external_skill_projection.v1
finding_report_projection.v1
price_snapshot.v1
price_snapshot_list.v1
sandbox_docker_input_projection.v1

sandbox-docker-lifecycle

Class: internal-durable
Owner: Sandbox and Docker lifecycle maintainers
Source of truth: internal/sandbox, internal/store
Persistence/export boundary: Admission, plan, intent, observation, ownership, output, and cleanup records persist across restart.
Compatibility rule: Preserve container/image/config identity, lease fencing, external-effect order, and cleanup-first recovery.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- sandbox-docker-lifecycle-writer (v1, v2, v3, write-new) at internal/sandbox
Readers:
- sandbox-docker-lifecycle-reader (v1, v2, active) at internal/store
- local-sandbox-owner-recovery-reader (v1, v2, v3, active) at internal/sandbox

203 active identifiers

docker-standard-code-guest.v1
docker-standard-code.v1
docker_sandbox_admission.v1
docker_sandbox_admission_operation.v1
docker_sandbox_admission_request.v1
docker_sandbox_cancel_operation.v1
docker_sandbox_cancellation.v1
docker_sandbox_denial.v1
docker_sandbox_launch.v1
docker_sandbox_lifecycle_key.v1
docker_sandbox_output_commit_operation.v1
docker_sandbox_receipt.v1
docker_sandbox_runtime_epoch.v1
docker_sandbox_start.v1
docker_sandbox_start_operation.v1
docker_sandbox_start_request.v1
drydock_lifecycle.v1
linux_namespace_seccomp_candidate.v1
local-host-path.v1
local-profile-proof.v1
local-profile.v1
local-readiness-binding.v1
local-readiness-owner.v1
local-root-identity.v1
local-run-owner.v1
local-runtime-generation.v1
local_sandbox_execution.v1
local_sandbox_owner.v1
local_sandbox_owner.v2
local_sandbox_owner.v3
local_sandbox_readiness.v1
sandbox_authorization.v1
sandbox_backend_evidence_item.v1
sandbox_backend_evidence_operation.v1
sandbox_backend_evidence_request.v1
sandbox_backend_handshake.v1
sandbox_cleanup.v1
sandbox_cleanup_operation.v1
sandbox_cleanup_request.v1
sandbox_container_identity.v1
sandbox_docker_capability_observation.v1
sandbox_docker_command.v1
sandbox_docker_container_attempt_completion.v1
sandbox_docker_container_attempt_failure.v1
sandbox_docker_container_authority.v1
sandbox_docker_container_cleanup.v1
sandbox_docker_container_cleanup_checkpoint.v1
sandbox_docker_container_config.v1
sandbox_docker_container_control.v1
sandbox_docker_container_control_matrix.v1
sandbox_docker_container_id.v1
sandbox_docker_container_inspection.v1
sandbox_docker_container_lifecycle_observation.v1
sandbox_docker_container_lifecycle_ownership.v1
sandbox_docker_container_lifecycle_probe_request.v1
sandbox_docker_container_lifecycle_probe_result.v1
sandbox_docker_container_name.v1
sandbox_docker_container_plan.v1
sandbox_docker_container_plan_operation.v1
sandbox_docker_container_plan_request.v1
sandbox_docker_container_rehearsal.v1
sandbox_docker_container_rehearsal_attempt.v1
sandbox_docker_container_rehearsal_operation.v1
sandbox_docker_container_rehearsal_request.v1
sandbox_docker_container_spec.v1
sandbox_docker_container_stage.v1
sandbox_docker_container_stage_checkpoint.v1
sandbox_docker_daemon_identity.v1
sandbox_docker_fake_write_step.v1
sandbox_docker_host_input_carrier_name.v1
sandbox_docker_host_input_handoff.v1
sandbox_docker_host_input_handoff_intent.v1
sandbox_docker_host_input_handoff_operation.v1
sandbox_docker_host_input_handoff_request.v1
sandbox_docker_host_input_handoff_requirement.v1
sandbox_docker_host_input_requirement.v1
sandbox_docker_host_input_staging.v1
sandbox_docker_host_input_staging_intent.v1
sandbox_docker_host_input_staging_operation.v1
sandbox_docker_host_input_volume_name.v1
sandbox_docker_host_mounts.v1
sandbox_docker_image_observation.v1
sandbox_docker_label_plan.v1
sandbox_docker_lifecycle_action.v1
sandbox_docker_lifecycle_intent.v1
sandbox_docker_lifecycle_operation.v1
sandbox_docker_lifecycle_receipt.v1
sandbox_docker_lifecycle_transition.v1
sandbox_docker_log_capture.v1
sandbox_docker_mount_plan.v1
sandbox_docker_network_plan.v1
sandbox_docker_observation.v1
sandbox_docker_observation_binding.v1
sandbox_docker_observation_item.v1
sandbox_docker_observation_operation.v1
sandbox_docker_observation_request.v1
sandbox_docker_orphan_plan.v1
sandbox_docker_output_commit.v1
sandbox_docker_output_staging.v1
sandbox_docker_process_lifecycle_blueprint.v1
sandbox_docker_production_environment.v1
sandbox_docker_production_environment.v2
sandbox_docker_production_evidence_attempt.v1
sandbox_docker_production_evidence_attempt_failure.v1
sandbox_docker_production_evidence_attempt_result.v1
sandbox_docker_production_evidence_capability.v1
