Classified protocol registry / 分级协议注册表

This document is generated from protocols/registry.json. It describes compatibility governance only: it never grants runtime authority, capabilities, protocol deletion, data migration, or historical checksum changes.

Registry summary

Family	Class	Owner	Active IDs	Persisted/exported
activity-event-projection	`projection`	Run activity and HTTP maintainers	5	true
agent-scheduling-delivery-ledgers	`internal-durable`	Agent graph, scheduler, and batch-delivery maintainers	73	true
analyzer-interchange	`external-durable`	Analyzer contract maintainers	40	true
authority-approval-ledgers	`internal-durable`	Execution authority and approval maintainers	38	true
browser-cdp-process-session	`ephemeral`	Browser runtime maintainers	23	false
browser-ui-evidence-ledgers	`internal-durable`	Browser and UI evidence maintainers	41	true
capability-readiness-projection	`projection`	Application readiness maintainers	3	true
cli-headless-contract	`external-durable`	CLI and headless surface maintainers	2	true
control-plane-ledgers	`internal-durable`	Core Go control-plane maintainers	97	true
credential-provider-ledgers	`internal-durable`	Credential, provider, model-route, and pricing maintainers	17	true
desktop-risk-restart-session	`ephemeral`	Desktop shell lifecycle maintainers	1	false
desktop-web-presentation-state	`projection`	Desktop and React workbench maintainers	14	true
docker-attach-process-session	`ephemeral`	Docker runtime transport maintainers	1	false
exported-evidence-and-handoff	`external-durable`	Evidence, verification, report, and handoff maintainers	35	true
extension-package-contracts	`external-durable`	Skill, Plugin, Hook, and extension maintainers	40	true
http-openapi-contract	`external-durable`	HTTP/OpenAPI and generated-client maintainers	98	true
in-memory-token-session	`ephemeral`	Credential and bootstrap maintainers	1	false
lsp-process-session	`ephemeral`	Code intelligence maintainers	1	false
mcp-interchange	`external-durable`	MCP client/server maintainers	3	true
operation-receipt-projection	`projection`	Operation receipt maintainers	2	true
process-runtime-lifecycle	`internal-durable`	Command, model, terminal, and runner lifecycle maintainers	52	true
project-configuration-contract	`external-durable`	Project configuration and instruction maintainers	4	true
provider-stream-presentation	`ephemeral`	Model streaming and renderer maintainers	4	false
registry-governance-contract	`external-durable`	Protocol and Surface governance maintainers	2	true
release-and-packaging-contracts	`external-durable`	Desktop release and packaging maintainers	3	true
report-summary-projections	`projection`	Finding, repository, and summary maintainers	5	true
sandbox-docker-lifecycle	`internal-durable`	Sandbox and Docker lifecycle maintainers	196	true
standard-code-delivery-ledger	`external-durable`	Standard Code delivery and public projection maintainers	8	true
thread-run-session-ledgers	`internal-durable`	Thread, Run, Session, context, and message maintainers	37	true
thread-transcript-projection	`projection`	Thread transcript maintainers	1	true
tool-mutation-ledgers	`internal-durable`	Tool gateway, file edit, Git, and mutation maintainers	31	true
ui-reference-testing-contracts	`projection`	React workbench and visual-regression maintainers	4	true
workspace-repository-ledgers	`internal-durable`	Workspace and repository maintainers	9	true

Families

activity-event-projection

Class: projection
Owner: Run activity and HTTP maintainers
Source of truth: internal/runactivity, internal/store
Persistence/export boundary: Materialized or queried activity DTOs may persist, but durable Run/event rows remain authoritative.
Compatibility rule: Rebuild from durable Run and event rows while preserving stable order, high-water cursors, and redaction.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Durable Run, lifecycle, and redacted event rows in internal/store.
Writers:
- activity-event-projection-writer (v1, write-current) at internal/store
Readers:
- activity-event-projection-reader (v1, active) at internal/runactivity

5 active identifiers

operator_action_center.v1
operator_action_item.v1
run-event-poll.v1
run-events.v1
run_activity.v1

agent-scheduling-delivery-ledgers

Class: internal-durable
Owner: Agent graph, scheduler, and batch-delivery maintainers
Source of truth: internal/application, internal/domain, internal/store
Persistence/export boundary: SQLite retains agent ownership, attempts, dependencies, wakes, mailboxes, and delivery decisions.
Compatibility rule: Add versions without reinterpreting generations or exactly-once keys; retain old readers until migration or indefinite support is proven.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- agent-scheduling-delivery-ledgers-writer (v1, v2, write-new) at internal/application
Readers:
- agent-scheduling-delivery-ledgers-reader (v1, v2, active) at internal/store

73 active identifiers

agent-code-edit.v1
agent_admission_operation.v1
agent_admission_request.v1
agent_attempt.v1
agent_attempt_continue.v1
agent_attempt_crash.v1
agent_attempt_failure.v1
agent_attempt_operation.v1
agent_attempt_start.v1
agent_attempt_usage.v1
agent_completion.v1
agent_completion_operation.v1
agent_completion_request.v1
agent_dependency.v1
agent_dependency_edge_operation.v1
agent_dependency_edge_request.v1
agent_message_operation.v1
agent_message_request.v1
batch-deliveries-list.v1
batch-delivery-edit.v1
batch-delivery-mailbox-request.v1
batch-delivery-mailbox.v1
batch-delivery-merge-queue.v1
batch-delivery-merge-request.v1
batch-delivery-receipt-request.v1
batch-delivery-receipt.v1
batch-delivery-request.v1
batch-delivery-review-request.v1
batch-delivery-review.v1
batch-delivery-tools.v1
batch-delivery-workspace-tools.v1
batch-validation-output.v2
batch-validation-process.v1
batch_delivery_cancel.v1
batch_delivery_merge.v1
batch_delivery_prepare.v1
batch_delivery_reconcile.v1
batch_delivery_renew_owner.v1
batch_delivery_review_control.v1
child_task_admit.v1
child_task_dedup.v1
child_task_proposal.v1
child_task_proposals.v1
child_task_request.v1
child_task_review.v1
child_task_review_request.v1
delivery_checkpoint.v1
delivery_checkpoint_request.v1
delivery_source.v1
plan_delivery_proposal_request.v1
plan_delivery_selection_request.v1
readonly_fanout.v1
readonly_fanout_cancel.v1
readonly_fanout_capabilities.v1
readonly_fanout_execution_request.v1
readonly_fanout_executions.v1
readonly_fanout_finding.v1
readonly_fanout_model_input.v1
readonly_fanout_plan_request.v1
readonly_fanout_report.v1
readonly_fanout_shard.v1
readonly_fanout_snapshot.v1
run_wake_cancel_request.v1
run_wake_consumption.v1
run_wake_consumption_handoff.v1
run_wake_operation.v1
run_wake_schedule_request.v1
run_wake_worker.v1
specialist_delegation.v1
specialist_delegation_application_policy.v1
specialist_delegation_application_request.v1
specialist_delegation_request.v1
specialist_delegation_review.v1

analyzer-interchange

Class: external-durable
Owner: Analyzer contract maintainers
Source of truth: analyzers/fixture/src, analyzers/testdata, internal/analyzer
Persistence/export boundary: Analyzer descriptors, requests, results, release metadata, and evidence cross the Go/Rust or third-party boundary.
Compatibility rule: Write the newest reviewed format, dual-read supported old formats, keep shared vectors, and reject unknown versions.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- analyzer-interchange-writer (v1, write-current) at internal/analyzer
Readers:
- analyzer-interchange-reader (v1, active) at internal/analyzer

40 active identifiers

analyzer_artifact_candidate.v1
analyzer_descriptor.v1
analyzer_durable_start_request.v1
analyzer_embedded_wasi_execution.v1
analyzer_embedded_wasi_invocation_ownership.v1
analyzer_embedded_wasi_isolation_profile.v1
analyzer_embedded_wasi_module_assessment.v1
analyzer_embedded_wasi_release_decision.v1
analyzer_error.v1
analyzer_executable_format.v1
analyzer_executable_identity.v1
analyzer_execution_capability.v1
analyzer_execution_consumption.v1
analyzer_execution_record.v1
analyzer_invocation.v1
analyzer_invocation_outcome.v1
analyzer_invocation_preflight.v1
analyzer_launch_plan.v1
analyzer_launch_plan_review.v1
analyzer_operator_start_capability_contract.v1
analyzer_operator_start_capability_request.v1
analyzer_product_adapter_admission_matrix.v1
analyzer_product_adapter_recovery_acceptance.v1
analyzer_product_adapter_threat_model.v1
analyzer_protocol.v1
analyzer_provenance_statement.v1
analyzer_provenance_verification.v1
analyzer_release_allowlist.v1
analyzer_release_candidate.v1
analyzer_release_manifest.v1
analyzer_result.v1
analyzer_scope_limits_approval.v1
analyzer_start_intent.v1
analyzer_start_lifecycle_receipt.v1
analyzer_validated_result_candidate.v1
ed25519.v1
embedded_analyzer_execution_control.v1
embedded_analyzer_operator_request.v1
embedded_wazero_wasip1.v1
fixture.digest.v1

authority-approval-ledgers

Class: internal-durable
Owner: Execution authority and approval maintainers
Source of truth: internal/approval, internal/executionauth, internal/store
Persistence/export boundary: SQLite snapshots preserve permission, profile, interaction, approval, lease, and generation facts.
Compatibility rule: Authority changes are additive and fail closed; old readers remain for every supported stored snapshot.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- authority-approval-ledgers-writer (v1, write-current) at internal/application
Readers:
- authority-approval-ledgers-reader (v1, active) at internal/store

