feat(export): add stable corpus source identity (#453)

Author: tcballard

.decided/config.yaml

@@ -1,4 +1,6 @@
 repository_key: RAC
+corpus:
+  source: asdecided/core
 
 # External ticketing provider (ADR-087, ADR-093). Roadmap intent lives in the
 # corpus; execution is tracked in GitHub issues, linked from a live artifact's

CHANGELOG.md

@@ -10,6 +10,10 @@ details, release history over commit history.
   export contracts. `decided export --schema <viewer|documents|graph>` emits
   the packaged schema bytes offline, and CI now checks fixture and live-corpus
   exports for contract and field-set drift.
+- Added optional `corpus.source` configuration as the stable corpus provenance
+  identity shared by viewer, documents, and graph exports. Existing
+  repositories fall back to their lower-case `repository_key`; uninitialised
+  corpora retain the released directory-basename source value.
 
 ## v0.28.0 — 2026-08-09
 

decisions/decisions/adr-036-lore-product-identity.md

@@ -5,6 +5,11 @@ type: decision
 ---
 # ADR-036: Lore Product Identity
 
+> The current product, engine, and distribution naming in this historical
+> decision is superseded by ADR-132. Stable `RAC-*` artifact IDs and published
+> machine keys remain compatibility identifiers; current public surfaces use
+> AsDecided, `decided`, and `decided-mcp`.
+
 ## Status
 
 Accepted

decisions/decisions/adr-039-lore-server-identity.md

@@ -5,9 +5,9 @@ type: decision
 ---
 # ADR-039: Lore Server Identity
 
-> The public Registry identity in this historical decision is superseded by
-> ADR-124. Its `lore` handshake identity remains frozen only for the legacy MCP
-> compatibility path specified by ADR-121.
+> Current server and configuration identity is superseded by ADR-132, and the
+> public Registry identity is superseded by ADR-124. The `lore` handshake name
+> remains frozen only for the legacy MCP compatibility path in ADR-121.
 
 ## Status
 

decisions/decisions/adr-117-org-grounding-plane-topology.md

@@ -154,7 +154,7 @@ Copy the firm-wide ADRs into every child corpus.
 
 ## Related Requirements
 
-- rac-org-endpoint-wiring
+- org-endpoint-wiring
 
 ## Related Roadmaps
 

decisions/decisions/adr-132-asdecided-server-identity.md

@@ -37,6 +37,12 @@ integration and leaves agents with two competing names for the same service.
 - The `decided` CLI and `decided-mcp` server remain the public command surface.
   Compatibility state in old records does not create a supported `rac` command.
 
+These clauses supersede ADR-036's current product, engine, and distribution
+naming and ADR-039's current server identity. ADR-121 alone preserves the
+legacy `lore` handshake bytes. Durable `RAC-*` artifact IDs, published machine
+keys such as `rac_version`, and pre-cutover internal paths remain compatibility
+identifiers; they are not names for new public surfaces.
+
 ## Consequences
 
 Fresh installs and generated agent configuration now have one unambiguous
@@ -45,6 +51,40 @@ this decision; operators can migrate their keys explicitly, and the current
 docs show only the native names. The identity change is configuration-only and
 does not alter MCP wire semantics or the read-only serving boundary.
 
+## Code Constraints
+
+```yaml
+version: 1
+eligibility: eligible
+reason: "The generated server keys and current viewer guidance have stable source anchors."
+rules:
+  - id: scaffold-keeps-asdecided-local-key
+    kind: require_pattern
+    path_glob: "rust/rac-engine/src/scaffold.rs"
+    pattern: 'mcpServers.*asdecided.*decided-mcp'
+    message: "Generated local MCP configuration must retain the AsDecided key and native binary."
+  - id: scaffold-keeps-asdecided-org-key
+    kind: require_pattern
+    path_glob: "rust/rac-engine/src/scaffold.rs"
+    pattern: 'const ORG_SERVER_KEY: &str = "asdecided-org";'
+    message: "Generated organisation MCP configuration must retain the AsDecided key."
+  - id: scaffold-does-not-restore-retired-server-keys
+    kind: forbid_pattern
+    path_glob: "rust/rac-engine/src/scaffold.rs"
+    pattern: '(?i)\blore(?:-org)?\b'
+    message: "Generated MCP configuration must not restore retired Lore server keys."
+  - id: viewer-guidance-uses-decided-command
+    kind: forbid_pattern
+    path_glob: "rac-localview/VIEWER_CONTRACT.md"
+    pattern: '(?i)Lore export viewer|`rac export|RAC CLI'
+    message: "Current viewer guidance must use AsDecided and the decided command."
+```
+
+## Supersedes
+
+- adr-036
+- adr-039
+
 ## Related Decisions
 
 - ADR-117
@@ -54,4 +94,4 @@ does not alter MCP wire semantics or the read-only serving boundary.
 
 ## Related Requirements
 
-- rac-org-endpoint-wiring
+- org-endpoint-wiring

decisions/decisions/adr-133-single-direct-parent-federation.md

@@ -84,4 +84,4 @@ a separately ratified extension.
 
 ## Related Requirements
 
-- rac-parent-corpus-inheritance
+- parent-corpus-inheritance

decisions/decisions/adr-134-offline-pinned-parent-materialisation.md

@@ -103,4 +103,4 @@ operational manifest keeps the mechanism visible without making it an artifact.
 
 ## Related Requirements
 
-- rac-parent-corpus-inheritance
+- parent-corpus-inheritance

decisions/decisions/adr-135-corpus-source-global-identity.md

@@ -87,6 +87,6 @@ new pinned state of the same corpus.
 
 ## Related Requirements
 
-- rac-export-source-identity
-- rac-federated-resolution-provenance
-- rac-parent-corpus-inheritance
+- corpus-source-identity
+- federated-resolution-provenance
+- parent-corpus-inheritance

decisions/decisions/adr-136-qualified-cross-corpus-resolution.md

@@ -94,5 +94,5 @@ unambiguously source-aware.
 
 ## Related Requirements
 
-- rac-federated-resolution-provenance
-- rac-parent-corpus-inheritance
+- federated-resolution-provenance
+- parent-corpus-inheritance