sandbox_docker_production_evidence_daemon_identity.v1
sandbox_docker_production_evidence_harness_intent.v1
sandbox_docker_production_evidence_harness_inventory.v1
sandbox_docker_production_evidence_harness_label.v1
sandbox_docker_production_evidence_harness_reconciliation.v1
sandbox_docker_production_evidence_harness_resource.v1
sandbox_docker_production_evidence_harness_result.v1
sandbox_docker_production_evidence_image.v1
sandbox_docker_production_evidence_operation.v1
sandbox_docker_production_evidence_reconciliation.v1
sandbox_docker_production_evidence_review.v1
sandbox_docker_production_evidence_review_operation.v1
sandbox_docker_production_evidence_suite.v1
sandbox_docker_readiness_fingerprint.v1
sandbox_docker_readonly_endpoint.v1
sandbox_docker_resource_plan.v1
sandbox_docker_run_proposal.v1
sandbox_docker_runtime_input_application_failure.v1
sandbox_docker_runtime_input_application_intent.v1
sandbox_docker_runtime_input_application_operation.v1
sandbox_docker_runtime_input_application_request.v1
sandbox_docker_runtime_input_application_result.v1
sandbox_docker_runtime_input_archive_root.v1
sandbox_docker_runtime_input_carrier_name.v1
sandbox_docker_runtime_input_projection_content.v1
sandbox_docker_runtime_input_projection_item.v1
sandbox_docker_runtime_input_projection_operation.v1
sandbox_docker_runtime_input_projection_plan.v1
sandbox_docker_runtime_input_relative_path.v1
sandbox_docker_runtime_input_resource_cleanup_failure.v1
sandbox_docker_runtime_input_resource_cleanup_intent.v1
sandbox_docker_runtime_input_resource_cleanup_operation.v1
sandbox_docker_runtime_input_resource_cleanup_result.v1
sandbox_docker_runtime_input_resource_descriptor.v1
sandbox_docker_runtime_input_resource_inspection.v1
sandbox_docker_runtime_input_resource_inspection_operation.v1
sandbox_docker_runtime_input_target.v1
sandbox_docker_runtime_input_target_container.v1
sandbox_docker_runtime_input_target_inspection.v1
sandbox_docker_runtime_input_volume.v1
sandbox_docker_runtime_input_volume_name.v1
sandbox_docker_secret_plan.v1
sandbox_docker_start_gate_authority.v1
sandbox_docker_start_gate_review.v1
sandbox_docker_start_gate_review_operation.v1
sandbox_docker_termination_plan.v1
sandbox_docker_write_transaction.v1
sandbox_docker_write_transport.v1
sandbox_docker_write_transport_step.v1
sandbox_execution.v1
sandbox_execution_cancel.v1
sandbox_execution_cancel_operation.v1
sandbox_execution_cancel_request.v1
sandbox_execution_candidate.v1
sandbox_execution_candidate.v2
sandbox_execution_candidate_operation.v1
sandbox_execution_candidate_request.v1
sandbox_execution_candidate_request.v2
sandbox_execution_operation.v1
sandbox_execution_request.v1
sandbox_fake_container_config.v1
sandbox_fake_daemon_capabilities.v1
sandbox_fake_mount_plan.v1
sandbox_fake_network_plan.v1
sandbox_fake_orphan_plan.v1
sandbox_fake_output_artifact.v1
sandbox_fake_resource_plan.v1
sandbox_fake_secret_plan.v1
sandbox_fake_termination_plan.v1
sandbox_host_input_archive_path.v1
sandbox_host_input_artifact_payloads.v1
sandbox_host_input_bundle.v1
sandbox_host_input_directory.v1
sandbox_host_input_source_snapshot.v1
sandbox_input_artifact_bindings.v1
sandbox_intent_request.v1
sandbox_manifest.v1
sandbox_manifest_operation.v1
sandbox_mount_binding.v1
sandbox_output_capture_plan.v1
sandbox_output_export_plan.v1
sandbox_output_locator.v1
sandbox_output_simulation.v1
sandbox_output_simulation_operation.v1
sandbox_output_simulation_request.v1
sandbox_policy_decision.v1
sandbox_preflight.v1
sandbox_preflight_operation.v1
sandbox_preflight_request.v1
sandbox_scope_binding.v1
sandbox_validation.v1
sandbox_workspace_binding.v1
sbx-command-runtime.v1
sbx-readiness.v1
windows_appcontainer_policy.v1
windows_appcontainer_policy.v2
windows_appcontainer_policy.v3

sandbox-environment-settings

Class: internal-durable
Owner: Desktop sandbox environment maintainers
Source of truth: internal/application, internal/desktop
Persistence/export boundary: The Go-owned application home retains revision-bound sandbox preferences; HTTP exports saved and active settings separately.
Compatibility rule: Retain versioned settings readers, preserve compare-and-swap revisions, reject unknown backend values, and establish fresh runtime readiness after restart. Preferences never grant execution.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- sandbox-environment-settings-writer (v1, write-current) at internal/application
Readers:
- sandbox-environment-settings-reader (v1, active) at internal/application
- sandbox-environment-settings-ui-reader (v1, active) at web/src/api