38 active identifiers

approval_grant_consumption.v1
approval_grant_operation_key.v1
approval_operation_key.v1
approval_record.v1
full-cdp-session-operation.v1
once_command.v1
once_command_approval.v1
once_command_policy.v1
once_command_request.v1
once_command_spec.v1
operator_steering_cancellation_operation.v1
operator_steering_cancellation_request.v1
operator_steering_operation.v1
operator_steering_request.v1
run_browser_cdp_permission_change_request.v1
run_browser_cdp_permission_operation.v1
run_execution_handoff_operation.v1
run_execution_handoff_request.v1
run_execution_interaction_change_request.v1
run_execution_interaction_operation.v1
run_execution_permission_browser_cdp_operation.v1
run_execution_permission_change_request.v1
run_execution_permission_operation.v1
run_execution_profile_change_request.v1
run_execution_profile_operation.v1
run_mode_operation.v1
run_network_authority_operation.v1
run_network_authority_request.v1
run_phase_change_request.v1
thread_execution_permission.v1
thread_execution_permission_browser_cdp_materialization_operation.v1
thread_execution_permission_browser_cdp_operation.v1
thread_execution_permission_change_request.v1
thread_execution_permission_current_run_operation.v1
thread_execution_permission_materialization_operation.v1
thread_execution_permission_operation.v1
thread_model_route_operation.v1
thread_model_route_request.v1

browser-cdp-process-session

Class: ephemeral
Owner: Browser runtime maintainers
Source of truth: internal/browserruntime
Persistence/export boundary: CDP requests and target handles exist only for one admitted browser generation.
Compatibility rule: Re-admit and rebind every request after restart; unknown versions fail closed.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Browser runtime restart tests create a fresh generation and never adopt prior CDP targets or request handles.
Writers:
- browser-cdp-process-session-writer (v1, write-current) at internal/browserruntime
Readers:
- browser-cdp-process-session-reader (v1, active) at internal/browserruntime

23 active identifiers

browser-action-tools.v1
browser_cdp_outcome.v1
browser_cdp_request.v1
browser_click.v1
browser_navigate.v1
browser_navigate_result.v1
browser_screenshot.v1
browser_screenshot_result.v1
browser_snapshot.v1
browser_status.v1
browser_status_result.v1
browser_target_scope.v1
browser_type.v1
full_cdp_cookie_access.v1
full_cdp_interaction.v1
full_cdp_page_snapshot.v1
full_cdp_request_capture.v1
full_cdp_runtime_receipt.v1
full_cdp_screenshot.v1
restricted_browser_dom_metadata.v1
restricted_browser_navigation.v1
restricted_browser_screenshot.v1
restricted_cdp_authorization.v1

browser-ui-evidence-ledgers

Class: internal-durable
Owner: Browser and UI evidence maintainers
Source of truth: internal/browserruntime, internal/store, internal/uievidence
Persistence/export boundary: SQLite and receipts retain launch, containment, ownership, cleanup, capture, and source-binding evidence.
Compatibility rule: Preserve generation, source, redaction, and cleanup bindings until durable migration or retention is proven.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- browser-full-cdp-authorization-writer (v2, write-current) at internal/browserruntime
- browser-ui-evidence-ledgers-writer (v1, write-current) at internal/browserruntime
Readers:
- browser-full-cdp-authorization-reader (v2, active) at internal/browserruntime
- browser-ui-evidence-ledgers-reader (v1, active) at internal/store

41 active identifiers

browser-launch-budget.v1
browser-launch-lease-owner-request.v1
browser-launch-owner.v1
browser-launch-preparation-operation.v1
browser-launch-preparation-request.v1
browser-launch-review-operation.v1
browser-launch-review-request.v1
browser-launch-reviewer-request.v1
browser-launch-reviewer.v1
browser-network-evidence-operation.v1
browser-network-evidence-request.v1
browser-network-review-operation.v1
browser-network-review-request.v1
browser-profile-marker.v1
browser-profile-owner.v1
browser-synthetic-process.v1
browser_executable_acceptance.v1
browser_executable_identity.v1
browser_full_cdp_authorization.v2
browser_full_cdp_start_authorization.v2
browser_launch_attempt.v1
browser_launch_lease.v1
browser_launch_review.v1
browser_lifecycle_observation.v1
browser_lifecycle_reconciliation.v1
browser_network_containment_plan.v1
browser_network_containment_review.v1
browser_process_exit.v1
browser_profile.v1
browser_profile_cleanup.v1
browser_profile_marker.v1
browser_profile_observation.v1
browser_profile_ownership.v1
browser_profile_reconciliation.v1
browser_profile_runtime_lease.v1
browser_publisher_policy.v1
browser_runtime_checkpoint.v1
browser_runtime_receipt.v1
browser_session_plan.v1
browser_start_authorization.v1
browser_start_spec.v1

2 retained retirement records

browser_full_cdp_authorization.v1: ADR 0106 replaced v1 with v2 exact execution-snapshot, activation-generation, and authorization-fence bindings.
browser_full_cdp_start_authorization.v1: ADR 0106 replaced v1 with v2 exact execution-snapshot, activation-generation, and authorization-fence bindings.

capability-readiness-projection

Class: projection
Owner: Application readiness maintainers
Source of truth: internal/application, internal/store
Persistence/export boundary: Readiness documents are non-authorizing status projections and may be persisted or exported.
Compatibility rule: Rebuild from current selections, leases, startup gates, backend evidence, and Go policy; capability_grant stays false.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Current persisted Run selections, leases, startup gates, backend evidence, and Go-owned policy.
Writers:
- capability-readiness-projection-writer (v1, v2, write-new) at internal/application
Readers:
- capability-readiness-projection-reader (v1, v2, active) at internal/httpapi

3 active identifiers

model_availability.v2
run_capability_readiness.v1
runtime_capabilities.v1

cli-headless-contract

Class: external-durable
Owner: CLI and headless surface maintainers
Source of truth: cmd/cyberagent, internal/headless
Persistence/export boundary: Machine-readable CLI/headless output and diagnostics are exported to scripts and operators.
Compatibility rule: Add fields and aliases compatibly; preserve command and exit categories and reject unknown machine formats.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- cli-headless-contract-writer (v1, write-current) at internal/headless
Readers:
- cli-headless-contract-reader (v1, active) at internal/headless

2 active identifiers

drydock-api.v1
headless.v1

control-plane-ledgers

Class: internal-durable
Owner: Core Go control-plane maintainers
Source of truth: internal/application, internal/domain, internal/store
Persistence/export boundary: Reviewed cross-domain separators and lifecycle records remain audit/recovery evidence.
Compatibility rule: Preserve identity, replay, generation, cleanup, and unknown-version refusal; narrower registered families take precedence.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- control-plane-ledgers-writer (v1, v2, v3, write-new) at internal/application
Readers:
- control-plane-ledgers-reader (v1, v2, v3, active) at internal/store

