Architecture contract
- Every document you emit validates against its frozen schema.
- Your component does not name a vendor or model in a graph.
- Every effect has an effect class, an idempotency key where required and a receipt.
- Network access uses the shared guard and a declared policy.
- Your component fails closed on unknown values.
- Every node has a fallback and a failure path.
- Verification results use
INCONCLUSIVEhonestly. - Decision backends ship a calibration manifest.
- Behavior on each row of the failure-injection matrix is the declared one.