1 active identifiers

sandbox_environment.v1

standard-code-delivery-ledger

Class: external-durable
Owner: Standard Code delivery and public projection maintainers
Source of truth: internal/application, internal/standardcodedelivery, internal/store
Persistence/export boundary: SQLite retains immutable metadata-only receipts; HTTP, CLI, Desktop, Code Handoff, GitHub Review, and final completion export the same freshness-aware projection.
Compatibility rule: Retain old readers and exact receipt, revision, Diff, Checkpoint, Artifact, binding, redaction, and stale semantics until every stored receipt is migrated or indefinitely supported.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every stored receipt and exported consumer is migrated or retained; Receipt hashes and historical conclusions remain independently verifiable
Writers:
- standard-code-delivery-ledger-writer (v1, write-current) at internal/store
Readers:
- standard-code-delivery-go-reader (v1, active) at internal/standardcodedelivery
- standard-code-delivery-http-reader (v1, active) at internal/httpapi
- standard-code-delivery-web-reader (v1, active) at web/src

8 active identifiers

command-runtime-backend-generation.v1
standard-code-backend.v1
standard-code-delivery-reason.v1
standard-code-workspace-revision.v1
standard_code_delivery.v1
standard_code_delivery_record.v1
standard_code_delivery_request.v1
standard_code_supervisor_finish.v1

supervisor-input-delivery-projection

Class: projection
Owner: Supervisor input and context maintainers
Source of truth: internal/application/agent_runner.go, internal/application/supervisor_input_delivery.go, internal/store
Persistence/export boundary: A model-request-only projection preserves accepted_input while distinguishing an internal tool boundary from a new user submission. Provider adapters deliver this text to the model; this record does not claim a Go envelope decoder or rewrite durable accepted input.
Compatibility rule: Rebuild initial, refreshed and recovered requests from the original committed input and exact returned boundary receipts, append accepted steering after the projection, and never derive continuation authority or success from user/tool text.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Durable accepted_input and the store's exact ToolBoundaryContextCalls lookup, plus later committed operator steering. No provider replay or permission is reconstructed from the projection.
Writers:
- supervisor-input-delivery-writer (v1, write-current) at internal/application/supervisor_input_delivery.go
Readers:
- supervisor-input-delivery-model-request-consumer (v1, active) at internal/llm

1 active identifiers

supervisor_input_delivery.v1

supervisor-tool-rejection-diagnostics

Class: internal-durable
Owner: Supervisor terminal accounting and private diagnostic maintainers
Source of truth: internal/llm/tool_request_rejection.go, internal/store/migration_v174.go, internal/store/supervisor_tool_rejection.go
Persistence/export boundary: The original protocol-failure transaction stores an immutable, at-most-64KiB redacted projection of the received native batch and actually offered schema under the same Run/turn/attempt/model-attempt identity. This private diagnostic is excluded from executable calls, pending work, provider replay and ordinary model history.
Compatibility rule: Retain exact committed diagnostic bytes and digest comparison for terminal idempotency. Unknown or changed evidence cannot overwrite the original terminal. Historical failures are not backfilled, and diagnostic structure never substitutes for an executable request, approval or permission.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- supervisor-tool-rejection-diagnostic-writer (v1, write-new) at internal/store/supervisor_tool_rejection.go
Readers:
- supervisor-tool-rejection-exact-terminal-reader (v1, active) at internal/store/supervisor_tool_rejection.go

1 active identifiers

tool_request_rejection.v1

thread-run-session-ledgers

Class: internal-durable
Owner: Thread, Run, Session, context, and message maintainers
Source of truth: internal/session, internal/store, web/src/v2
Persistence/export boundary: SQLite preserves user history, ordering, Run succession, provenance, notes, and messages. Scoped browser recovery storage retains unsent drafts and exact unknown-request identities; these cannot be reconstructed from server history.
Compatibility rule: Add versions without rewriting identity/history; retain every reader needed by supported databases and exports. The observed_browser_controls marker is a semantic progress hash domain, not an executable payload or authority. Retain sealed original tool receipts and the meaning of persisted progress counters when evolving its observation projection.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- thread-run-session-ledgers-writer (v0, v1, v2, v3, v4, write-new) at internal/application
- thread-local-recovery-writer (v1, write-new) at web/src/v2
Readers:
- thread-run-session-ledgers-reader (v0, v1, v2, v3, v4, active) at internal/store
- thread-local-recovery-reader (v1, active) at web/src/v2

