ADR-016: deployment honesty — no runtime capability surface; compile-time identity + matrix (OQ-08 resolved)

docs/architecture/engine-sqlite.md

@@ -1,6 +1,6 @@
 ---
 status: draft
-last_updated: 2026-10-05
+last_updated: 2026-10-06
 ---
 
 # SQLite engine
@@ -33,7 +33,10 @@ per-contract obligations live in the core spec and are not restated here.
   Every engine call runs in `spawn_blocking`.
 - Single-host by nature: file-backed, one machine, NFS-two-writers
   unsupported (honker's honesty posture, inherited). See
-  [deployment.md](deployment.md).
+  [deployment.md](deployment.md); the boundary's surface location is
+  decided ([ADR-016](decisions/016-deployment-honesty.md)) — this
+  crate's identity and docs state the posture; no runtime descriptor
+  exists.
 
 ## Connection architecture
 
@@ -127,6 +130,7 @@ family is `__alkstore_*` (ADR-010 §8's naming authorization).
 | [013](decisions/013-fold-substrate-into-sqlite.md) | Substrate packaging | folded into `alkstore-sqlite` (`src/substrate/`); no fourth crate |
 | [014](decisions/014-outbox-tx-enqueue.md) | Outbox tx enqueue | `outbox_enqueue_tx` on `TxHandle`; derivation engine-side through the writer-slot lease |
 | [015](decisions/015-streams-depth.md) | Streams depth | key = carried metadata (the inherited nullable column); global-FIFO ordering; `trim_to` as a writer-lease delete; event shape already the substrate's |
+| [016](decisions/016-deployment-honesty.md) | Deployment honesty | no runtime capability surface; single-host posture stated by crate identity + docs; this engine never produces `PayloadTooLarge` (pinned in the contract suite) |
 
 ## Open Questions
 
@@ -153,6 +157,8 @@ questions affecting this document:
 
 Resolved: **OQ-09** (scheduler collapse —
 [ADR-009](decisions/009-scheduler-collapse.md)), **OQ-05** (queue
-semantics depth — [ADR-010](decisions/010-queue-semantics-depth.md)), and
+semantics depth — [ADR-010](decisions/010-queue-semantics-depth.md)),
 **OQ-12** (streams depth — [ADR-015](decisions/015-streams-depth.md)),
-2026-10-05.
+and **OQ-08** (capability surface — none, by default ever;
+[ADR-016](decisions/016-deployment-honesty.md)),
+2026-10-05/06.