Principles and architecture decisions

• A-assurance — Assurance decisions
• A-authority — Authority and enforcement decisions
• A-connector — Connectors and credentials decisions
• A-corpus — Corpus grammar decisions
• A-disclosure — Visibility, disclosure and accountability decisions
• A-read — Reading and memory decisions
• A-run — Runs, pipelines and derive decisions
• A-store — The store and its sync decisions
• A-surface — Operator surfaces decisions
• A-topology — System topology decisions
• P1 — An unknown or ineffective name refuses by name at the earliest knowable point
• P2 — A refusal is typed, never reads as an empty result, and echoes only caller input
• P3 — A misconfigured process refuses to start; one value has one source
• P4 — No partial, empty or torn state reads as complete
• P5 — Rows are reached only through the caller's registered relation; one implementation per capability
• P6 — Retry only what a retry can change
• P7 — Gates fail the run rather than skip
• P8 — Clauses are addressed, status is computed from pins, and rationale lives in records