97 active identifiers

byte_identical.v1
direct_exe_signing.v1
direct_exe_signing_handoff.v1
direct_exe_signing_request.v1
drydock-checkpoint-request.v1
drydock-checkpoint.v1
drydock-cleanup-request.v1
drydock-create-request.v1
drydock-delivery-proposal.v1
drydock-delivery-request.v1
drydock-fork-request.v1
drydock-lifecycle-receipt.v1
drydock-reconcile.v1
drydock-rewind-request.v1
drydock-use-request.v1
drydock-workspace-trust.v1
drydock-workspace.v1
finding_acceptance_request.v1
finding_facts.v1
finding_fix_request.v1
finding_report.v1
finding_validation_request.v1
macos_portable_compatibility.v1
msix_manifest.v1
msix_manifest.v2
pe_authenticode_normalized.v1
provider_grounded_citation.v1
sanitized_host_environment.v1
scheduled-job-worker.v1
scheduled_job_create_request.v1
scheduled_job_observation.v1
scheduled_job_operation.v1
scheduled_job_transition_request.v1
script_process.v1
script_process_approval.v1
script_process_operation_key.v1
script_process_proposal.v1
script_run_create.v1
specialist_context.v1
specialist_lifecycle.v1
specialist_model_action.v1
specialist_model_cancellation_operation.v1
specialist_model_cancellation_request.v1
specialist_model_input.v1
specialist_operator_schedule_request.v1
specialist_skill_assignment.v1
specialist_skill_context.v1
standard-code-backend-readiness.v1
standard-code-command-result.v1
standard-code-command.v1
standard-code-docker-runner.v1
standard-code-docker-runner.v2
standard-code-git-metadata-mask.v1
standard_code_attack_matrix.v1
standard_code_command_failure.v1
standard_code_docker_capability.v1
standard_code_docker_operation.v1
standard_code_mutation_checkpoint.v1
standard_code_preset_operation.v1
standard_code_preset_request.v1
standard_code_supervisor.v1
standard_code_supervisor_intent.v1
standard_code_supervisor_ledger.v1
standard_code_supervisor_ledger_request.v1
standard_code_supervisor_snapshot.v1
structured_tool_operation.v1
supervisor_structured_tool.v1
supervisor_tool_call_id.v1
supervisor_tool_result.v1
untrusted_context.v1
user_terminal_policy.v1
user_terminal_session.v1
wazero_interpreter_wasip1.v1
web-evidence-tools.v1
web-ui.v1
web_citation.v1
web_evidence_operation.v1
web_evidence_presentation.v1
web_fetch.v1
web_fetch_authorization.v1
web_search.v1
windows-two-deliverable-contract.v1
windows_artifact_attestations.v1
windows_browser_job.v2
windows_portable_compatibility.v1
windows_release_completion.v1
windows_restricted_token_job_candidate.v1
windows_store_lifecycle.v1
windows_store_lifecycle_row.v1
windows_store_listing_readback.v1
windows_store_readback.v1
work_board.v1
work_item_create.v1
workspace-checkpoint-api.v1
workspace-checkpoint-transaction.v1
workspace-checkpoint.v1
yaml.v3

credential-provider-ledgers

Class: internal-durable
Owner: Credential, provider, model-route, and pricing maintainers
Source of truth: internal/credential, internal/modelregistry, internal/store
Persistence/export boundary: Secret-free references, provider diagnostics, qualifications, and declared snapshots survive restart.
Compatibility rule: Never weaken credential separation or qualification; retain readers for every supported stored snapshot.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- credential-provider-ledgers-writer (v1, write-current) at internal/application
Readers:
- credential-provider-ledgers-reader (v1, active) at internal/store

17 active identifiers

model_cancellation_operation.v1
model_cancellation_request.v1
model_context_window.v1
model_harness_probe.v1
provider-search-adapter.v1
provider-search-binding.v1
provider_definition.v1
provider_definition_collection.v1
provider_definition_control.v1
provider_definitions.v1
provider_native_search_binding.v1
provider_native_search_cache.v1
provider_native_search_declared_binding.v1
provider_native_search_negative.v1
provider_native_search_tool.v1
provider_registry_reload.v1
provider_request_runtime.v1

desktop-risk-restart-session

Class: ephemeral
Owner: Desktop shell lifecycle maintainers
Source of truth: cmd/cyberagent-desktop
Persistence/export boundary: The parent/helper readiness channel exists only for one same-executable restart attempt and grants no durable authority.
Compatibility rule: Fail closed unless the helper proves the expected parent and exact readiness protocol before the parent exits.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Every restart creates a fresh one-shot readiness channel; the helper cannot reuse a prior channel or carry authority across attempts.
Writers:
- desktop-risk-restart-session-writer (v1, write-current) at cmd/cyberagent-desktop
Readers:
- desktop-risk-restart-session-reader (v1, active) at cmd/cyberagent-desktop

1 active identifiers

desktop_risk_restart.ready.v1

desktop-web-presentation-state

Class: projection
Owner: Desktop and React workbench maintainers
Source of truth: internal/desktop, web/src
Persistence/export boundary: Renderer settings and Desktop DTO projections may be stored locally but grant no execution authority.
Compatibility rule: Rebuild or default from Go-owned state while preserving user presentation settings and redaction.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Go Application DTOs plus explicitly user-owned local presentation settings.
Writers:
- desktop-web-presentation-state-writer (v1, write-current) at web/src
Readers:
- desktop-web-presentation-state-reader (v1, active) at web/src

14 active identifiers

desktop_connection_bootstrap.v1
desktop_debug_terminal_agent_input.v1
desktop_file_selection.v1
desktop_risk_restart.v1
desktop_skill_package_dialog.v1
desktop_skill_package_install.v1
desktop_skill_package_preview.v1
desktop_user_terminal.v1
desktop_workspace_import.v1
desktop_workspace_launcher_list.v1
desktop_workspace_open.v1
prayu.run-navigation.v1
prayu.settings.sidebar.width.v1
prayu.sidebar.width.v1

docker-attach-process-session

Class: ephemeral
Owner: Docker runtime transport maintainers
Source of truth: internal/sandbox
Persistence/export boundary: Attach/stdin writers and live transport handles exist only in one process generation.
Compatibility rule: Restart closes live writers and requires fresh durable admission and container-generation checks.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Docker restart tests reject process-local stdin writers and require fresh durable admission.
Writers:
- docker-attach-process-session-writer (v2, write-current) at internal/sandbox
Readers:
- docker-attach-process-session-reader (v2, active) at internal/sandbox

1 active identifiers

command_runtime_stdin.v2

exported-evidence-and-handoff

Class: external-durable
Owner: Evidence, verification, report, and handoff maintainers
Source of truth: internal/report, internal/runner, internal/verification
Persistence/export boundary: Receipts, evidence envelopes, reports, snapshots, and handoffs are exported user/audit data.
Compatibility rule: Use additive formats or new versions, keep old fixtures/readers, preserve hashes/redaction, and reject unknown versions.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- exported-evidence-and-handoff-writer (v1, write-current) at internal/application
Readers:
- exported-evidence-and-handoff-reader (v1, active) at internal/report

35 active identifiers

browser_network_containment_evidence.v1
code_handoff_export.v1
context_memory_export.v1
finding_artifact_evidence.v1
finding_artifact_evidence_request.v1
finding_remediation_evidence.v1
finding_remediation_evidence_request.v1
github-review-evidence.v1
operator_verification_evidence_operation.v1
operator_verification_evidence_request.v1
operator_verification_plan.v1
operator_verification_plan_evidence_association.v1
operator_verification_plan_evidence_association_operation.v1
operator_verification_plan_evidence_association_request.v1
operator_verification_plan_inventory.v1
operator_verification_plan_item.v1
operator_verification_plan_item_snapshot_receipt_operation.v1
operator_verification_plan_item_snapshot_receipt_request.v1
operator_verification_plan_item_snapshot_receipt_review_operation.v1
operator_verification_plan_item_snapshot_receipt_review_request.v1
operator_verification_plan_operation.v1
operator_verification_plan_request.v1
runner_deadline_budget_evidence.v1
runner_evidence_set_receipt.v1
runner_exit_evidence.v1
runner_lifecycle_contract.v1
runner_lifecycle_timeline_evidence.v1
runner_resource_limit_evidence.v1
runner_runtime_evidence.v1
runner_termination_cause_evidence.v1
sandbox_backend_evidence.v1
sandbox_docker_production_evidence.v1
standard_code_command_evidence.v1
standard_code_tool_evidence.v1
web_evidence.v1

extension-package-contracts

Class: external-durable
Owner: Skill, Plugin, Hook, and extension maintainers
Source of truth: internal/hooks, internal/plugins, internal/skills
Persistence/export boundary: Signed packages, manifests, installations, and selections cross independently versioned extension boundaries.
Compatibility rule: Treat packages as untrusted; write new versions, retain bounded inert readers, and never weaken signature meaning.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- extension-package-contracts-writer (v1, v2, write-new) at internal/skills
Readers:
- extension-package-contracts-reader (v1, v2, active) at internal/skills

40 active identifiers

extension-control.v1
extension-inventory.v1
external_skill_context.v1
external_skill_guidance.v1
external_skill_selection.v1
external_skill_selection_intent.v1
external_skill_selection_operation.v1
external_specialist_skill_context.v1
plugin-installation.v1
plugin-publisher-trust.v1
plugin-signature.v1
plugin.v1
restricted-hooks.v1
skill.v1
skill_candidate.v1
skill_candidate_import.v1
skill_candidate_import_operation.v1
skill_candidate_import_request.v1
skill_candidate_proposal.v1
skill_candidate_request.v1
skill_candidate_review.v1
skill_candidate_review_operation.v1
skill_candidate_review_request.v1
skill_context.v1
skill_mode.v1
skill_package.v1
skill_package.v2
skill_package_install_operation.v1
skill_package_install_result.v1
skill_package_installation_intent.v1
skill_package_installation_intent.v2
skill_package_object.v1
skill_package_removal.v1
skill_package_removal_intent.v1
skill_package_remove_operation.v1
skill_package_signature.v1
skill_selection.v1
skill_selection_operation.v1
skill_selection_request.v1
specialist_instruction.v1

http-openapi-contract

Class: external-durable
Owner: HTTP/OpenAPI and generated-client maintainers
Source of truth: docs/openapi.json, internal/httpapi/openapi.go
Persistence/export boundary: Loopback HTTP DTO protocol values are exported through OpenAPI to generated TypeScript.
Compatibility rule: Keep API v1 additive, regenerate clients from Go, retain old readers, and reject unknown authority-bearing values.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- http-openapi-contract-writer (v0, v1, v2, write-new) at internal/httpapi/openapi.go
Readers:
- http-openapi-contract-reader (v0, v1, v2, active) at web/src/api

