{
  "verifiedOn": "2026-11-04",
  "scope": "Public orchestration, governance, handler, recovery, operational and installation contracts in pinned main; relevant unmerged PRs are separate. Internal helpers are not advertised as customer features.",
  "availabilityLabels": {
    "local": "Local example",
    "contract": "Contract check",
    "installation": "Installation required",
    "preview": "Commercial preview",
    "docs-only": "Docs only \u2014 unavailable in pinned main",
    "proposal": "Unmerged proposal"
  },
  "features": [
    {
      "id": "dag",
      "name": "DAG dependencies",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "PhaseDef"
      },
      "cliFamily": null
    },
    {
      "id": "scopes",
      "name": "Root, shard and fan-in scopes",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "PhaseDef"
      },
      "cliFamily": null
    },
    {
      "id": "outcomes",
      "name": "Named outcomes and branching",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#routing",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "PhaseDef"
      },
      "cliFamily": null
    },
    {
      "id": "rework",
      "name": "Bounded rework and input overrides",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#routing",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "PhaseDef"
      },
      "cliFamily": null
    },
    {
      "id": "workflow-format",
      "name": "JSON and YAML definitions",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "PhaseDef"
      },
      "cliFamily": null
    },
    {
      "id": "sync",
      "name": "Synchronous Lambda phases",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#example",
      "availability": "local",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/dispatch.rs",
        "needle": "DispatchTarget"
      },
      "cliFamily": null
    },
    {
      "id": "async-queue",
      "name": "Asynchronous queue phases",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#example",
      "availability": "local",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/dispatch.rs",
        "needle": "DispatchTarget"
      },
      "cliFamily": null
    },
    {
      "id": "lane-routing",
      "name": "Named lanes and FIFO grouping",
      "group": "Execution",
      "guide": "/docs/advanced/execution/",
      "example": "/docs/advanced/execution/#example",
      "availability": "local",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/dispatch.rs",
        "needle": "DispatchTarget"
      },
      "cliFamily": null
    },
    {
      "id": "phase-timeout",
      "name": "Phase timeout precedence",
      "group": "Execution",
      "guide": "/docs/advanced/timeouts-retries/",
      "example": "/docs/advanced/timeouts-retries/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "SlaPolicy"
      },
      "cliFamily": null
    },
    {
      "id": "retry-attempts",
      "name": "Bounded worker attempts",
      "group": "Execution",
      "guide": "/docs/advanced/timeouts-retries/",
      "example": "/docs/advanced/timeouts-retries/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "SlaPolicy"
      },
      "cliFamily": null
    },
    {
      "id": "coordination-ttl",
      "name": "Coordination TTL versus timeouts",
      "group": "Execution",
      "guide": "/docs/advanced/timeouts-retries/",
      "example": "/docs/advanced/timeouts-retries/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/workflow_def.rs",
        "needle": "SlaPolicy"
      },
      "cliFamily": null
    },
    {
      "id": "watchdog",
      "name": "Watchdog and stalled-work recovery",
      "group": "Execution",
      "guide": "/docs/advanced/timeouts-retries/",
      "example": "/docs/advanced/timeouts-retries/#failure",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/watchdog.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "dlq",
      "name": "Exhausted attempts and DLQ handling",
      "group": "Execution",
      "guide": "/docs/advanced/timeouts-retries/",
      "example": "/docs/advanced/timeouts-retries/#failure",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/watchdog.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "duration-wait",
      "name": "Durable timer waits",
      "group": "Durable work",
      "guide": "/docs/advanced/durable-waits/",
      "example": "/docs/advanced/durable-waits/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/durable_wait.rs",
        "needle": "DurableWaitKind"
      },
      "cliFamily": null
    },
    {
      "id": "callback-wait",
      "name": "External callback waits",
      "group": "Durable work",
      "guide": "/docs/advanced/durable-waits/",
      "example": "/docs/advanced/durable-waits/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/durable_wait.rs",
        "needle": "DurableWaitKind"
      },
      "cliFamily": null
    },
    {
      "id": "wait-expiry",
      "name": "Wait expiry and timeout outcomes",
      "group": "Durable work",
      "guide": "/docs/advanced/durable-waits/",
      "example": "/docs/advanced/durable-waits/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/durable_wait.rs",
        "needle": "DurableWaitKind"
      },
      "cliFamily": null
    },
    {
      "id": "early-callback",
      "name": "Early callback buffering",
      "group": "Durable work",
      "guide": "/docs/advanced/durable-waits/",
      "example": "/docs/advanced/durable-waits/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/durable_wait.rs",