52 active identifiers

context_memory.v1
continuity_context.v1
continuity_snapshot.v1
deterministic_id.v1
generated_handoff.v1
handoff_memory.v0
handoff_memory.v1
history_recall.v1
llm.item_stream.identity.v1
long_term_memory.v1
note_context.v1
observed_browser_controls.v1
operator_steering_revision_operation.v1
operator_steering_revision_request.v1
queue_edit.v1
queue_operation.v1
queue_revision_unchanged.v1
root_action_compatibility.v1
root_inbox_context.v1
root_lifecycle.v1
root_lifecycle.v2
run_creation_operation.v1
run_creation_request.v1
run_creation_request.v2
run_creation_request.v3
run_creation_request.v4
run_lifecycle_operation.v1
run_lifecycle_request.v1
run_progress_guard.v1
sealed_tool_progress.v1
session_archive.v1
session_continuity_node.v1
session_evidence_attachment_operation.v1
session_evidence_attachment_request.v1
session_grant.v1
session_grant_revoke.v1
session_tree.v1
task_goal.v1
thread_epoch_transition_operation.v1
thread_epoch_transition_request.v1
thread_lifecycle_operation.v1
thread_lifecycle_request.v1
thread_run_recovery_operation.v1
thread_run_recovery_request.v1
thread_summary_window.v1
thread_turn_epoch_transition_operation.v1
thread_turn_handoff_operation.v1
thread_turn_lifecycle_operation.v1
v2_creation_recovery.v1
v2_draft_document.v1
v2_native_clipboard_recovery.v1
v2_recovery.v1

1 retained retirement records

thread_turn_auto_recovery_operation.v1: Explicit new Thread messages close the prior failed product turn while retaining usable Run context. They no longer automatically terminate every failed Run and cancel accepted inputs.

thread-transcript-projection

Class: projection
Owner: Thread transcript maintainers
Source of truth: internal/store, internal/threadtranscript
Persistence/export boundary: Transcript pages regenerate while source messages, events, approvals, and delivery rows remain durable.
Compatibility rule: Rebuild with stable keyset order, replacement identity, redaction, and Run boundaries.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Immutable Thread/Run/Session messages, events, model/tool items, approvals, verification, checkpoints, and delivery rows.
Writers:
- thread-transcript-projection-writer (v1, write-current) at internal/threadtranscript
Readers:
- thread-transcript-projection-reader (v1, active) at internal/httpapi

1 active identifiers

thread_transcript.v1

tool-mutation-ledgers

Class: internal-durable
Owner: Tool gateway, file edit, Git, and mutation maintainers
Source of truth: internal/fileedit, internal/gitmutation, internal/store, internal/toolgateway
Persistence/export boundary: Tool intents, fingerprints, reviews, results, and Git/file receipts persist for replay and recovery.
Compatibility rule: Keep replay/conflict, approval, revision/generation fencing, and write-ahead/result bindings compatible.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- native-git-reviewed-authority-writer (v2, write-new) at internal/application/git_advanced_operation_authority.go
- native-github-review-authority-writer (v2, write-new) at internal/application/github_review_operation_authority.go
- tool-mutation-ledgers-writer (v1, write-current) at internal/application
Readers:
- native-git-reviewed-authority-reader (v2, active) at internal/application/git_advanced_operation_authority.go
- native-github-review-authority-reader (v2, active) at internal/application/github_review_operation_authority.go
- tool-mutation-ledgers-reader (v1, active) at internal/store

41 active identifiers

agent_code_file_edit_proposal.v1
agent_code_file_edit_source.v1
authorized-native-git.v2
file-operation-proposal.v1
file_edit_apply_operation.v1
file_edit_apply_request.v1
file_edit_revert_proposal.v1
file_mutation.v1
git-advanced-api.v1
git-advanced-authority.v1
git-advanced-capability.v1
git-advanced-preview.v1
git-advanced-receipt.v1
git-advanced-sequence.v1
git-advanced.v1
git-managed-worktree.v1
git-review-diff-evidence.v1
git_advanced_operation.v1
git_mutation_operation.v1
git_mutation_request.v1
git_remote_operation.v1
git_remote_request.v1
github-review-api.v1
github-review-capability.v1
github-review-connection.v1
github-review-device-flow.v1
github-review-provider.v1
github-review-receipt.v1
github-review-snapshot.v1
github-review-write.v1
github_review_write.v1
native-github-review-approval.v2
note_create.v1
repository_mutation.v1
repository_mutation_binding.v1
repository_remote.v1
repository_remote_binding.v1
thread_git.v1
thread_git_operation.v1
thread_git_request.v1
thread_pull_request.v1

ui-reference-testing-contracts

Class: projection
Owner: React workbench and visual-regression maintainers
Source of truth: cmd/visualdiff, scripts
Persistence/export boundary: Committed reference identities and generated D-drive test artifacts describe presentation evidence only and never grant runtime authority.
Compatibility rule: Rebuild staged baselines and visual differences from hash-pinned authoritative screenshots while preserving dimensions, masks, regions, and thresholds.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Hash- and dimension-pinned authoritative screenshots plus the committed visual-difference configuration and implementation.
Writers:
- ui-reference-testing-contracts-writer (v1, write-current) at scripts
Readers:
- ui-reference-testing-contracts-reader (v1, active) at cmd/visualdiff

