Unclassified
22 — Source Traceability Appendix
Status: Maintained registry seed
Frozen architecture
| Source | State | Governs |
|---|---|---|
docs/architecture/ARCHITECTURE_LOCK.md | Canonical | Kernel, laws, planes, runtime, Workbench, Twin, capabilities, Spine |
docs/architecture/IMPLEMENTATION_CONTRACT_v1.1.md | Canonical | Clerk, Neon, D1/KV bounds, Projection Engine, public MCP, execution |
docs/architecture/PLATFORM_LOCK_v1.0.md | Canonical | Freeze declaration and implementation order |
docs/architecture/FOUR_BUTTONS.md | Canonical | OODA interaction grammar |
docs/architecture/TWIN_BEHAVIOR.md | Canonical | Silence, surfacing, authority |
docs/architecture/WORKBENCH_MATRIX.md | Canonical | Role and department view matrix |
docs/architecture/WORKBENCH_ROLE_CAPABILITY_MAP.md | Canonical | Role-to-capability mapping |
docs/architecture/MASTER_EXECUTION_PLAN.md | Canonical | Execution phases and definition of done |
docs/architecture/CONSOLIDATED_PRODUCT_PLATFORM_CONTRACT_v1.2.md | Derived governing standard | Environment, repository, marketplace, frontend and release contract |
docs/architecture/IW_SPINE_NETWORK_PLUGIN_AND_MCP_MARKETPLACE_CONTRACT.md | Derived publication contract | Plugin Directory package, embedded host UI, MCP Marketplace package, browser Workbench, discovery and connection boundaries |
docs/architecture/TENANT_SPINE_FORTRESS_OPERATIONAL_FLOW_MODEL.md | Derived governing standard | Tenant entity schema, four flows, Operational/Fortress split, search, promotion, retention and environment lifecycle |
docs/architecture/SOURCE_PACK_RECONCILIATION_2026-07-28.md | Controlled reconciliation | Adopted, corrected and rejected source claims |
Approved July 27 decisions
| Source | State | Governs |
|---|---|---|
docs/superpowers/specs/2026-07-27-auth-connector-spine-binding-design.md | Approved | Connector identity, Spine and schema binding, fail-closed |
docs/superpowers/plans/2026-07-27-auth-connector-spine-binding.md | Approved plan | Binding implementation sequence |
docs/superpowers/specs/2026-07-27-launch-infrastructure-freeze-design.md | Approved | July 30 identity, hosting, credential, binding, release lanes |
docs/superpowers/specs/2026-07-27-customer-zero-publication-gates.md | Approved | Customer Zero evidence and publication gates |
docs/superpowers/plans/2026-07-27-to-30-go-live-runbook.md | Approved runbook | Freeze and cutover work |
Code evidence
| Area | Evidence |
|---|---|
| Gateway identity and runtime | services/gateway/src/ |
| Clerk integration | services/gateway/src/clerk-auth.ts |
| Connector control | services/gateway/src/integrations.ts |
| Public MCP | services/mcp-connector/ |
| Internal MCP Pool | services/mcp-pool/ |
| Integration MCP | services/integration-management-mcp/ |
| Provider MCP | services/provider-management-mcp/ |
| Pipeline | services/pipeline/ |
| Projection Engine | packages/projection-engine/ |
| Spine entities | packages/spine-entities/ |
| Workbench roles | packages/workbench-config/ |
| Governance and Hermes | services/govern/, services/hermes/ |
| Customer Zero | services/gateway/src/customer-zero.ts |
Evidence gaps
- strict binding tables are approved but not present in runtime migrations;
- legacy Supabase and Descope code remains in parts of the repository;
- host-to-host connected-tool inheritance is not proven;
- code-backed catalog entries do not prove OAuth, read, write, sync, or live state;
- marketplace publication and third-party review are not guaranteed by July 30;
- deployed model and agent claims require environment-specific evidence;
- Customer Zero journeys require recorded production proof, not local tests alone.
Source ingestion procedure
For every additional ZIP, PDF, PPTX, HTML, JSON, Markdown, text export, Coda page,
or chat transcript:
Inventory → extract → classify → reconcile → create page
→ link evidence → record version → review → verify
Historical sources remain available for traceability but cannot override frozen
canon without an approved decision.