Contextful specification
Each contract file states its clauses as list items under one ## section per operation, and each clause is addressed <contract>.<operation>.<subject>. The item carries an anchor at its full id, so store.fold.partial-snapshot lands on that clause. Each contract also has a guide that teaches it in prose and a generated card that lists its operations, error cases and bounds on one page.
Contracts
| File | Contract | Title | Covers |
|---|---|---|---|
00-corpus.md | corpus | Corpus law | The grammar the corpus obeys: addressing, anatomy, registration, reference, rationale, computed state. |
01-topology.md | topology | System topology | Execution, storage and query components, their shared contracts, build profiles, deployment processes, coordination and published hostnames. |
10-store.md | store | The store and its sync | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
11-snapshot.md | store | Snapshot corpora | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
12-time.md | store | Time bounds | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
13-replica.md | store | Replicas | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
14-drain.md | store | Unpushed runs | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
15-endpoint.md | store | Bucket endpoints and leases | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
16-collect.md | store | Bucket collection | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
17-merge.md | store | Bucket manifest merges | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
18-pull.md | store | Bucket pulls | Parquet parts, manifests and the catalog; snapshot commit, declaration, reserved columns, time bases, compaction; the bucket wire format, leases and replicas. |
20-read.md | read | The read face | View registration, the statement guard, retrieval and ranking, the tool surface and result shape; synthesized memory, revision, provenance and coverage. |
21-memory.md | read | Synthesized memory | View registration, the statement guard, retrieval and ranking, the tool surface and result shape; synthesized memory, revision, provenance and coverage. |
30-run.md | run | Durable runs | The journal, cursors, retry and cancellation; the pipeline declaration and landing sequence; deferred per-row work over landed rows. |
31-pipeline.md | run | Pipelines and the write path | The journal, cursors, retry and cancellation; the pipeline declaration and landing sequence; deferred per-row work over landed rows. |
32-derive.md | run | The derive tier | The journal, cursors, retry and cancellation; the pipeline declaration and landing sequence; deferred per-row work over landed rows. |
40-connector.md | connector | Connectors and the built-in sources | The component world, host-mediated capabilities, packaging and pinning, the built-in sources; credential references, hydration, redaction and rotation. |
41-secrets.md | connector | Outbound credentials | The component world, host-mediated capabilities, packaging and pinning, the built-in sources; credential references, hydration, redaction and rotation. |
42-drive-extensions.md | connector | Drive extensions | The component world, host-mediated capabilities, packaging and pinning, the built-in sources; credential references, hydration, redaction and rotation. |
50-authority.md | authority | Admission and authority | The subject, the delegation profile, admission, custody and revocation; the enforcement layers, row and column restriction, masking and inference zones. |
51-enforcement.md | authority | Enforcement and inference placement | The subject, the delegation profile, admission, custody and revocation; the enforcement layers, row and column restriction, masking and inference zones. |
60-visibility.md | disclosure | Source-faithful visibility | Mirrored source permissions and their freshness; aggregate release under a disclosure budget; the audit chain, erasure and the receipt. |
61-disclosure.md | disclosure | Aggregate disclosure | Mirrored source permissions and their freshness; aggregate release under a disclosure budget; the audit chain, erasure and the receipt. |
62-accountability.md | disclosure | Audit, erasure and the receipt | Mirrored source permissions and their freshness; aggregate release under a disclosure budget; the audit chain, erasure and the receipt. |
70-control-plane.md | surface | Cadence, dispatch and the operator plane | The schedule grammar, reconciler and bounded dispatch, the control document; the operator console, grounded answers and published answers. |
71-console.md | surface | The operator console | The schedule grammar, reconciler and bounded dispatch, the control document; the operator console, grounded answers and published answers. |
80-formal.md | assurance | The formal model | The proof package, theorems and proof gate, the differential harness; one home per capability, test placement, build gates and retrieval evaluation. |
81-engineering.md | assurance | Engineering gates and the quality harness | The proof package, theorems and proof gate, the differential harness; one home per capability, test placement, build gates and retrieval evaluation. |
82-consumer.md | assurance | Consumer compatibility | The proof package, theorems and proof gate, the differential harness; one home per capability, test placement, build gates and retrieval evaluation. |
83-gate.md | assurance | The gate and the release tag | The proof package, theorems and proof gate, the differential harness; one home per capability, test placement, build gates and retrieval evaluation. |
Guides
- System topology
- The store and its sync
- Connectors and credentials
- Runs, pipelines and derive
- Reading and memory
- Authority and enforcement
- Visibility, disclosure and accountability
- Operator surfaces
- Assurance
- Corpus law
Deployment
Topics
Cards
- Assurance
- Authority and enforcement
- Connectors and credentials
- Corpus law
- Visibility, disclosure and accountability
- Reading and memory
- Runs, pipelines and derive
- The store and its sync
- Operator surfaces
- System topology
Terms
Plan
Principles
P1An unknown or ineffective name refuses by name at the earliest knowable pointP2A refusal is typed, never reads as an empty result, and echoes only caller inputP3A misconfigured process refuses to start; one value has one sourceP4No partial, empty or torn state reads as completeP5Rows are reached only through the caller's registered relation; one implementation per capabilityP6Retry only what a retry can changeP7Gates fail the run rather than skipP8Clauses are addressed, status is computed from pins, and rationale lives in records
Contract ADRs
A-assuranceAssurance decisionsA-authorityAuthority and enforcement decisionsA-connectorConnectors and credentials decisionsA-corpusCorpus grammar decisionsA-disclosureVisibility, disclosure and accountability decisionsA-readReading and memory decisionsA-runRuns, pipelines and derive decisionsA-storeThe store and its sync decisionsA-surfaceOperator surfaces decisionsA-topologySystem topology decisions