4 active identifiers

traverse_ui_reference_baselines.v1
traverse_ui_staged_baselines.v1
traverse_ui_test_environment.v1
traverse_visual_diff.v1

workspace-repository-ledgers

Class: internal-durable
Owner: Workspace and repository maintainers
Source of truth: internal/repository, internal/store, internal/workspace
Persistence/export boundary: Workspace identity, repository bindings, checkpoints, remotes, worktrees, and ownership survive where declared.
Compatibility rule: Preserve root/commit identity, source binding, generation, and conflict refusal; retain durable readers.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- workspace-repository-ledgers-writer (v1, write-current) at internal/application
Readers:
- workspace-repository-ledgers-reader (v1, active) at internal/store

11 active identifiers

repository_commit_detail.v1
repository_history.v1
workspace_checkpoint_manual.v1
workspace_fork_operation.v1
workspace_fork_request.v1
workspace_image_operation.v1
workspace_image_request.v1
workspace_mutation_boundary.v1
workspace_mutation_boundary_request.v1
workspace_restore_operation.v1
workspace_restore_request.v1

Explicit test and golden allowlist

These identifiers remain inside the scan. Each exemption is bound to exact files; moving or adding an occurrence requires registry review.

Identifier	Kind	Exact sources	Reason
`TraverseBoard.LocalSandbox.Test.Host.v1`	`test-fixture`	`internal/sandbox/sbx_namespace_windows_test.go`, `internal/sandboxtest/null_device_windows.go`	Windows Local Sandbox disposable test-host marker.
`agent_completion.v2`	`test-fixture`	`internal/domain/agent_completion_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_descriptor.v2`	`test-fixture`	`internal/analyzer/descriptor_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_executable_format.v2`	`test-fixture`	`internal/analyzer/executable_format_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_executable_identity.v2`	`test-fixture`	`internal/analyzer/executable_identity_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_filesystem_boundary_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_immutable_handle_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_invocation.v2`	`test-fixture`	`internal/analyzer/invocation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_invocation_failure_vectors.v1`	`golden-vector`	`internal/analyzer/invocation_test.go`, `internal/analyzer/testdata/invocation_failure_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_invocation_outcome.v2`	`test-fixture`	`internal/analyzer/invocation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_invocation_preflight.v2`	`test-fixture`	`internal/analyzer/executable_identity_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_launch_plan.v2`	`test-fixture`	`internal/analyzer/launch_plan_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_low_privilege_context_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_operator_start_capability_contract.v2`	`test-fixture`	`internal/analyzer/operator_start_capability_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_product_adapter_admission_matrix.v2`	`test-fixture`	`internal/analyzer/product_adapter_admission_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_product_adapter_recovery_acceptance.v2`	`test-fixture`	`internal/analyzer/product_adapter_recovery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_product_adapter_threat_model.v2`	`test-fixture`	`internal/analyzer/product_adapter_threat_model_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_protocol.v2`	`test-fixture`	`analyzers/testdata/analyzer_protocol_v1_vectors.json`, `internal/analyzer/protocol_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_protocol_golden_vectors.v1`	`golden-vector`	`analyzers/fixture/tests/shared_vectors.rs`, `analyzers/testdata/analyzer_protocol_v1_vectors.json`, `internal/analyzer/golden_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_provenance_verification.v2`	`test-fixture`	`internal/analyzer/provenance_verification_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_release_candidate.v2`	`test-fixture`	`internal/analyzer/release_manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_result.v2`	`test-fixture`	`internal/analyzer/invocation_test.go`, `internal/analyzer/protocol_test.go`, `internal/analyzer/subprocess_conformance_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_result_stage_test.v1`	`test-fixture`	`internal/analyzer/result_staging_conformance_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_result_staging_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_sandbox_enforcement_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_sandbox_recovery_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_scope_limits_approval.v2`	`test-fixture`	`internal/analyzer/scope_approval_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_subprocess_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_validated_result_candidate.v2`	`test-fixture`	`internal/analyzer/result_candidate_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`archive.inspect.v1`	`test-fixture`	`internal/analyzer/protocol_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`archive.inventory.v1`	`test-fixture`	`analyzers/fixture/src/lib.rs`, `analyzers/testdata/archive_inventory_v1_vectors.json`, `internal/analyzer/descriptor.go`	Analyzer ZIP inventory is retained only for protocol/test conformance vectors.
`archive.zip.inventory.v1`	`test-fixture`	`analyzers/fixture/src/lib.rs`, `analyzers/testdata/archive_inventory_v1_vectors.json`, `internal/analyzer/descriptor.go`	Analyzer ZIP inventory implementation is retained only for protocol/test conformance.
`archive_inventory_golden_vectors.v1`	`golden-vector`	`analyzers/fixture/tests/shared_vectors.rs`, `analyzers/testdata/archive_inventory_v1_vectors.json`, `internal/analyzer/archive_golden_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`asm.v3`	`conformance-test`	`cmd/cyberagent-desktop/windows_resources_test.go`	Microsoft XML namespace suffix used only in Windows manifest conformance assertions; not a Traverse Board wire or persisted protocol.
`batch-mailbox.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`batch-owner-token.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`batch-receipt.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`batch-review.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`browser_key.v1`	`negative-version-fixture`	`internal/toolgateway/agent_browser_actions_test.go`	Agent browser v2 rejects the prior-version payload in an exact negative test; it is not a production Agent browser protocol.
`browser_navigate.v3`	`negative-version-fixture`	`internal/toolgateway/agent_browser_actions_test.go`	Agent browser v2 rejects the unsupported future-version payload in an exact negative test; it is not a production protocol.