        "needle": "DurableWaitKind"
      },
      "cliFamily": null
    },
    {
      "id": "wait-replay",
      "name": "Callback replay and tenant checks",
      "group": "Durable work",
      "guide": "/docs/advanced/durable-waits/",
      "example": "/docs/advanced/durable-waits/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/durable_wait.rs",
        "needle": "DurableWaitKind"
      },
      "cliFamily": null
    },
    {
      "id": "dispatch-intent",
      "name": "Durable async dispatch intent",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "AsyncDispatchIntentRecord"
      },
      "cliFamily": null
    },
    {
      "id": "callback-auth",
      "name": "Authenticated generation-bound callbacks",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "AsyncDispatchIntentRecord"
      },
      "cliFamily": null
    },
    {
      "id": "ambiguous-dispatch",
      "name": "Ambiguous dispatch and status lookup",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "AsyncDispatchIntentRecord"
      },
      "cliFamily": null
    },
    {
      "id": "async-retry",
      "name": "Async backoff and retry generations",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "AsyncDispatchIntentRecord"
      },
      "cliFamily": null
    },
    {
      "id": "async-cancel",
      "name": "Cancellation and late callbacks",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "AsyncDispatchIntentRecord"
      },
      "cliFamily": null
    },
    {
      "id": "async-capacity",
      "name": "Release worker capacity while waiting",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "AsyncDispatchIntentRecord"
      },
      "cliFamily": null
    },
    {
      "id": "agent-context",
      "name": "Versioned durable agent context",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#context",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "DurableAgentContext"
      },
      "cliFamily": null
    },
    {
      "id": "artifact-offload",
      "name": "Large-artifact offload and integrity",
      "group": "Durable work",
      "guide": "/docs/advanced/async-callbacks/",
      "example": "/docs/advanced/async-callbacks/#context",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/async_execution.rs",
        "needle": "DurableAgentContext"
      },
      "cliFamily": null
    },
    {
      "id": "budget-reserve",
      "name": "Pre-dispatch budget reservations",
      "group": "Governance",
      "guide": "/docs/advanced/budgets/",
      "example": "/docs/advanced/budgets/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "BudgetRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "budget-settle",
      "name": "Actual usage settlement and refunds",
      "group": "Governance",
      "guide": "/docs/advanced/budgets/",
      "example": "/docs/advanced/budgets/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "BudgetRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "hard-advisory",
      "name": "Hard versus advisory budgets",
      "group": "Governance",
      "guide": "/docs/advanced/budgets/",
      "example": "/docs/advanced/budgets/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "BudgetRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "fixed-money",
      "name": "Fixed-point currency accounting",
      "group": "Governance",
      "guide": "/docs/advanced/budgets/",
      "example": "/docs/advanced/budgets/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "BudgetRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "usage-meters",
      "name": "Token, call and compute meters",
      "group": "Governance",
      "guide": "/docs/advanced/budgets/",
      "example": "/docs/advanced/budgets/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "BudgetRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "budget-scope",
      "name": "Hierarchical scope and reset rules",
      "group": "Governance",
      "guide": "/docs/advanced/budgets/",
      "example": "/docs/advanced/budgets/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "BudgetRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "exposure",
      "name": "Per-operation exposure ceilings",
      "group": "Governance",
      "guide": "/docs/advanced/budgets/",
      "example": "/docs/advanced/budgets/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "BudgetRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "limits",
      "name": "Iteration and invocation limits",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "ControlLimitsSpec"
      },
      "cliFamily": null
    },
    {
      "id": "deadline",
      "name": "Workflow duration limits",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "ControlLimitsSpec"
      },
      "cliFamily": null
    },
    {
      "id": "concurrency",
      "name": "External-operation concurrency",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "ControlLimitsSpec"
      },
      "cliFamily": null
    },
    {
      "id": "children",
      "name": "Child-workflow count limit",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "ControlLimitsSpec"
      },
      "cliFamily": null
    },
    {
      "id": "bounded-loop",
      "name": "Bounded loops and until predicates",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#loop",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "LoopUntilSpec"
      },
      "cliFamily": null
    },
    {
      "id": "hooks",