98 active identifiers

agent-code-tools.v1
agent_graph.v1
api.v1
approval_control.v1
approval_queue.v1
batch-delivery.v1
browser_cdp_permission_policy.v1
browser_network_containment_policy.v2
browser_safe_web_readiness.v1
code-intel-lsp.v1
code_handoff.v1
command-runtime.v2
context_provenance.v0
context_provenance.v1
debug-query.v1
diagnostic-bundle.v1
doctor-snapshot.v1
execution_interaction_policy.v1
execution_permission_policy.v1
execution_profile_policy.v1
file_edit_apply.v1
file_edit_change_set.v1
file_edit_proposal.v1
file_edit_proposal_recovery.v1
file_edit_review.v1
full_cdp_session.v1
full_cdp_session_close.v1
mode_policy.v1
model_harness.v1
model_harness_qualification.v1
model_route_catalog.v1
model_route_control.v1
operation_receipt.v1
operator_verification_evidence.v1
operator_verification_inventory.v1
operator_verification_plan_coverage.v1
operator_verification_plan_item_coverage.v1
operator_verification_plan_item_snapshot.v1
operator_verification_plan_item_snapshot_export.v1
operator_verification_plan_item_snapshot_receipt.v1
operator_verification_plan_item_snapshot_receipt_inventory.v1
operator_verification_plan_item_snapshot_receipt_review.v1
operator_verification_plan_item_snapshot_receipt_review_inventory.v1
plan_delivery.v1
plan_delivery_control.v1
provider_credential.v1
provider_diagnostic.v1
provider_search_readiness.v1
repository_commit_comparison.v1
repository_commit_file_preview.v1
repository_diff.v1
repository_file_history.v1
repository_state.v1
restricted-cdp-ui-evidence.v1
run_browser_cdp_permission.v1
run_creation.v1
run_execution_handoff.v1
run_execution_interaction.v1
run_execution_permission.v1
run_execution_profile.v1
run_lifecycle_control.v1
run_mode.v1
run_network_authority.v1
run_network_authority_control.v1
run_wake_consumer.v1
run_wake_control.v1
run_wake_intent.v1
run_wake_worker_health.v1
sandbox.readiness.v1
scheduled-job-authorization.v1
scheduled-job-control.v1
scheduled-job-round.v1
scheduled-job-worker-health.v1
scheduled-job.v1
session_evidence_attachment.v1
session_evidence_inventory.v1
session_message_submission.v1
session_steering_cancellation.v1
skill_package_installation.v1
standard_code_preset.v1
thread.v1
thread_activity_artifact.v1
thread_activity_detail.v2
thread_activity_summary.v1
thread_creation.v1
thread_export.v1
thread_lifecycle.v1
thread_message_submission.v1
thread_model_route.v1
thread_model_route_control.v1
thread_run_recovery.v1
ui-evidence-artifact.v1
ui-evidence-attempt.v1
ui-evidence-step.v1
ui-evidence.v1
windows_wfp_dynamic.v1
workspace_explorer.v1
workspace_search.v1

2 retained retirement records

thread_activity_detail.v1: The unreleased generic facts prototype was replaced by thread_activity_detail.v2 before merge so every public activity detail is a strict Go-owned discriminated union.
thread_activity_tool_facts.v1: The generic name/value facts projection was removed from every public Thread and Legacy Inspector HTTP response in favor of the closed thread_activity_detail.v2 discriminated union.

in-memory-token-session

Class: ephemeral
Owner: Credential and bootstrap maintainers
Source of truth: internal/credential, internal/desktop
Persistence/export boundary: Access tokens, bootstrap secrets, and process ownership tokens last one process generation.
Compatibility rule: Rotate on restart, never persist secret material, and never treat token metadata as authority.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Credential and Desktop restart tests rotate secrets and retain only non-secret metadata.
Writers:
- in-memory-token-session-writer (v1, write-current) at internal/desktop
Readers:
- in-memory-token-session-reader (v1, active) at internal/desktop

1 active identifiers

browser-profile-token.v1

lsp-process-session

Class: ephemeral
Owner: Code intelligence maintainers
Source of truth: internal/codeintel
Persistence/export boundary: LSP JSON-RPC sessions and qualified executable handles live for one language-server process.
Compatibility rule: Restart re-qualifies executable/config identity and rebinds Workspace URIs without inherited authority.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Code-intelligence restart tests establish a new process identity and discard prior JSON-RPC handles.
Writers:
- lsp-process-session-writer (v1, write-current) at internal/codeintel
Readers:
- lsp-process-session-reader (v1, active) at internal/codeintel

1 active identifiers

code-intel-config.v1

mcp-interchange

Class: external-durable
Owner: MCP client/server maintainers
Source of truth: internal/mcp, internal/toolgateway
Persistence/export boundary: MCP messages and local extension DTOs cross process/version boundaries; audit records may persist.
Compatibility rule: Follow upstream negotiation and bounded local parsing; negotiated capabilities never grant local Go authority.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- mcp-interchange-writer (v1, write-current) at internal/mcp
Readers:
- mcp-interchange-reader (v1, active) at internal/mcp

3 active identifiers

mcp-client-call-audit.v1
mcp-client-server.v1
mcp-client.v1

operation-receipt-projection

Class: projection
Owner: Operation receipt maintainers
Source of truth: internal/operationreceipt, internal/store
Persistence/export boundary: Receipt history is a content-free projection over authoritative operations and receipts.
Compatibility rule: Rebuild from domain operation/receipt rows; never infer transaction success or authority from the projection.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Authoritative domain operation rows and immutable receipts in internal/store.
Writers:
- operation-receipt-projection-writer (v1, write-current) at internal/operationreceipt
Readers:
- operation-receipt-projection-reader (v1, active) at internal/httpapi

2 active identifiers

operation_receipt_history.v1
operation_receipt_history_item.v1

process-runtime-lifecycle

Class: internal-durable
Owner: Command, model, terminal, and runner lifecycle maintainers
Source of truth: internal/application, internal/runner, internal/store
Persistence/export boundary: Durable intent, executable identity, bounds, cancellation, terminal state, and cleanup survive failure.
Compatibility rule: Preserve write-ahead intent, generation fencing, result binding, and cleanup; retain supported readers.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- process-runtime-lifecycle-writer (v1, v2, write-new) at internal/application
Readers:
- process-runtime-lifecycle-reader (v1, v2, active) at internal/store

52 active identifiers

application_docker_container_lifecycle_post_exit.v1
application_docker_container_lifecycle_running.v1
application_docker_container_lifecycle_start_authority.v1
command-runtime-adapter-authority.v1
command-runtime-batch.v2
command-runtime-policy.v2
command-runtime-result.v2
command-runtime-workspace-boundary.v1
command_runtime_adapter_generation.v1
command_runtime_docker_adapter_operation.v1
command_runtime_local_sandbox_operation.v1
command_runtime_operation.v2
command_runtime_request.v2
controlled_command_execution.v1
controlled_command_execution_intent.v1
controlled_command_execution_operation.v1
controlled_command_execution_policy.v1
controlled_command_plan.v1
controlled_command_policy.v1
controlled_command_proposal.v1
controlled_command_proposal_policy.v1
controlled_command_proposal_result.v1
controlled_command_proposal_review.v1
controlled_command_proposal_review_operation.v1
debug_terminal.v1
debug_terminal_agent_input.v1
debug_terminal_agent_input_audit_record.v1
debug_terminal_agent_input_operation.v1
debug_terminal_agent_input_policy.v1
host-process.v1
host_command.v1
host_command_execution.v1
host_command_execution_intent.v1
host_command_execution_operation.v1
host_command_execution_policy.v1
host_command_execution_receipt.v1
host_command_policy.v1
host_command_proposal.v1
host_command_proposal_execution_operation.v1
host_command_proposal_result.v1
host_command_proposal_review_operation.v1
host_command_review.v1
once_execution.v1
risk_escalation.v1
risk_escalation_execution.v1
risk_escalation_invalidation.v1
risk_escalation_policy.v1
risk_escalation_result.v1
risk_escalation_resume.v1
terminal_agent_input_audit.v1
terminal_agent_input_bridge.v1
terminal_input_lease.v1

project-configuration-contract

Class: external-durable
Owner: Project configuration and instruction maintainers
Source of truth: configs, internal/projectconfig
Persistence/export boundary: .prayu configuration, instruction precedence, and fingerprints persist in user projects and automation.
Compatibility rule: Use deterministic dual-read for path/precedence changes, reject conflicts, and keep old-project fixtures.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- project-configuration-contract-writer (v1, write-current) at internal/projectconfig
Readers:
- project-configuration-contract-reader (v1, active) at internal/projectconfig

