Architecture contract
APrimitiveDescriptorV1 declares an ID from the registry, input and output schemas, a class, an authority (propose, decide, verify or authorize), required evidence, failure modes, a fallback and an eval. No primitive may mint permissions, raise spend or skip a required verifier. Maturity starts low and rises only with evals.
Validate against the schema in spec/Contracts/kernel/v1/schemas/ before anything else. Receivers fail closed, so a document that does not validate is rejected, not repaired.