docs: write Phase 0 architecture foundation — ADRs 026-034, spec docs, and task updates

Phase 0a — ADRs (9 new): - ADR-026: Transport/interface separation (three-layer model) - ADR-027: Crate decomposition (core, secret, storage, flowgraph, napi, CLI) - ADR-028: Auth as irpc service (AuthProtocol behind feature flag) - ADR-029: Identity as core type (Identity + IdentityProvider in alknet-core) - ADR-030: Static/dynamic config split (ArcSwap, ConfigReloadHandle) - ADR-031: Forwarding policy (rule-based allow/deny, TransportKind-aware) - ADR-032: Event boundary discipline (domain, irpc, call protocol boundaries) - ADR-033: OperationEnv universal composition (three dispatch paths) - ADR-034: Head/worker terminology (replace hub/spoke) Phase 0b — New spec documents (7): - identity.md, services.md, interface.md, configuration.md, storage.md, flowgraph.md, secret-service.md Updated existing docs: - auth.md: reference identity.md for canonical definitions, add AuthProtocol - open-questions.md: resolve OQ-12, OQ-16, OQ-18, OQ-22, OQ-23-25 - README.md: add all new docs, ADRs 026-034 Marked 19 architecture tasks as completed.
2026-06-07 09:32:58 +00:00
parent 84f16d66e7
commit 19b3d3a078
38 changed files with 2750 additions and 101 deletions
--- a/tasks/architecture/adr-026-transport-interface-separation.md
+++ b/tasks/architecture/adr-026-transport-interface-separation.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-026-transport-interface-separation
 name: Write ADR-026 — Transport/interface separation (three-layer model)
-status: pending
+status: completed
 depends_on: []
 scope: moderate
 risk: high
--- a/tasks/architecture/adr-027-crate-decomposition.md
+++ b/tasks/architecture/adr-027-crate-decomposition.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-027-crate-decomposition
 name: Write ADR-027 — Crate decomposition
-status: pending
+status: completed
 depends_on:
  - architecture/adr-029-identity-core-type
 scope: moderate
--- a/tasks/architecture/adr-028-auth-irpc-service.md
+++ b/tasks/architecture/adr-028-auth-irpc-service.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-028-auth-irpc-service
 name: Write ADR-028 — Auth as irpc service
-status: pending
+status: completed
 depends_on:
  - architecture/adr-029-identity-core-type
 scope: narrow
--- a/tasks/architecture/adr-029-identity-core-type.md
+++ b/tasks/architecture/adr-029-identity-core-type.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-029-identity-core-type
 name: Write ADR-029 — Identity as core type
-status: pending
+status: completed
 depends_on: []
 scope: single
 risk: low
--- a/tasks/architecture/adr-030-static-dynamic-config-split.md
+++ b/tasks/architecture/adr-030-static-dynamic-config-split.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-030-static-dynamic-config-split
 name: Write ADR-030 — Static/dynamic config split
-status: pending
+status: completed
 depends_on: []
 scope: narrow
 risk: low
--- a/tasks/architecture/adr-031-forwarding-policy.md
+++ b/tasks/architecture/adr-031-forwarding-policy.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-031-forwarding-policy
 name: Write ADR-031 — Forwarding policy
-status: pending
+status: completed
 depends_on: []
 scope: narrow
 risk: low
--- a/tasks/architecture/adr-032-event-boundary-discipline.md
+++ b/tasks/architecture/adr-032-event-boundary-discipline.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-032-event-boundary-discipline
 name: Write ADR-032 — Event boundary discipline
-status: pending
+status: completed
 depends_on: []
 scope: single
 risk: low
--- a/tasks/architecture/adr-033-operationenv-irpc-call-protocol.md
+++ b/tasks/architecture/adr-033-operationenv-irpc-call-protocol.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-033-operationenv-irpc-call-protocol
 name: Write ADR-033 — OperationEnv, irpc, and call protocol relationship
-status: pending
+status: completed
 depends_on:
  - architecture/adr-028-auth-irpc-service
  - architecture/adr-027-crate-decomposition
--- a/tasks/architecture/adr-034-head-worker-terminology.md
+++ b/tasks/architecture/adr-034-head-worker-terminology.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/adr-034-head-worker-terminology
 name: Write ADR-034 — Head/worker terminology
-status: pending
+status: completed
 depends_on: []
 scope: single
 risk: trivial
--- a/tasks/architecture/spec-configuration.md
+++ b/tasks/architecture/spec-configuration.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-configuration
 name: Promote configuration.md from research to architecture spec
-status: pending
+status: completed
 depends_on:
  - architecture/adr-030-static-dynamic-config-split
  - architecture/adr-031-forwarding-policy
--- a/tasks/architecture/spec-flowgraph.md
+++ b/tasks/architecture/spec-flowgraph.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-flowgraph
 name: Create flowgraph.md architecture spec (or stub referencing crate docs)
-status: pending
+status: completed
 depends_on:
  - architecture/adr-027-crate-decomposition
 scope: narrow
--- a/tasks/architecture/spec-identity.md
+++ b/tasks/architecture/spec-identity.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-identity
 name: Create identity.md architecture spec
-status: pending
+status: completed
 depends_on:
  - architecture/adr-029-identity-core-type
  - architecture/adr-028-auth-irpc-service
--- a/tasks/architecture/spec-interface.md
+++ b/tasks/architecture/spec-interface.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-interface
 name: Create interface.md architecture spec (Layer 2)
-status: pending
+status: completed
 depends_on:
  - architecture/adr-026-transport-interface-separation
  - architecture/adr-033-operationenv-irpc-call-protocol
--- a/tasks/architecture/spec-secret-service.md
+++ b/tasks/architecture/spec-secret-service.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-secret-service
 name: Create secret-service.md architecture spec
-status: pending
+status: completed
 depends_on:
  - architecture/adr-027-crate-decomposition
  - architecture/adr-032-event-boundary-discipline
--- a/tasks/architecture/spec-services.md
+++ b/tasks/architecture/spec-services.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-services
 name: Create services.md architecture spec (irpc service layer + OperationEnv)
-status: pending
+status: completed
 depends_on:
  - architecture/adr-033-operationenv-irpc-call-protocol
  - architecture/adr-027-crate-decomposition
--- a/tasks/architecture/spec-storage.md
+++ b/tasks/architecture/spec-storage.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-storage
 name: Create storage.md architecture spec (or stub referencing crate docs)
-status: pending
+status: completed
 depends_on:
  - architecture/adr-027-crate-decomposition
  - architecture/adr-029-identity-core-type
--- a/tasks/architecture/spec-update-auth.md
+++ b/tasks/architecture/spec-update-auth.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-update-auth
 name: Update auth.md — add IdentityProvider vs AuthService relationship
-status: pending
+status: completed
 depends_on:
  - architecture/spec-identity
  - architecture/adr-028-auth-irpc-service
--- a/tasks/architecture/spec-update-open-questions.md
+++ b/tasks/architecture/spec-update-open-questions.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-update-open-questions
 name: Update open-questions.md — resolve questions per ADR decisions
-status: pending
+status: completed
 depends_on:
  - architecture/adr-031-forwarding-policy
  - architecture/adr-029-identity-core-type
--- a/tasks/architecture/spec-update-readme.md
+++ b/tasks/architecture/spec-update-readme.md
@@ -1,7 +1,7 @@
 ---
 id: architecture/spec-update-readme
 name: Update architecture README.md — add new docs and ADRs to tables
-status: pending
+status: completed
 depends_on:
  - architecture/spec-configuration
  - architecture/spec-identity