4 active identifiers

prayu.locale.v1
project_config.v1
project_instruction_guidance.v1
project_instruction_snapshot.v1

provider-stream-presentation

Class: ephemeral
Owner: Model streaming and renderer maintainers
Source of truth: internal/llm, web/src
Persistence/export boundary: Provider deltas and pending renderer cards last only until durable reconciliation.
Compatibility rule: Discard incomplete deltas on restart, redact private reasoning, and reconcile only by durable item identity.
Retirement gate (restart-non-persistence): Restart tests prove no handle, token, stream, or authority is adopted; Runtime metadata cannot substitute for a fresh admission; Shutdown and crash recovery discard process-local state
Restart proof: Streaming tests discard unmatched deltas/cards and reconstruct presentation from durable items after restart.
Writers:
- provider-stream-presentation-writer (v1, v3, write-new) at internal/llm
Readers:
- provider-stream-presentation-reader (v1, v3, active) at web/src

4 active identifiers

llm.item_stream.v1
model_public_commentary.v1
model_public_stream.v3
model_public_stream_poll.v1

registry-governance-contract

Class: external-durable
Owner: Protocol and Surface governance maintainers
Source of truth: docs/convergence/surface-registry.json, internal/protocolregistry, internal/surfacegovernance, protocols
Persistence/export boundary: The versioned registry is committed review metadata and generated documentation, never runtime authority.
Compatibility rule: Evolve the schema additively, retain historical reader records, compare against the Git baseline, and fail closed on unknown fields.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- registry-governance-contract-writer (v1, write-current) at internal/protocolregistry
- surface-tier-registry-writer (v1, write-current) at internal/surfacegovernance
Readers:
- registry-governance-contract-reader (v1, active) at internal/protocolregistry
- surface-tier-registry-reader (v1, active) at internal/surfacegovernance

2 active identifiers

protocol-family-registry.v1
surface-tier-registry.v1

release-and-packaging-contracts

Class: external-durable
Owner: Desktop release and packaging maintainers
Source of truth: internal/buildinfo, packaging, scripts
Persistence/export boundary: Release manifests, identities, checksums, SBOMs, and compatibility documents are exported artifacts.
Compatibility rule: Historical artifacts are immutable; identity changes require upgrade/downgrade evidence and reader retention.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- release-and-packaging-contracts-writer (v1, write-current) at scripts
Readers:
- release-and-packaging-contracts-reader (v1, active) at internal/buildinfo

3 active identifiers

portable_build_diagnostic.v1
portable_release_metadata.v1
portable_zip_manifest.v1

report-summary-projections

Class: projection
Owner: Finding, repository, and summary maintainers
Source of truth: internal/report, internal/store
Persistence/export boundary: Generated summaries may be exported or cached while findings, Git objects, and evidence stay authoritative.
Compatibility rule: Rebuild from content-addressed sources and preserve annotations, ordering, and redaction.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Content-addressed findings, evidence, Git objects, installations, and accepted review decisions.
Writers:
- report-summary-projections-writer (v1, write-current) at internal/report
Readers:
- report-summary-projections-reader (v1, active) at internal/httpapi

5 active identifiers

external_skill_projection.v1
finding_report_projection.v1
price_snapshot.v1
price_snapshot_list.v1
sandbox_docker_input_projection.v1

sandbox-docker-lifecycle

Class: internal-durable
Owner: Sandbox and Docker lifecycle maintainers
Source of truth: internal/sandbox, internal/store
Persistence/export boundary: Admission, plan, intent, observation, ownership, output, and cleanup records persist across restart.
Compatibility rule: Preserve container/image/config identity, lease fencing, external-effect order, and cleanup-first recovery.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- sandbox-docker-lifecycle-writer (v1, v2, write-new) at internal/sandbox
Readers:
- sandbox-docker-lifecycle-reader (v1, v2, active) at internal/store

196 active identifiers

docker-standard-code.v1
docker_sandbox_admission.v1
docker_sandbox_admission_operation.v1
docker_sandbox_admission_request.v1
docker_sandbox_cancel_operation.v1
docker_sandbox_cancellation.v1
docker_sandbox_denial.v1
docker_sandbox_launch.v1
docker_sandbox_lifecycle_key.v1
docker_sandbox_output_commit_operation.v1
docker_sandbox_receipt.v1
docker_sandbox_runtime_epoch.v1
docker_sandbox_start.v1
docker_sandbox_start_operation.v1
docker_sandbox_start_request.v1
drydock_lifecycle.v1
linux_namespace_seccomp_candidate.v1
local-host-path.v1
local-profile-proof.v1
local-profile.v1
local-readiness-binding.v1
local-readiness-owner.v1
local-root-identity.v1
local-run-owner.v1
local-runtime-generation.v1
local_sandbox_execution.v1
local_sandbox_owner.v1
local_sandbox_readiness.v1
sandbox_authorization.v1
sandbox_backend_evidence_item.v1
sandbox_backend_evidence_operation.v1
sandbox_backend_evidence_request.v1
sandbox_backend_handshake.v1
sandbox_cleanup.v1
sandbox_cleanup_operation.v1
sandbox_cleanup_request.v1
sandbox_container_identity.v1
sandbox_docker_capability_observation.v1
sandbox_docker_command.v1
sandbox_docker_container_attempt_completion.v1
sandbox_docker_container_attempt_failure.v1
sandbox_docker_container_authority.v1
sandbox_docker_container_cleanup.v1
sandbox_docker_container_cleanup_checkpoint.v1
sandbox_docker_container_config.v1
sandbox_docker_container_control.v1
sandbox_docker_container_control_matrix.v1
sandbox_docker_container_id.v1
sandbox_docker_container_inspection.v1
sandbox_docker_container_lifecycle_observation.v1
sandbox_docker_container_lifecycle_ownership.v1
sandbox_docker_container_lifecycle_probe_request.v1
sandbox_docker_container_lifecycle_probe_result.v1
sandbox_docker_container_name.v1
sandbox_docker_container_plan.v1
sandbox_docker_container_plan_operation.v1
sandbox_docker_container_plan_request.v1
sandbox_docker_container_rehearsal.v1
sandbox_docker_container_rehearsal_attempt.v1
sandbox_docker_container_rehearsal_operation.v1
sandbox_docker_container_rehearsal_request.v1
sandbox_docker_container_spec.v1
sandbox_docker_container_stage.v1
sandbox_docker_container_stage_checkpoint.v1
sandbox_docker_daemon_identity.v1
sandbox_docker_fake_write_step.v1
sandbox_docker_host_input_carrier_name.v1
sandbox_docker_host_input_handoff.v1
sandbox_docker_host_input_handoff_intent.v1
sandbox_docker_host_input_handoff_operation.v1
sandbox_docker_host_input_handoff_request.v1
sandbox_docker_host_input_handoff_requirement.v1
sandbox_docker_host_input_requirement.v1
sandbox_docker_host_input_staging.v1
sandbox_docker_host_input_staging_intent.v1
sandbox_docker_host_input_staging_operation.v1
sandbox_docker_host_input_volume_name.v1
sandbox_docker_host_mounts.v1
sandbox_docker_image_observation.v1
sandbox_docker_label_plan.v1
sandbox_docker_lifecycle_action.v1
sandbox_docker_lifecycle_intent.v1
sandbox_docker_lifecycle_operation.v1
sandbox_docker_lifecycle_receipt.v1
sandbox_docker_lifecycle_transition.v1
sandbox_docker_log_capture.v1
sandbox_docker_mount_plan.v1
sandbox_docker_network_plan.v1
sandbox_docker_observation.v1
sandbox_docker_observation_binding.v1
sandbox_docker_observation_item.v1
sandbox_docker_observation_operation.v1
sandbox_docker_observation_request.v1
sandbox_docker_orphan_plan.v1
sandbox_docker_output_commit.v1
sandbox_docker_output_staging.v1
sandbox_docker_process_lifecycle_blueprint.v1
sandbox_docker_production_environment.v1
sandbox_docker_production_environment.v2
sandbox_docker_production_evidence_attempt.v1
sandbox_docker_production_evidence_attempt_failure.v1
sandbox_docker_production_evidence_attempt_result.v1
sandbox_docker_production_evidence_capability.v1
sandbox_docker_production_evidence_daemon_identity.v1
sandbox_docker_production_evidence_harness_intent.v1
sandbox_docker_production_evidence_harness_inventory.v1
sandbox_docker_production_evidence_harness_label.v1
sandbox_docker_production_evidence_harness_reconciliation.v1
sandbox_docker_production_evidence_harness_resource.v1
sandbox_docker_production_evidence_harness_result.v1
sandbox_docker_production_evidence_image.v1
sandbox_docker_production_evidence_operation.v1
sandbox_docker_production_evidence_reconciliation.v1
sandbox_docker_production_evidence_review.v1
sandbox_docker_production_evidence_review_operation.v1
sandbox_docker_production_evidence_suite.v1
sandbox_docker_readiness_fingerprint.v1
sandbox_docker_readonly_endpoint.v1
sandbox_docker_resource_plan.v1
sandbox_docker_run_proposal.v1
sandbox_docker_runtime_input_application_failure.v1
sandbox_docker_runtime_input_application_intent.v1
sandbox_docker_runtime_input_application_operation.v1
sandbox_docker_runtime_input_application_request.v1
sandbox_docker_runtime_input_application_result.v1
sandbox_docker_runtime_input_archive_root.v1
sandbox_docker_runtime_input_carrier_name.v1
sandbox_docker_runtime_input_projection_content.v1
sandbox_docker_runtime_input_projection_item.v1
sandbox_docker_runtime_input_projection_operation.v1
sandbox_docker_runtime_input_projection_plan.v1
sandbox_docker_runtime_input_relative_path.v1
sandbox_docker_runtime_input_resource_cleanup_failure.v1
sandbox_docker_runtime_input_resource_cleanup_intent.v1
sandbox_docker_runtime_input_resource_cleanup_operation.v1
sandbox_docker_runtime_input_resource_cleanup_result.v1
sandbox_docker_runtime_input_resource_descriptor.v1
sandbox_docker_runtime_input_resource_inspection.v1
sandbox_docker_runtime_input_resource_inspection_operation.v1
sandbox_docker_runtime_input_target.v1
sandbox_docker_runtime_input_target_container.v1
sandbox_docker_runtime_input_target_inspection.v1
sandbox_docker_runtime_input_volume.v1
sandbox_docker_runtime_input_volume_name.v1
sandbox_docker_secret_plan.v1
sandbox_docker_start_gate_authority.v1
sandbox_docker_start_gate_review.v1
sandbox_docker_start_gate_review_operation.v1
sandbox_docker_termination_plan.v1
sandbox_docker_write_transaction.v1
sandbox_docker_write_transport.v1
sandbox_docker_write_transport_step.v1
sandbox_execution.v1
sandbox_execution_cancel.v1
sandbox_execution_cancel_operation.v1
sandbox_execution_cancel_request.v1
sandbox_execution_candidate.v1
sandbox_execution_candidate.v2
sandbox_execution_candidate_operation.v1
sandbox_execution_candidate_request.v1
sandbox_execution_candidate_request.v2
sandbox_execution_operation.v1
sandbox_execution_request.v1
sandbox_fake_container_config.v1
sandbox_fake_daemon_capabilities.v1
sandbox_fake_mount_plan.v1
sandbox_fake_network_plan.v1
sandbox_fake_orphan_plan.v1
sandbox_fake_output_artifact.v1
sandbox_fake_resource_plan.v1
sandbox_fake_secret_plan.v1
sandbox_fake_termination_plan.v1
sandbox_host_input_archive_path.v1
sandbox_host_input_artifact_payloads.v1
sandbox_host_input_bundle.v1
sandbox_host_input_directory.v1
sandbox_host_input_source_snapshot.v1
sandbox_input_artifact_bindings.v1
sandbox_intent_request.v1
sandbox_manifest.v1
sandbox_manifest_operation.v1
sandbox_mount_binding.v1
sandbox_output_capture_plan.v1
sandbox_output_export_plan.v1
sandbox_output_locator.v1
sandbox_output_simulation.v1
sandbox_output_simulation_operation.v1
sandbox_output_simulation_request.v1
sandbox_policy_decision.v1
sandbox_preflight.v1
sandbox_preflight_operation.v1
sandbox_preflight_request.v1
sandbox_scope_binding.v1
sandbox_validation.v1
sandbox_workspace_binding.v1
windows_appcontainer_policy.v1