      "name": "Decision hooks and failure actions",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#hooks",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "DecisionHookSpec"
      },
      "cliFamily": null
    },
    {
      "id": "decisions",
      "name": "Allow, deny, pause and quarantine decisions",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#hooks",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "DecisionHookSpec"
      },
      "cliFamily": null
    },
    {
      "id": "policy-digest",
      "name": "Pinned policy digest and amendment",
      "group": "Governance",
      "guide": "/docs/advanced/controls/",
      "example": "/docs/advanced/controls/#hooks",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "DecisionHookSpec"
      },
      "cliFamily": null
    },
    {
      "id": "human-gates",
      "name": "Human approval gates",
      "group": "Governance",
      "guide": "/docs/advanced/approvals/",
      "example": "/docs/advanced/approvals/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "GateRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "approval-expiry",
      "name": "Approval rejection and expiry",
      "group": "Governance",
      "guide": "/docs/advanced/approvals/",
      "example": "/docs/advanced/approvals/#example",
      "availability": "installation",
      "coverageBefore": "example-only",
      "source": {
        "repo": "core",
        "path": "src/controls.rs",
        "needle": "GateRuleSpec"
      },
      "cliFamily": null
    },
    {
      "id": "bound-approval",
      "name": "Input/version-bound operation approval",
      "group": "Governance",
      "guide": "/docs/advanced/approvals/",
      "example": "/docs/advanced/approvals/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "input_digest"
      },
      "cliFamily": null
    },
    {
      "id": "tool-version",
      "name": "Versioned tool registry and digest",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolDefinition"
      },
      "cliFamily": null
    },
    {
      "id": "tool-schemas",
      "name": "Input/output schema checks",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolDefinition"
      },
      "cliFamily": null
    },
    {
      "id": "tool-adapters",
      "name": "Tool execution adapters",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolDefinition"
      },
      "cliFamily": null
    },
    {
      "id": "tool-idempotency",
      "name": "Operation idempotency",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolDefinition"
      },
      "cliFamily": null
    },
    {
      "id": "mcp",
      "name": "Registered MCP servers and discovery",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolDefinition"
      },
      "cliFamily": null
    },
    {
      "id": "tool-progress",
      "name": "Progress and bounded results",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolDefinition"
      },
      "cliFamily": null
    },
    {
      "id": "tool-secrets",
      "name": "Scoped secret references and redaction",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#security",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolSecretReference"
      },
      "cliFamily": null
    },
    {
      "id": "outbound",
      "name": "Outbound targets and SSRF protection",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#security",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolSecretReference"
      },
      "cliFamily": null
    },
    {
      "id": "tool-timeout",
      "name": "Tool timeout, budget and concurrency",
      "group": "Governance",
      "guide": "/docs/advanced/tools/",
      "example": "/docs/advanced/tools/#security",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/governed_tools.rs",
        "needle": "ToolSecretReference"
      },
      "cliFamily": null
    },
    {
      "id": "polyglot",
      "name": "Rust, Python, Node.js and Java",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/runtime_catalog.rs",
        "needle": "RuntimeFamily"
      },
      "cliFamily": null
    },
    {
      "id": "runtime-pins",
      "name": "Runtime-family and version pins",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/runtime_catalog.rs",
        "needle": "RuntimeFamily"
      },
      "cliFamily": null
    },
    {
      "id": "handler-artifact",
      "name": "Handler artifacts and SHA-256 verification",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "runner",
        "path": "src/handler_loader.rs",
        "needle": "sha256"
      },
      "cliFamily": null
    },
    {
      "id": "runtime-groups",
      "name": "Versioned runtime groups",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/runtime_groups.rs",
        "needle": "RuntimeGroupProfile"
      },
      "cliFamily": null
    },
    {
      "id": "memory",
      "name": "Worker memory and handler slices",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/runtime_groups.rs",
        "needle": "RuntimeGroupProfile"
      },
      "cliFamily": null
    },
    {
      "id": "runtime-concurrency",
      "name": "Container admission and concurrency",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/runtime_groups.rs",
        "needle": "RuntimeGroupProfile"
      },
      "cliFamily": null
    },
    {
      "id": "group-drain",
      "name": "Group lifecycle and draining",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/runtime_groups.rs",
