ADR-016: deployment honesty — no runtime capability surface; compile-time identity + matrix (OQ-08 resolved)

docs/architecture/decisions/001-crate-split.md

@@ -2,7 +2,8 @@
 
 ## Status
 
-Accepted
+Accepted *(capability-flags content annotated 2026-10-06 by
+[ADR-016](016-deployment-honesty.md))*
 
 ## Context
 
@@ -37,6 +38,11 @@ The project ships as a **family of crates**:
    surface, types, error model, capability flags, and the contract
    documentation. No driver dependencies. Compile-lean by construction:
    the base crate has no engine machinery to keep out.
+   *(Annotated 2026-10-06: capability flags are not part of this
+   contents list as decided — [ADR-016](016-deployment-honesty.md)
+   resolves there is no runtime capability surface, by default ever;
+   the engine boundary lives at compile time and in the deployment
+   matrix.)*
 2. **`alkstore-sqlite`** — the SQLite engine implementing the core
     surface. Single driver: rusqlite + the forked honker-core
     lineage, carried in-tree as the engine crate's substrate module