standard-code-delivery-ledger

Class: external-durable
Owner: Standard Code delivery and public projection maintainers
Source of truth: internal/application, internal/standardcodedelivery, internal/store
Persistence/export boundary: SQLite retains immutable metadata-only receipts; HTTP, CLI, Desktop, Code Handoff, GitHub Review, and final completion export the same freshness-aware projection.
Compatibility rule: Retain old readers and exact receipt, revision, Diff, Checkpoint, Artifact, binding, redaction, and stale semantics until every stored receipt is migrated or indefinitely supported.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every stored receipt and exported consumer is migrated or retained; Receipt hashes and historical conclusions remain independently verifiable
Writers:
- standard-code-delivery-ledger-writer (v1, write-current) at internal/store
Readers:
- standard-code-delivery-go-reader (v1, active) at internal/standardcodedelivery
- standard-code-delivery-http-reader (v1, active) at internal/httpapi
- standard-code-delivery-web-reader (v1, active) at web/src

8 active identifiers

command-runtime-backend-generation.v1
standard-code-backend.v1
standard-code-delivery-reason.v1
standard-code-workspace-revision.v1
standard_code_delivery.v1
standard_code_delivery_record.v1
standard_code_delivery_request.v1
standard_code_supervisor_finish.v1

thread-run-session-ledgers

Class: internal-durable
Owner: Thread, Run, Session, context, and message maintainers
Source of truth: internal/session, internal/store
Persistence/export boundary: SQLite preserves user history, ordering, Run succession, provenance, notes, and messages.
Compatibility rule: Add versions without rewriting identity/history; retain every reader needed by supported databases and exports.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- thread-run-session-ledgers-writer (v0, v1, v2, v3, write-new) at internal/application
Readers:
- thread-run-session-ledgers-reader (v0, v1, v2, v3, active) at internal/store

37 active identifiers

context_memory.v1
continuity_context.v1
continuity_snapshot.v1
deterministic_id.v1
handoff_memory.v0
handoff_memory.v1
llm.item_stream.identity.v1
long_term_memory.v1
note_context.v1
root_action_compatibility.v1
root_inbox_context.v1
root_lifecycle.v1
root_lifecycle.v2
run_creation_operation.v1
run_creation_request.v1
run_creation_request.v2
run_creation_request.v3
run_lifecycle_operation.v1
run_lifecycle_request.v1
run_progress_guard.v1
session_archive.v1
session_continuity_node.v1
session_evidence_attachment_operation.v1
session_evidence_attachment_request.v1
session_grant.v1
session_grant_revoke.v1
session_tree.v1
thread_epoch_transition_operation.v1
thread_epoch_transition_request.v1
thread_lifecycle_operation.v1
thread_lifecycle_request.v1
thread_run_recovery_operation.v1
thread_run_recovery_request.v1
thread_turn_auto_recovery_operation.v1
thread_turn_epoch_transition_operation.v1
thread_turn_handoff_operation.v1
thread_turn_lifecycle_operation.v1

thread-transcript-projection

Class: projection
Owner: Thread transcript maintainers
Source of truth: internal/store, internal/threadtranscript
Persistence/export boundary: Transcript pages regenerate while source messages, events, approvals, and delivery rows remain durable.
Compatibility rule: Rebuild with stable keyset order, replacement identity, redaction, and Run boundaries.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Immutable Thread/Run/Session messages, events, model/tool items, approvals, verification, checkpoints, and delivery rows.
Writers:
- thread-transcript-projection-writer (v1, write-current) at internal/threadtranscript
Readers:
- thread-transcript-projection-reader (v1, active) at internal/httpapi

1 active identifiers

thread_transcript.v1

tool-mutation-ledgers

Class: internal-durable
Owner: Tool gateway, file edit, Git, and mutation maintainers
Source of truth: internal/fileedit, internal/gitmutation, internal/store, internal/toolgateway
Persistence/export boundary: Tool intents, fingerprints, reviews, results, and Git/file receipts persist for replay and recovery.
Compatibility rule: Keep replay/conflict, approval, revision/generation fencing, and write-ahead/result bindings compatible.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- tool-mutation-ledgers-writer (v1, write-current) at internal/application
Readers:
- tool-mutation-ledgers-reader (v1, active) at internal/store

31 active identifiers

file_edit_apply_operation.v1
file_edit_apply_request.v1
file_mutation.v1
git-advanced-api.v1
git-advanced-authority.v1
git-advanced-capability.v1
git-advanced-preview.v1
git-advanced-receipt.v1
git-advanced-sequence.v1
git-advanced.v1
git-managed-worktree.v1
git-review-diff-evidence.v1
git_advanced_operation.v1
git_mutation_operation.v1
git_mutation_request.v1
git_remote_operation.v1
git_remote_request.v1
github-review-api.v1
github-review-capability.v1
github-review-connection.v1
github-review-device-flow.v1
github-review-provider.v1
github-review-receipt.v1
github-review-snapshot.v1
github-review-write.v1
github_review_write.v1
note_create.v1
repository_mutation.v1
repository_mutation_binding.v1
repository_remote.v1
repository_remote_binding.v1

ui-reference-testing-contracts

Class: projection
Owner: React workbench and visual-regression maintainers
Source of truth: cmd/visualdiff, scripts
Persistence/export boundary: Committed reference identities and generated D-drive test artifacts describe presentation evidence only and never grant runtime authority.
Compatibility rule: Rebuild staged baselines and visual differences from hash-pinned authoritative screenshots while preserving dimensions, masks, regions, and thresholds.
Retirement gate (rebuild-from-source): Rebuild source remains retained and independently verifiable; Replacement preserves ordering, cursor, invalidation, and redaction behavior; Retirement evidence proves a complete rebuild from the named source
Rebuild source: Hash- and dimension-pinned authoritative screenshots plus the committed visual-difference configuration and implementation.
Writers:
- ui-reference-testing-contracts-writer (v1, write-current) at scripts
Readers:
- ui-reference-testing-contracts-reader (v1, active) at cmd/visualdiff