        "needle": "RuntimeGroupProfile"
      },
      "cliFamily": null
    },
    {
      "id": "memory-enforcement",
      "name": "Process-tree memory enforcement",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "runner",
        "path": "src/memory_isolation.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "profiling",
      "name": "Local resource profiling",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#profile",
      "availability": "local",
      "coverageBefore": "none",
      "source": {
        "repo": "cli",
        "path": "src/profiler.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "docker",
      "name": "Docker development wrapper",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#profile",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/docker.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "iam-roles",
      "name": "Approved per-phase IAM roles",
      "group": "Security",
      "guide": "/docs/advanced/security/",
      "example": "/docs/advanced/security/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/iam_isolation.rs",
        "needle": "IamIsolationBoundary"
      },
      "cliFamily": null
    },
    {
      "id": "isolation",
      "name": "Execution isolation boundaries",
      "group": "Security",
      "guide": "/docs/advanced/security/",
      "example": "/docs/advanced/security/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/iam_isolation.rs",
        "needle": "IamIsolationBoundary"
      },
      "cliFamily": null
    },
    {
      "id": "payload-override",
      "name": "Reject payload role overrides",
      "group": "Security",
      "guide": "/docs/advanced/security/",
      "example": "/docs/advanced/security/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/iam_isolation.rs",
        "needle": "IamIsolationBoundary"
      },
      "cliFamily": null
    },
    {
      "id": "jwt",
      "name": "JWT identity and tenancy",
      "group": "Security",
      "guide": "/docs/advanced/security/",
      "example": "/docs/advanced/security/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/auth.rs",
        "needle": "pub "
      },
      "cliFamily": "whoami"
    },
    {
      "id": "authorization",
      "name": "RBAC read/write/admin roles",
      "group": "Security",
      "guide": "/docs/advanced/security/",
      "example": "/docs/advanced/security/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/auth.rs",
        "needle": "pub "
      },
      "cliFamily": "whoami"
    },
    {
      "id": "sso",
      "name": "Enterprise SSO and group bindings",
      "group": "Security",
      "guide": "/docs/advanced/security/",
      "example": "/docs/advanced/security/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/rbac.rs",
        "needle": "pub "
      },
      "cliFamily": "rbac"
    },
    {
      "id": "admission",
      "name": "Signed admission and task trust",
      "group": "Security",
      "guide": "/docs/advanced/security/",
      "example": "/docs/advanced/security/#admission",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "orchestrator",
        "path": "src/lib.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "cells",
      "name": "Cell-aware routing and capacity",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/multi_cell.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "witness",
      "name": "Multi-region quorum and witness",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/multi_cell.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "placement",
      "name": "Execution and authority placement",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "core",
        "path": "src/multi_cell.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "fencing",
      "name": "Ownership epochs and stale-worker fencing",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/cell_recovery.rs",
        "needle": "ownership_epoch"
      },
      "cliFamily": null
    },
    {
      "id": "adoption",
      "name": "Checkpoint adoption and reconstruction",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/cell_recovery.rs",
        "needle": "ownership_epoch"
      },
      "cliFamily": null
    },
    {
      "id": "region-recovery",
      "name": "Regional recovery and ambiguous effects",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/cell_recovery.rs",
        "needle": "ownership_epoch"
      },
      "cliFamily": null
    },
    {
      "id": "scale-up",
      "name": "Scale-up with active workflows",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/cell_lifecycle.rs",
        "needle": "pub "
      },
      "cliFamily": "cells"
    },
    {
      "id": "scale-down",
      "name": "Graceful drain and evacuation",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/cell_lifecycle.rs",
        "needle": "pub "
      },
      "cliFamily": "cells"
    },
    {
      "id": "delete-guard",
      "name": "Block cell deletion while active",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/cell_lifecycle.rs",
        "needle": "pub "
      },
      "cliFamily": "cells"
    },
    {
      "id": "rerun",
      "name": "Surgical shard reruns and quotas",
      "group": "Resilience",
      "guide": "/docs/advanced/recovery/",
      "example": "/docs/advanced/recovery/#rerun",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/user_rerun.rs",
        "needle": "build_user_rerun_messages"
      },
      "cliFamily": null