`browser_network_containment_evidence.v0`	`test-fixture`	`internal/browserruntime/readiness_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`browser_network_containment_policy.v1`	`test-fixture`	`internal/browserruntime/readiness_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`browser_snapshot.v3`	`negative-version-fixture`	`internal/store/supervisor_tool_rejection_test.go`	Unsupported future snapshot version in an exact rejected-diagnostic negative test; never a production protocol.
`browser_type.v3`	`negative-version-fixture`	`internal/llm/tool_request_rejection_test.go`	Unsupported future type version in an exact redacted diagnostic negative test; never a production protocol.
`call.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`compatibility.v1`	`conformance-test`	`cmd/cyberagent-desktop/windows_resources_test.go`	Microsoft XML namespace suffix used only in Windows manifest conformance assertions; not a Traverse Board wire or persisted protocol.
`desktop_test_matrix.v2`	`test-fixture`	`scripts/desktop-test-matrix.ps1`	CI/Desktop test-matrix report identifier, not a product runtime protocol.
`detached_signature.v1`	`test-fixture`	`internal/analyzer/release_manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`diff.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker-standard-code.v2`	`test-fixture`	`internal/runner/command_runtime_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_container_plan_store_test.v1`	`test-fixture`	`internal/store/docker_container_plan_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_container_rehearsal_store_test.v1`	`test-fixture`	`internal/store/docker_container_rehearsal_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_lifecycle_test.v1`	`test-fixture`	`internal/sandbox/docker_container_lifecycle_ownership_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_observation_store_test.v1`	`test-fixture`	`internal/store/docker_observation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_sandbox_product_lifecycle_test.v1`	`test-fixture`	`internal/store/docker_sandbox_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`fake-browser-process.v1`	`test-fixture`	`internal/browserruntime/production_runtime_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`fixture.wrong.v1`	`negative-version-fixture`	`internal/analyzer/subprocess_conformance_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`foreign.v1`	`negative-version-fixture`	`internal/store/run_progress_browser_state_test.go`	Foreign receipt envelope in an exact sealed-progress rejection test; never a production protocol.
`full_cdp_session.v0`	`negative-version-fixture`	`internal/httpapi/full_cdp_session_control_test.go`	Unknown-version HTTP fixture retained to prove fail-closed Full CDP session decoding.
`full_cdp_session_close.v0`	`negative-version-fixture`	`internal/httpapi/full_cdp_session_control_test.go`	Unknown-version HTTP fixture retained to prove fail-closed Full CDP close decoding.
`generated_handoff.v2`	`negative-version-fixture`	`internal/application/thread_generated_compaction_integration_test.go`, `internal/contextmgr/generated_summary_test.go`	Unsupported generated summary version used only to verify rejection; not a production protocol.
`github-test.v1`	`test-fixture`	`internal/webevidence/service_source_connector_test.go`	Test connector identity used to verify bounded source search and snapshot replay; not a production connector.
`handoff_memory.v999`	`test-fixture`	`internal/contextmgr/continuity_summary_window_test.go`	Negative fixture verifies unknown summary versions fail closed.
`hn-test.v1`	`test-fixture`	`internal/webevidence/service_source_connector_test.go`	Test connector identity used to verify bounded source search and snapshot replay; not a production connector.
`linux_ephemeral_user_namespace.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_linux_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`linux_inherited_read_fd.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_linux_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`linux_user_namespace_landlock.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_linux_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`local-windows-lpac.v1`	`test-fixture`	`internal/application/standard_code_preset_test.go`, `internal/application/standard_code_supervisor_test.go`, `internal/commandruntimeadapter/adapter_test.go`, `internal/store/migration_v163_test.go`, `internal/store/migration_v180_test.go`, `internal/toolgateway/command_runtime_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`my-document.v1`	`test-fixture`	`internal/contextmgr/continuity_summary_window_test.go`	Opaque historical document fixture; its version is not a product protocol.
`next.good.v4`	`test-fixture`	`internal/protocolregistry/registry_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`ok.v1`	`test-fixture`	`internal/protocolregistry/registry_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`other.v1`	`negative-version-fixture`	`internal/application/session_message_submission_test.go`, `internal/httpapi/session_message_control_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`pelicanRide.items.v1`	`test-fixture`	`internal/application/testdata/workspace-coverage-phase3-boundary.json`, `internal/application/testdata/workspace-coverage-phase3.json`, `internal/application/testdata/workspace-read-pages.json`	Application storage key inside captured synthetic workspace content; not a Traverse runtime protocol or authority source.
`plan_delivery.v2`	`test-fixture`	`internal/domain/plan_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`project_config.v9`	`negative-version-fixture`	`internal/projectconfig/projectconfig_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`protocol_registry_example.v1`	`compatibility-example`	`internal/protocolregistry/registry_test.go`, `internal/protocolregistry/testdata/compatibility_v1.json`	Old v1 compatibility fixture retained to prove dual-read behavior.
`protocol_registry_example.v2`	`compatibility-example`	`internal/protocolregistry/registry_test.go`	Write-new v2 compatibility example identifier.
`protocol_registry_example.v3`	`negative-version-fixture`	`internal/protocolregistry/registry_test.go`	Unknown-version fixture retained to prove fail-closed decoding.
`public_model_stream.v1`	`test-fixture`	`web/src/v2/projection/agent-activity.test.ts`, `web/src/v2/projection/narrative.test.ts`	Test-only live-stream fixture; production presentation uses the registered current stream protocol.