4 active identifiers

traverse_ui_reference_baselines.v1
traverse_ui_staged_baselines.v1
traverse_ui_test_environment.v1
traverse_visual_diff.v1

workspace-repository-ledgers

Class: internal-durable
Owner: Workspace and repository maintainers
Source of truth: internal/repository, internal/store, internal/workspace
Persistence/export boundary: Workspace identity, repository bindings, checkpoints, remotes, worktrees, and ownership survive where declared.
Compatibility rule: Preserve root/commit identity, source binding, generation, and conflict refusal; retain durable readers.
Retirement gate (migration-or-retention): ADR-backed retirement decision and rollback path; Old-version fixtures remain until every supported source is migrated or retained; Reader history is append-only; retirement requires migration or retention evidence
Writers:
- workspace-repository-ledgers-writer (v1, write-current) at internal/application
Readers:
- workspace-repository-ledgers-reader (v1, active) at internal/store

9 active identifiers

repository_commit_detail.v1
repository_history.v1
workspace_checkpoint_manual.v1
workspace_fork_operation.v1
workspace_fork_request.v1
workspace_mutation_boundary.v1
workspace_mutation_boundary_request.v1
workspace_restore_operation.v1
workspace_restore_request.v1

Explicit test and golden allowlist

These identifiers remain inside the scan. Each exemption is bound to exact files; moving or adding an occurrence requires registry review.

Identifier	Kind	Exact sources	Reason
`TraverseBoard.LocalSandbox.Test.Host.v1`	`test-fixture`	`internal/sandboxtest/null_device_windows.go`	Windows Local Sandbox disposable test-host marker.
`agent_completion.v2`	`test-fixture`	`internal/domain/agent_completion_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_descriptor.v2`	`test-fixture`	`internal/analyzer/descriptor_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_executable_format.v2`	`test-fixture`	`internal/analyzer/executable_format_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_executable_identity.v2`	`test-fixture`	`internal/analyzer/executable_identity_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_filesystem_boundary_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_immutable_handle_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_invocation.v2`	`test-fixture`	`internal/analyzer/invocation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_invocation_failure_vectors.v1`	`golden-vector`	`internal/analyzer/invocation_test.go`, `internal/analyzer/testdata/invocation_failure_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_invocation_outcome.v2`	`test-fixture`	`internal/analyzer/invocation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_invocation_preflight.v2`	`test-fixture`	`internal/analyzer/executable_identity_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_launch_plan.v2`	`test-fixture`	`internal/analyzer/launch_plan_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_low_privilege_context_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_operator_start_capability_contract.v2`	`test-fixture`	`internal/analyzer/operator_start_capability_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_product_adapter_admission_matrix.v2`	`test-fixture`	`internal/analyzer/product_adapter_admission_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_product_adapter_recovery_acceptance.v2`	`test-fixture`	`internal/analyzer/product_adapter_recovery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_product_adapter_threat_model.v2`	`test-fixture`	`internal/analyzer/product_adapter_threat_model_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_protocol.v2`	`test-fixture`	`analyzers/testdata/analyzer_protocol_v1_vectors.json`, `internal/analyzer/protocol_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_protocol_golden_vectors.v1`	`golden-vector`	`analyzers/fixture/tests/shared_vectors.rs`, `analyzers/testdata/analyzer_protocol_v1_vectors.json`, `internal/analyzer/golden_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_provenance_verification.v2`	`test-fixture`	`internal/analyzer/provenance_verification_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_release_candidate.v2`	`test-fixture`	`internal/analyzer/release_manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_result.v2`	`test-fixture`	`internal/analyzer/invocation_test.go`, `internal/analyzer/protocol_test.go`, `internal/analyzer/subprocess_conformance_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_result_stage_test.v1`	`test-fixture`	`internal/analyzer/result_staging_conformance_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_result_staging_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_sandbox_enforcement_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_sandbox_recovery_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_scope_limits_approval.v2`	`test-fixture`	`internal/analyzer/scope_approval_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`analyzer_subprocess_conformance.test.v1`	`conformance-test`	`internal/analyzer/product_adapter_admission.go`	Named analyzer test-conformance evidence source; production admission treats it as non-authorizing.
`analyzer_validated_result_candidate.v2`	`test-fixture`	`internal/analyzer/result_candidate_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`archive.inspect.v1`	`test-fixture`	`internal/analyzer/protocol_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`archive.inventory.v1`	`test-fixture`	`analyzers/fixture/src/lib.rs`, `analyzers/testdata/archive_inventory_v1_vectors.json`, `internal/analyzer/descriptor.go`	Analyzer ZIP inventory is retained only for protocol/test conformance vectors.
`archive.zip.inventory.v1`	`test-fixture`	`analyzers/fixture/src/lib.rs`, `analyzers/testdata/archive_inventory_v1_vectors.json`, `internal/analyzer/descriptor.go`	Analyzer ZIP inventory implementation is retained only for protocol/test conformance.
`archive_inventory_golden_vectors.v1`	`golden-vector`	`analyzers/fixture/tests/shared_vectors.rs`, `analyzers/testdata/archive_inventory_v1_vectors.json`, `internal/analyzer/archive_golden_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`batch-mailbox.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`batch-owner-token.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`batch-receipt.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`batch-review.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`browser_network_containment_evidence.v0`	`test-fixture`	`internal/browserruntime/readiness_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`browser_network_containment_policy.v1`	`test-fixture`	`internal/browserruntime/readiness_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`call.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`controlled_command_proposal.v2`	`test-fixture`	`internal/toolgateway/controlled_command_proposal_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`desktop_test_matrix.v2`	`test-fixture`	`scripts/desktop-test-matrix.ps1`	CI/Desktop test-matrix report identifier, not a product runtime protocol.
`detached_signature.v1`	`test-fixture`	`internal/analyzer/release_manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`diff.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker-standard-code.v2`	`test-fixture`	`internal/runner/command_runtime_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_container_plan_store_test.v1`	`test-fixture`	`internal/store/docker_container_plan_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_container_rehearsal_store_test.v1`	`test-fixture`	`internal/store/docker_container_rehearsal_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_lifecycle_test.v1`	`test-fixture`	`internal/sandbox/docker_container_lifecycle_ownership_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_observation_store_test.v1`	`test-fixture`	`internal/store/docker_observation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`docker_sandbox_product_lifecycle_test.v1`	`test-fixture`	`internal/store/docker_sandbox_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`fake-browser-process.v1`	`test-fixture`	`internal/browserruntime/production_runtime_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`fixture.wrong.v1`	`negative-version-fixture`	`internal/analyzer/subprocess_conformance_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`full_cdp_session.v0`	`negative-version-fixture`	`internal/httpapi/full_cdp_session_control_test.go`	Unknown-version HTTP fixture retained to prove fail-closed Full CDP session decoding.
`full_cdp_session_close.v0`	`negative-version-fixture`	`internal/httpapi/full_cdp_session_control_test.go`	Unknown-version HTTP fixture retained to prove fail-closed Full CDP close decoding.
`linux_ephemeral_user_namespace.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_linux_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`linux_inherited_read_fd.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_linux_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`linux_user_namespace_landlock.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_linux_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`local-windows-lpac.v1`	`test-fixture`	`internal/application/standard_code_preset_test.go`, `internal/application/standard_code_supervisor_test.go`, `internal/commandruntimeadapter/adapter_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`next.good.v4`	`test-fixture`	`internal/protocolregistry/registry_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`ok.v1`	`test-fixture`	`internal/protocolregistry/registry_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`other.v1`	`negative-version-fixture`	`internal/application/session_message_submission_test.go`, `internal/httpapi/session_message_control_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`plan_delivery.v2`	`test-fixture`	`internal/domain/plan_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`project_config.v9`	`negative-version-fixture`	`internal/projectconfig/projectconfig_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`protocol_registry_example.v1`	`compatibility-example`	`internal/protocolregistry/registry_test.go`, `internal/protocolregistry/testdata/compatibility_v1.json`	Old v1 compatibility fixture retained to prove dual-read behavior.
`protocol_registry_example.v2`	`compatibility-example`	`internal/protocolregistry/registry_test.go`	Write-new v2 compatibility example identifier.
`protocol_registry_example.v3`	`negative-version-fixture`	`internal/protocolregistry/registry_test.go`	Unknown-version fixture retained to prove fail-closed decoding.
`public_model_stream.v1`	`test-fixture`	`web/src/v2/projection/narrative.test.ts`	Test-only live-stream fixture; production presentation uses the registered current stream protocol.
`run_capability_readiness.v2`	`test-fixture`	`web/src/api/client.test.ts`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`run_creation.v2`	`test-fixture`	`internal/application/run_creation_test.go`, `internal/domain/run_creation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt.v2`	`test-fixture`	`internal/runner/testdata/evidence_set_receipt_compatibility_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt_compatibility_rejection_vectors.v1`	`golden-vector`	`internal/runner/evidence_set_receipt_compatibility_test.go`, `internal/runner/testdata/evidence_set_receipt_compatibility_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt_envelope_golden_vectors.v1`	`golden-vector`	`internal/runner/evidence_set_receipt_envelope_golden_test.go`, `internal/runner/testdata/evidence_set_receipt_envelope_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_evidence_set_receipt_golden_vectors.v1`	`golden-vector`	`internal/runner/evidence_set_receipt_golden_test.go`, `internal/runner/testdata/evidence_set_receipt_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`runner_exit_evidence.v2`	`test-fixture`	`internal/runner/testdata/evidence_set_receipt_compatibility_vectors.json`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`sandbox_docker_lifecycle_store_test.v1`	`test-fixture`	`internal/store/docker_container_lifecycle_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`sandbox_output_fixture.v1`	`test-fixture`	`configs/sandbox-output-fixture.example.json`, `internal/app/sandbox_command_test.go`, `internal/sandbox/output_simulation.go`, `internal/sandbox/output_simulation_test.go`	Explicit sandbox output-simulation fixture input; it grants no production execution authority.
`scheduled-store-observation.v1`	`test-fixture`	`internal/store/scheduled_jobs_concurrency_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`skill.v2`	`test-fixture`	`internal/skills/manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`slsa_provenance.v1`	`test-fixture`	`internal/analyzer/provenance_verification_test.go`, `internal/analyzer/release_manifest_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`specialist_delegation.v2`	`test-fixture`	`internal/domain/specialist_delegation_test.go`, `internal/toolgateway/specialist_delegation_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`specialist_instruction.v2`	`test-fixture`	`internal/domain/agent_context_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`standard_code_fixture_manifest.v1`	`test-fixture`	`internal/packagede2e/manifest.go`, `internal/packagede2e/testdata/fixture-manifest.json`	Packaged E2E fixed-repository fixture manifest.
`standard_code_fixture_set.v1`	`test-fixture`	`internal/packagede2e/manifest.go`, `scripts/standard-code-packaged-e2e.ps1`	Packaged E2E fixed-repository fixture set.
`standard_code_packaged_e2e.v1`	`test-fixture`	`internal/packagede2e/manifest.go`, `scripts/standard-code-packaged-e2e.ps1`	Packaged E2E harness report, not a shipped product protocol.
`standard_code_packaged_security_evidence.v1`	`conformance-test`	`internal/packagede2e/security_evidence.go`	Issue 181 packaged attack-matrix evidence; immutable release input but never runtime authority or the parent release verdict.
`standard_code_product_e2e.v1`	`test-fixture`	`internal/producte2e/model.go`	Issue #182 path-free packaged product evidence report, not a shipped product protocol.
`standard_code_product_launch.v1`	`test-fixture`	`internal/producte2e/model_test.go`, `internal/producte2e/producer.go`, `scripts/standard-code-product-e2e.ps1`	Issue #182 zero-argument candidate launch evidence.
`standard_code_product_runbook.v1`	`test-fixture`	`internal/producte2e/model.go`	Issue #182 candidate-bound operator evidence runbook.
`standard_code_product_session.v1`	`test-fixture`	`scripts/standard-code-product-e2e.ps1`	Local-only issue #182 packaged product session orchestration state.
`standard_code_release_gate.v1`	`conformance-test`	`internal/releasegate/model.go`	Issue #140 deterministic candidate-bound aggregate of independently validated bootstrap, product, and security evidence; it grants no runtime authority.
`standard_code_security_probe.v1`	`conformance-test`	`internal/desktop/standard_code_security_windows.go`	Fixed packaged-only Standard Code attack probe receipt; not a model-facing tool, arbitrary command entry, or capability grant.
`standard_code_security_recovery.v1`	`conformance-test`	`internal/desktop/standard_code_security_recovery_windows.go`	Fixed packaged-only Standard Code crash/restart evidence; contains hashes and bounded lifecycle facts but grants no runtime or release authority.
`standard_code_test_root.v1`	`test-fixture`	`internal/application/standard_code_supervisor_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`test-output.v1`	`test-fixture`	`internal/store/batch_delivery_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`ui-evidence-ci-launch.v1`	`test-fixture`	`internal/browserruntime/ui_evidence_runtime_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`ui-evidence-ci-smoke.v1`	`test-fixture`	`internal/browserruntime/ui_evidence_runtime_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`ui-evidence-ci-startup-diagnostic.v1`	`test-fixture`	`internal/browserruntime/ui_evidence_runtime_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`unknown.v1`	`negative-version-fixture`	`internal/analyzer/descriptor_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`web_search.v0`	`test-fixture`	`internal/toolgateway/web_evidence_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows-local-sandbox.v1`	`test-fixture`	`internal/application/command_runtime_test.go`, `internal/application/supervisor_tool_permission_test.go`, `internal/store/supervisor_tool_registry_migration_test.go`, `internal/store/supervisor_tools_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_appcontainer.v1`	`test-fixture`	`internal/runner/command_runtime_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_appcontainer.windows_appcontainer_policy.v1`	`test-fixture`	`internal/store/migration_v131_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_inherited_read_handle.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_low_integrity_acl_staging.v1`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`windows_restricted_low_integrity_primary_token.v2`	`test-fixture`	`internal/analyzer/isolation_boundary_conformance_windows_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`workspace-fork-crash-test.v1`	`test-fixture`	`internal/application/workspace_checkpoints_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.
`workspace-fork-drift-test.v1`	`test-fixture`	`internal/application/workspace_checkpoints_test.go`	Test-only or golden/negative-vector identifier; exact source binding prevents production classification.