    },
    {
      "id": "execution-inspect",
      "name": "Execution filters, history and pagination",
      "group": "Operations",
      "guide": "/docs/advanced/observability/",
      "example": "/docs/advanced/observability/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/executions.rs",
        "needle": "pub "
      },
      "cliFamily": "executions"
    },
    {
      "id": "restore",
      "name": "Historical execution restoration",
      "group": "Operations",
      "guide": "/docs/advanced/observability/",
      "example": "/docs/advanced/observability/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/executions.rs",
        "needle": "pub "
      },
      "cliFamily": "executions"
    },
    {
      "id": "diagnostic-replay",
      "name": "Read-only diagnostic replay",
      "group": "Operations",
      "guide": "/docs/advanced/observability/",
      "example": "/docs/advanced/observability/#replay",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/execution_observability.rs",
        "needle": "DiagnosticReplayReport"
      },
      "cliFamily": null
    },
    {
      "id": "event-order",
      "name": "Event ordering, deduplication and redaction",
      "group": "Operations",
      "guide": "/docs/advanced/observability/",
      "example": "/docs/advanced/observability/#replay",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/execution_observability.rs",
        "needle": "DiagnosticReplayReport"
      },
      "cliFamily": null
    },
    {
      "id": "health",
      "name": "Observed resource health and inventory",
      "group": "Operations",
      "guide": "/docs/advanced/observability/",
      "example": "/docs/advanced/observability/#freshness",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/installation_observer.rs",
        "needle": "pub "
      },
      "cliFamily": "distributions"
    },
    {
      "id": "freshness",
      "name": "Freshness, staleness and missing adapters",
      "group": "Operations",
      "guide": "/docs/advanced/observability/",
      "example": "/docs/advanced/observability/#freshness",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/installation_observer.rs",
        "needle": "pub "
      },
      "cliFamily": "distributions"
    },
    {
      "id": "transition-capture",
      "name": "Committed-transition capture and CDC",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/transition_capture.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "streaming",
      "name": "Regional Kinesis topology",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/regional_streaming.rs",
        "needle": "RegionalStreamSpec"
      },
      "cliFamily": null
    },
    {
      "id": "stream-modes",
      "name": "Provisioned/on-demand stream models",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/regional_streaming.rs",
        "needle": "RegionalStreamSpec"
      },
      "cliFamily": null
    },
    {
      "id": "archive",
      "name": "Verified S3/Parquet archive receipts",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/regional_streaming.rs",
        "needle": "RegionalStreamSpec"
      },
      "cliFamily": null
    },
    {
      "id": "archive-recovery",
      "name": "Archive compaction and restart recovery",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#example",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/regional_streaming.rs",
        "needle": "RegionalStreamSpec"
      },
      "cliFamily": null
    },
    {
      "id": "analytics",
      "name": "Analytics projections and sparse indexes",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#analytics",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/analytics.rs",
        "needle": "pub "
      },
      "cliFamily": "analytics"
    },
    {
      "id": "watermarks",
      "name": "Rollups and regional watermarks",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#analytics",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/analytics.rs",
        "needle": "pub "
      },
      "cliFamily": "analytics"
    },
    {
      "id": "retention",
      "name": "Retention policies and dry-runs",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#retention",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/retention.rs",
        "needle": "pub "
      },
      "cliFamily": "retention"
    },
    {
      "id": "cold-storage",
      "name": "Cold-storage and restore boundaries",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#retention",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/retention.rs",
        "needle": "pub "
      },
      "cliFamily": "retention"
    },
    {
      "id": "transition-ledger",
      "name": "Unique committed-transition accounting",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#accounting",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/transition_accounting.rs",
        "needle": "CommittedTransition"
      },
      "cliFamily": "accounting"
    },
    {
      "id": "reconciliation",
      "name": "Accounting reports and reconciliation",
      "group": "Operations",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#accounting",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/transition_accounting.rs",
        "needle": "CommittedTransition"
      },
      "cliFamily": "accounting"
    },
    {
      "id": "workflow-registry",
      "name": "Immutable workflow/version registry",
