ADR-016: deployment honesty — no runtime capability surface; compile-time identity + matrix (OQ-08 resolved)

docs/architecture/overview.md

@@ -1,6 +1,6 @@
 ---
 status: draft
-last_updated: 2026-10-05
+last_updated: 2026-10-06
 ---
 
 # alkstore — Overview
@@ -28,7 +28,7 @@ Per [ADR-001](decisions/001-crate-split.md):
 
 | Crate | Contents | Driver dependencies |
 |---|---|---|
-| `alkstore` (core) | trait surface, types, error model | none (capability flags, if ever, are OQ-08's to add) |
+| `alkstore` (core) | trait surface, types, error model | none (no capability surface — [ADR-016](decisions/016-deployment-honesty.md): engine differences are compile-time identity + the deployment matrix, never a runtime descriptor) |
 | `alkstore-sqlite` | SQLite engine ([ADR-003](decisions/003-sqlite-driver.md)) | rusqlite; the forked honker-core lineage rides in-tree as the engine crate's substrate module subtree ([ADR-011](decisions/011-sqlite-substrate-fork.md), designed in [ADR-012](decisions/012-forked-substrate-design.md), folded per [ADR-013](decisions/013-fold-substrate-into-sqlite.md)) |
 | `alkstore-postgres` | Postgres engine ([ADR-004](decisions/004-postgres-driver.md)) | tokio-postgres, deadpool-postgres |
 | (mem engine, optional) | test convenience, decided at implementation ([ADR-001](decisions/001-crate-split.md)) | none |
@@ -56,7 +56,7 @@ Per [ADR-002](decisions/002-feature-scope.md):
 | [engine-sqlite.md](engine-sqlite.md) | SQLite engine: mapping the contract onto the forked substrate module/rusqlite |
 | [engine-postgres.md](engine-postgres.md) | Postgres engine: mapping the contract onto tokio-postgres/LISTEN |
 | [queues.md](queues.md) | Queue/scheduler/outbox semantics depth (ADR-009/ADR-010 resolved) |
-| [deployment.md](deployment.md) | Host capabilities, connection budgets, deployment matrix (OQ-08) |
+| [deployment.md](deployment.md) | Host capabilities, connection budgets, deployment matrix (OQ-08 resolved) |
 | [open-questions.md](open-questions.md) | OQ-01..NN tracker |
 | [decisions/](decisions/) | ADRs |
 
@@ -79,6 +79,7 @@ Per [ADR-002](decisions/002-feature-scope.md):
 | [013](decisions/013-fold-substrate-into-sqlite.md) | Fold the forked substrate into `alkstore-sqlite` (no fourth crate) | Accepted |
 | [014](decisions/014-outbox-tx-enqueue.md) | Transactional outbox enqueue (`outbox_enqueue_tx` on `TxHandle`) | Accepted |
 | [015](decisions/015-streams-depth.md) | Streams depth (carried-metadata keys, global-FIFO ordering, `StreamEvent`, `trim_to`) | Accepted |
+| [016](decisions/016-deployment-honesty.md) | Deployment honesty (no runtime capability surface; compile-time identity + matrix) | Accepted |
 
 ## Non-goals
 
@@ -90,7 +91,8 @@ Per [ADR-002](decisions/002-feature-scope.md):
   alkcall and is a separate future decision (store layer stays
   substrate-free, the alkblobs store-layer precedent).
 - Not multi-machine on SQLite: single-host honesty is inherited
-  ([deployment.md](deployment.md)).
+  ([deployment.md](deployment.md); the boundary's location in the
+  surface is decided — [ADR-016](decisions/016-deployment-honesty.md)).
 
 ## Evidence base