`run_capability_readiness.v2`	`test-fixture`	`web/src/api/client.test.ts`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`run_creation.v2`	`test-fixture`	`internal/application/run_creation_test.go`, `internal/domain/run_creation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt.v2`	`test-fixture`	`internal/runner/testdata/evidence_set_receipt_compatibility_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt_compatibility_rejection_vectors.v1`	`golden-vector`	`internal/runner/evidence_set_receipt_compatibility_test.go`, `internal/runner/testdata/evidence_set_receipt_compatibility_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt_envelope_golden_vectors.v1`	`golden-vector`	`internal/runner/evidence_set_receipt_envelope_golden_test.go`, `internal/runner/testdata/evidence_set_receipt_envelope_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt_golden_vectors.v1`	`golden-vector`	`internal/runner/evidence_set_receipt_golden_test.go`, `internal/runner/testdata/evidence_set_receipt_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_exit_evidence.v2`	`test-fixture`	`internal/runner/testdata/evidence_set_receipt_compatibility_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`sandbox_docker_lifecycle_store_test.v1`	`test-fixture`	`internal/store/docker_container_lifecycle_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`sandbox_environment.v2`	`test-fixture`	`internal/httpapi/sandbox_environment_test.go`	Rejects an unsupported future settings protocol before any mutation.
`sandbox_output_fixture.v1`	`test-fixture`	`configs/sandbox-output-fixture.example.json`, `internal/app/sandbox_command_test.go`, `internal/sandbox/output_simulation.go`, `internal/sandbox/output_simulation_test.go`	Explicit sandbox output-simulation fixture input; it grants no production execution authority.
`scheduled-store-observation.v1`	`test-fixture`	`internal/store/scheduled_jobs_concurrency_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`skill.v2`	`test-fixture`	`internal/skills/manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`skill.v99`	`negative-version-fixture`	`internal/agentpackages/edge_cases_test.go`	Unknown legacy Skill version rejection fixture; never a supported production reader.
`slsa_provenance.v1`	`test-fixture`	`internal/analyzer/provenance_verification_test.go`, `internal/analyzer/release_manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`specialist_delegation.v2`	`test-fixture`	`internal/domain/specialist_delegation_test.go`, `internal/toolgateway/specialist_delegation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`standard_code_fixture_manifest.v1`	`test-fixture`	`internal/packagede2e/manifest.go`, `internal/packagede2e/testdata/fixture-manifest.json`	Packaged E2E fixed-repository fixture manifest.
`standard_code_fixture_set.v1`	`test-fixture`	`internal/packagede2e/manifest.go`, `scripts/standard-code-packaged-e2e.ps1`	Packaged E2E fixed-repository fixture set.
`standard_code_packaged_e2e.v1`	`test-fixture`	`internal/packagede2e/manifest.go`, `scripts/standard-code-packaged-e2e.ps1`	Packaged E2E harness report, not a shipped product protocol.
`standard_code_packaged_security_evidence.v1`	`conformance-test`	`internal/packagede2e/security_evidence.go`	Issue 181 packaged attack-matrix evidence; immutable release input but never runtime authority or the parent release verdict.
`standard_code_product_e2e.v1`	`test-fixture`	`internal/producte2e/model.go`	Issue #182 path-free packaged product evidence report, not a shipped product protocol.
`standard_code_product_launch.v1`	`test-fixture`	`internal/producte2e/model_test.go`, `internal/producte2e/producer.go`, `scripts/standard-code-product-e2e.ps1`	Issue #182 zero-argument candidate launch evidence.
`standard_code_product_runbook.v1`	`test-fixture`	`internal/producte2e/model.go`	Issue #182 candidate-bound operator evidence runbook.
`standard_code_product_session.v1`	`test-fixture`	`scripts/standard-code-product-e2e.ps1`	Local-only issue #182 packaged product session orchestration state.
`standard_code_release_gate.v1`	`conformance-test`	`internal/releasegate/model.go`	Issue #140 deterministic candidate-bound aggregate of independently validated bootstrap, product, and security evidence; it grants no runtime authority.
`standard_code_security_probe.v1`	`conformance-test`	`internal/desktop/standard_code_security_windows.go`	Fixed packaged-only Standard Code attack probe receipt; not a model-facing tool, arbitrary command entry, or capability grant.
`standard_code_security_recovery.v1`	`conformance-test`	`internal/desktop/standard_code_security_recovery_windows.go`	Fixed packaged-only Standard Code crash/restart evidence; contains hashes and bounded lifecycle facts but grants no runtime or release authority.
`standard_code_test_root.v1`	`test-fixture`	`internal/application/standard_code_supervisor_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`test-output.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`thread_summary_window.v99`	`test-fixture`	`internal/contextmgr/continuity_summary_window_test.go`	Negative fixture verifies unknown rolling window versions fail closed.
`ui-evidence-ci-launch.v1`	`test-fixture`	`internal/browserruntime/ui_evidence_runtime_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`ui-evidence-ci-smoke.v1`	`test-fixture`	`internal/browserruntime/ui_evidence_runtime_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`ui-evidence-ci-startup-diagnostic.v1`	`test-fixture`	`internal/browserruntime/ui_evidence_runtime_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`unknown.v1`	`negative-version-fixture`	`internal/analyzer/descriptor_test.go`, `web/src/api/queued-messages.test.ts`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`web-mode-test.v1`	`test-fixture`	`internal/application/web_permissions_integration_test.go`	Test connector identity for the real Supervisor search path across Ask, Auto, and cold Full; not a production protocol.
`web_search.v0`	`test-fixture`	`internal/toolgateway/web_evidence_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows-local-sandbox.v1`	`test-fixture`	`internal/application/command_runtime_test.go`, `internal/application/supervisor_tool_permission_test.go`, `internal/desktop/standard_code_security_ledger_windows_test.go`, `internal/store/supervisor_tool_registry_migration_test.go`, `internal/store/supervisor_tools_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_appcontainer.v1`	`test-fixture`	`internal/runner/command_runtime_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_appcontainer.windows_appcontainer_policy.v1`	`test-fixture`	`internal/store/migration_v131_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_inherited_read_handle.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_low_integrity_acl_staging.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_restricted_low_integrity_primary_token.v2`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`workspace-fork-crash-test.v1`	`test-fixture`	`internal/application/workspace_checkpoints_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`workspace-fork-drift-test.v1`	`test-fixture`	`internal/application/workspace_checkpoints_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.