      "group": "Platform",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/registry.rs",
        "needle": "pub "
      },
      "cliFamily": "workflows"
    },
    {
      "id": "activation",
      "name": "Reviewed activation and rollback",
      "group": "Platform",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/registry.rs",
        "needle": "pub "
      },
      "cliFamily": "workflows"
    },
    {
      "id": "attribution",
      "name": "Team/project attribution and bindings",
      "group": "Platform",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#example",
      "availability": "installation",
      "coverageBefore": "overview",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/registry.rs",
        "needle": "pub "
      },
      "cliFamily": "workflows"
    },
    {
      "id": "project",
      "name": "Application projects and handler manifests",
      "group": "Platform",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/project.rs",
        "needle": "pub "
      },
      "cliFamily": "generate"
    },
    {
      "id": "cdk",
      "name": "Catalog-bound CDK generation",
      "group": "Platform",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/project.rs",
        "needle": "pub "
      },
      "cliFamily": "generate"
    },
    {
      "id": "signed-releases",
      "name": "Signed catalog verification and staging",
      "group": "Platform",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#releases",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/releases.rs",
        "needle": "pub "
      },
      "cliFamily": "releases"
    },
    {
      "id": "installation-update",
      "name": "Installation preflight, updates and rollback",
      "group": "Platform",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#releases",
      "availability": "installation",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/releases.rs",
        "needle": "pub "
      },
      "cliFamily": "releases"
    },
    {
      "id": "compatibility",
      "name": "Frozen installation-version contracts",
      "group": "Platform",
      "guide": "/docs/advanced/cli/",
      "example": "/docs/advanced/cli/#example",
      "availability": "contract",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/version_compat.rs",
        "needle": "pub "
      },
      "cliFamily": "installation"
    },
    {
      "id": "version-discovery",
      "name": "Automatic version discovery and override",
      "group": "Platform",
      "guide": "/docs/advanced/cli/",
      "example": "/docs/advanced/cli/#example",
      "availability": "contract",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/version_compat.rs",
        "needle": "pub "
      },
      "cliFamily": "installation"
    },
    {
      "id": "fail-closed-cli",
      "name": "Actionable unsupported-version errors",
      "group": "Platform",
      "guide": "/docs/advanced/cli/",
      "example": "/docs/advanced/cli/#example",
      "availability": "contract",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/version_compat.rs",
        "needle": "pub "
      },
      "cliFamily": "installation"
    },
    {
      "id": "cli-catalog",
      "name": "Machine-readable command catalog",
      "group": "Platform",
      "guide": "/docs/advanced/cli/",
      "example": "/docs/advanced/cli/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/main.rs",
        "needle": "commands"
      },
      "cliFamily": null
    },
    {
      "id": "local-tools",
      "name": "Doctor, validation, dev, reports and TUI",
      "group": "Platform",
      "guide": "/docs/advanced/cli/",
      "example": "/docs/advanced/cli/#example",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "src/main.rs",
        "needle": "commands"
      },
      "cliFamily": null
    },
    {
      "id": "editions",
      "name": "Installation capabilities and Enterprise entitlements",
      "group": "Commercial",
      "guide": "/docs/advanced/commercial/",
      "example": "/docs/advanced/commercial/#example",
      "availability": "contract",
      "coverageBefore": "none",
      "source": {
        "repo": "core",
        "path": "src/edition.rs",
        "needle": "RippflowEdition"
      },
      "cliFamily": null
    },
    {
      "id": "commercial-contract",
      "name": "Versioned commercial agreements",
      "group": "Commercial",
      "guide": "/docs/advanced/commercial/",
      "example": "/docs/advanced/commercial/#foundation",
      "availability": "contract",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/commercial.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "cell-grants",
      "name": "Cell allowance grants and usage ingests",
      "group": "Commercial",
      "guide": "/docs/advanced/commercial/",
      "example": "/docs/advanced/commercial/#foundation",
      "availability": "contract",
      "coverageBefore": "none",
      "source": {
        "repo": "controller",
        "path": "rippflow-controller/src/commercial.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "plan-pricing",
      "name": "Proposed website plans and pricing",
      "group": "Commercial",
      "guide": "/docs/advanced/commercial/",
      "example": "/docs/advanced/commercial/#example",
      "availability": "preview",
      "coverageBefore": "overview",
      "source": {
        "repo": "marketplace",
        "path": "docs/commercial-model.md",
        "needle": "working commercial baseline"
      },
      "cliFamily": null