v1 to v2 compatibility examples

Example	Old fixture	Readers	Writer	Unknown version	Retirement check
`dual-read-write-new`	`internal/protocolregistry/testdata/compatibility_v1.json`	`v1, v2`	`v2`	`fail-closed`	ValidateEvolution retains reader history and requires decision, migration or retention evidence, and rollback before durable retirement.

Navigation Menu

Uh oh!

Classified protocol registry / 分级协议注册表

Registry summary

Families

activity-event-projection

agent-scheduling-delivery-ledgers

analyzer-interchange

authority-approval-ledgers

browser-cdp-process-session

browser-ui-evidence-ledgers

capability-readiness-projection

cli-headless-contract

control-plane-ledgers

credential-provider-ledgers

desktop-risk-restart-session

desktop-web-presentation-state

docker-attach-process-session

exported-evidence-and-handoff

extension-package-contracts

http-openapi-contract

in-memory-token-session

lsp-process-session

mcp-interchange

operation-receipt-projection

process-runtime-lifecycle

project-configuration-contract

provider-stream-presentation

registry-governance-contract

release-and-packaging-contracts

report-summary-projections

sandbox-docker-lifecycle

standard-code-delivery-ledger

thread-run-session-ledgers

thread-transcript-projection

tool-mutation-ledgers

ui-reference-testing-contracts

workspace-repository-ledgers

Explicit test and golden allowlist

v1 to v2 compatibility examples

Uh oh!

FilesExpand file tree

protocol-registry.md

Latest commit

History

protocol-registry.md

File metadata and controls

Classified protocol registry / 分级协议注册表

Registry summary

Families

activity-event-projection

agent-scheduling-delivery-ledgers

analyzer-interchange

authority-approval-ledgers

browser-cdp-process-session

browser-ui-evidence-ledgers

capability-readiness-projection

cli-headless-contract

control-plane-ledgers

credential-provider-ledgers

desktop-risk-restart-session

desktop-web-presentation-state

docker-attach-process-session

exported-evidence-and-handoff

extension-package-contracts

http-openapi-contract

in-memory-token-session

lsp-process-session

mcp-interchange

operation-receipt-projection

process-runtime-lifecycle

project-configuration-contract

provider-stream-presentation

registry-governance-contract

release-and-packaging-contracts

report-summary-projections

sandbox-docker-lifecycle

standard-code-delivery-ledger

thread-run-session-ledgers

thread-transcript-projection

tool-mutation-ledgers

ui-reference-testing-contracts

workspace-repository-ledgers

Explicit test and golden allowlist

v1 to v2 compatibility examples