v1 to v2 compatibility examples

Example	Old fixture	Readers	Writer	Unknown version	Retirement check
`dual-read-write-new`	`internal/protocolregistry/testdata/compatibility_v1.json`	`v1, v2`	`v2`	`fail-closed`	ValidateEvolution retains reader history and requires decision, migration or retention evidence, and rollback before durable retirement.

FilesExpand file tree

protocol-registry.md

Latest commit

History

protocol-registry.md

File metadata and controls

Classified protocol registry / 分级协议注册表

Registry summary

Families

activity-event-projection

agent-browser-supervisor-ledger

agent-scheduling-delivery-ledgers

analyzer-interchange

authority-approval-ledgers

browser-cdp-process-session

browser-ui-evidence-ledgers

capability-readiness-projection

cli-headless-contract

control-plane-ledgers

credential-provider-ledgers

desktop-risk-restart-session

desktop-web-presentation-state

docker-attach-process-session

exported-evidence-and-handoff

extension-package-contracts

http-openapi-contract

in-memory-token-session

lsp-process-session

mcp-interchange

operation-receipt-projection

process-runtime-lifecycle

project-configuration-contract

provider-stream-presentation

registry-governance-contract

release-and-packaging-contracts

report-summary-projections

sandbox-docker-lifecycle

sandbox-environment-settings

standard-code-delivery-ledger

supervisor-input-delivery-projection

supervisor-tool-rejection-diagnostics

thread-run-session-ledgers

thread-transcript-projection

tool-mutation-ledgers

ui-reference-testing-contracts

workspace-repository-ledgers

Explicit test and golden allowlist

v1 to v2 compatibility examples