    },
    {
      "id": "billing-gap",
      "name": "Payment/Marketplace integration boundary",
      "group": "Commercial",
      "guide": "/docs/advanced/commercial/",
      "example": "/docs/advanced/commercial/#example",
      "availability": "preview",
      "coverageBefore": "overview",
      "source": {
        "repo": "marketplace",
        "path": "docs/commercial-model.md",
        "needle": "working commercial baseline"
      },
      "cliFamily": null
    },
    {
      "id": "managed-workspaces",
      "name": "Managed temporary-workspace API",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/advanced/resources/#workspace",
      "availability": "docs-only",
      "coverageBefore": "docs-only",
      "source": {
        "repo": "docs",
        "path": "docs/handler-temporary-workspaces.md",
        "needle": "workspace.rs"
      },
      "missingMainPath": "runner:src/workspace.rs",
      "cliFamily": null
    },
    {
      "id": "ownership-rollout",
      "name": "Ownership rollout migration tooling",
      "group": "Proposals",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#pending",
      "availability": "proposal",
      "coverageBefore": "proposal",
      "proposal": {
        "repository": "bookcicle/rippflow-starter",
        "number": 33,
        "revision": "08474595e238f4d8d61d56b3b08801c31d8d4876",
        "scope": "Ownership migration and batch global-ownership rollout fix",
        "status": "unmerged"
      },
      "cliFamily": null
    },
    {
      "id": "distribution-closure",
      "name": "Distribution closure certification",
      "group": "Proposals",
      "guide": "/docs/advanced/deployments/",
      "example": "/docs/advanced/deployments/#pending",
      "availability": "proposal",
      "coverageBefore": "proposal",
      "proposal": {
        "repository": "bookcicle/rippflow-starter",
        "number": 34,
        "revision": "a76d6c66c681046985a335e37d99e8277285ce21",
        "scope": "Distribution closure and clean-room certification evidence",
        "status": "unmerged"
      },
      "cliFamily": null
    },
    {
      "id": "endurance",
      "name": "72-hour endurance and approval-index changes",
      "group": "Proposals",
      "guide": "/docs/advanced/data-retention/",
      "example": "/docs/advanced/data-retention/#pending",
      "availability": "proposal",
      "coverageBefore": "proposal",
      "proposal": {
        "repository": "bookcicle/rippflow-controller",
        "number": 53,
        "revision": "fca1ea5fcd3a74e6a937bd686d97f302c67cf80d",
        "scope": "Human-approval sparse-index preservation and 72h endurance report",
        "status": "unmerged"
      },
      "cliFamily": null
    },
    {
      "id": "cli-self-update",
      "name": "Verified CLI self-update",
      "group": "Platform",
      "guide": "/docs/advanced/cli/",
      "example": "/docs/advanced/cli/#local",
      "availability": "contract",
      "coverageBefore": "none",
      "source": {
        "repo": "cli",
        "path": "src/updater.rs",
        "needle": "pub "
      },
      "cliFamily": null
    },
    {
      "id": "handler-json",
      "name": "Handler stdin/stdout and command manifests",
      "group": "Handlers",
      "guide": "/docs/advanced/resources/",
      "example": "/docs/handlers/#manifest",
      "availability": "local",
      "coverageBefore": "overview",
      "source": {
        "repo": "cli",
        "path": "contracts/handlers.schema.json",
        "needle": "command"
      },
      "cliFamily": null
    },
    {
      "id": "offline-agent-docs",
      "name": "Offline documentation retrieval and coding-agent skill",
      "group": "Developer tools",
      "guide": "/docs/agent-docs/",
      "example": "/docs/agent-docs/#find-contract",
      "availability": "local",
      "coverageBefore": "homepage-only",
      "source": {
        "repo": "cli",
        "path": "src/docs.rs",
        "revision": "7f5ea32969ce5750f143bae2431466d254281c2a",
        "needle": "vector_search_docs"
      },
      "cliFamily": "docs"
    }
  ],
  "reviewedPullRequests": [
    {
      "repository": "bookcicle/rippflow-controller",
      "number": 53,
      "revision": "fca1ea5fcd3a74e6a937bd686d97f302c67cf80d",
      "scope": "Human-approval sparse-index preservation and 72h endurance report",
      "status": "unmerged"
    },
    {
      "repository": "bookcicle/rippflow-starter",
      "number": 33,
      "revision": "08474595e238f4d8d61d56b3b08801c31d8d4876",
      "scope": "Ownership migration and batch global-ownership rollout fix",
      "status": "unmerged"
    },
    {
      "repository": "bookcicle/rippflow-starter",
      "number": 34,
      "revision": "a76d6c66c681046985a335e37d99e8277285ce21",
      "scope": "Distribution closure and clean-room certification evidence",
      "status": "unmerged"
    }
  ],
  "knownGaps": [
    {
      "id": "managed-workspaces",
      "finding": "workspace.rs and the documented managed-workspace field/API are absent from runner/core main. Do not infer support from permissive parsing.",
      "resolution": "Document the gap; no workspace guarantees advertised."
    },
    {
      "id": "controller-acceptance",
      "finding": "Implemented backend/model tests do not certify customer JWT/IAM ingress, configured owner adapters or all live console views.",
      "resolution": "Installation recipes are explicitly not live-certified."
    },
    {
      "id": "commercial-runtime",
      "finding": "Commercial backend foundation is not end-to-end runtime grant delivery, payment or Marketplace verification.",
      "resolution": "Separate foundation contracts and preview pricing from deployed enforcement."
    },
    {
      "id": "scenario-evidence",
      "finding": "The integrated report has 20 aggregate scenarios; some assertions derive from subsystem reports. It is not twenty independent live-cloud tests.",
      "resolution": "Label model/aggregate evidence and add direct timer/callback probes."
    },
    {
      "id": "permissive-phase-validation",
      "finding": "Unknown phase fields and a malformed durable-wait duration can be accepted by controls validate. SLA validation is stricter on the plain validate path.",
      "resolution": "Document the boundary, keep known-field examples, and record probes without claiming strict validation covers all phase settings."
    }
  ],
  "cliCommandFamilies": [
    {
      "name": "deploy",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "whoami",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/security/"
    },
    {
      "name": "auth",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/security/"
    },
    {
      "name": "config",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/cli/"
    },
    {
      "name": "workflows",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "executions",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/observability/"
    },
    {
      "name": "analytics",
      "minimumInstallationVersion": "1.8.1",
      "guide": "/docs/advanced/data-retention/"
    },
    {
      "name": "monitor",
      "minimumInstallationVersion": "1.8.1",
      "guide": "/docs/advanced/observability/"
    },
    {
      "name": "accounting",
      "minimumInstallationVersion": "1.0.6",
      "guide": "/docs/advanced/data-retention/"
    },
    {
      "name": "retention",
      "minimumInstallationVersion": "1.8.1",
      "guide": "/docs/advanced/data-retention/"
    },
    {
      "name": "users",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/security/"
    },
    {
      "name": "cells",
      "minimumInstallationVersion": "1.2.0",
      "guide": "/docs/advanced/recovery/"
    },
    {
      "name": "distributions",
      "minimumInstallationVersion": "1.2.0",
      "guide": "/docs/advanced/observability/"
    },
    {
      "name": "controls",
      "minimumInstallationVersion": "1.4.0",
      "guide": "/docs/advanced/controls/"
    },
    {
      "name": "tools",
      "minimumInstallationVersion": "1.7.0",
      "guide": "/docs/advanced/tools/"
    },
    {
      "name": "mcp",
      "minimumInstallationVersion": "1.7.0",
      "guide": "/docs/advanced/tools/"
    },
    {
      "name": "operations",
      "minimumInstallationVersion": "1.7.0",
      "guide": "/docs/advanced/approvals/"
    },
    {
      "name": "rbac",
      "minimumInstallationVersion": "1.8.0",
      "guide": "/docs/advanced/security/"
    },
    {
      "name": "releases",
      "minimumInstallationVersion": "1.8.1",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "installation",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/cli/"
    },
    {
      "name": "versions",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "activate",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "rollback",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "init",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "validate",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/cli/"
    },
    {
      "name": "dev",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/cli/"
    },
    {
      "name": "test",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/cli/"
    },
    {
      "name": "generate",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "inspect",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/observability/"
    },
    {
      "name": "ui",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/cli/"
    },
    {
      "name": "get_doc",
      "minimumInstallationVersion": null,
      "localOnly": true,
      "availability": "local",
      "guide": "/docs/agent-docs/"
    },
    {
      "name": "get_docs",
      "minimumInstallationVersion": null,
      "localOnly": true,
      "availability": "local",
      "guide": "/docs/agent-docs/"
    },
    {
      "name": "search_docs",
      "minimumInstallationVersion": null,
      "localOnly": true,
      "availability": "local",
      "guide": "/docs/agent-docs/"
    },
    {
      "name": "vector_search_docs",
      "minimumInstallationVersion": null,
      "localOnly": true,
      "availability": "local",
      "guide": "/docs/agent-docs/"
    },
    {
      "name": "docs",
      "minimumInstallationVersion": null,
      "localOnly": true,
      "availability": "local",
      "guide": "/docs/agent-docs/"
    },
    {
      "name": "deployments",
      "minimumInstallationVersion": "1.9.0",
      "guide": "/docs/advanced/deployments/"
    },
    {
      "name": "login",
      "minimumInstallationVersion": "1.8.2",
      "guide": "/docs/advanced/security/"
    },
    {
      "name": "logout",
      "minimumInstallationVersion": "1.0.0",
      "guide": "/docs/advanced/security/"
    }
  ]
}