foundation-dependencies.json

{
  "schemaVersion": 1,
  "decisionDate": "2026-10-15",
  "authority": "AGENTS.md#foundation-first-execution-order-owner-correction-2026-10-15",
  "contract": "docs/Features/RepositoryGovernance/FoundationDelivery.md",
  "scope": {
    "originalTasks": 104,
    "addedRequiredTask": "KL-105",
    "total": 105,
    "statusSnapshot": {
      "done": 20,
      "in_progress": 85
    },
    "allRequired": true
  },
  "interpretation": "Directed edges below are implementation-scope prerequisites. Named sub-milestones split actual existing tasks without new task IDs/API or acceptance reduction. Original definitions are frozen review input, not active compatibility promises. Current owner instructions and linked feature/ADRs control corrected acceptance. Priority bands never infer current readiness. Whole-task qualification remains separate and requires every mandatory gate.",
  "tasks": [
    {
      "id": "KL-001",
      "title": "Версії, ліцензії та platform matrix",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-001",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "d677976a15515bd10aa495b664d21ee07e89f923b7167054aea4eb864abd41c1",
        "dependencies": [],
        "deliverable": "Зафіксувати SDK, package locks, source commits та licenses; відокремити managed/native dependencies.",
        "acceptance": "Clean restore/build на Linux x64 і macOS arm64; усі dependency versions зафіксовані; unsupported platforms явно зазначені."
      },
      "implementationPrerequisites": [],
      "review": {
        "id": "KL-001",
        "finding": "Package locks and Linux+macOS acceptance are stale against centrally pinned packages/no packages.lock and Linux-only qualification. Separate required selected-version/license baseline from late exhaustive audit.",
        "implementationScope": [],
        "laterQualificationScope": [],
        "stageDoneGate": "Existing approved .NET10/Orleans/ZoneTree/native provider pins, licenses and supported normal-SIMD hardware contract are explicit; no new dependency implied.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F0",
      "executionOwner": "RepositoryGovernance / approved manifests",
      "nextDeliverable": "Verify existing selected pins, original licenses, Linux support and mandatory normal SIMD; audit later.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 483,
        "heading": "KL-001 · Версії, ліцензії та platform matrix",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-002",
      "title": "Формальні API та consistency contracts",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-002",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "62cdd50c6014cd40e6b942fdc8b890945d57a0ad364f0377ba57e4507576302c",
        "dependencies": [
          "KL-001"
        ],
        "deliverable": "Описати partition identity, atomic batch, read views, durability profiles, errors та tokens.",
        "acceptance": "Усі операції мають scope/ack/timeout semantics; global unique і multi-partition atomic запити отримують explicit unsupported outcome."
      },
      "implementationPrerequisites": [
        "KL-001"
      ],
      "review": {
        "id": "KL-002",
        "finding": "Full-operation contracts are oversized as one checkbox; freeze native Orleans membership versus DB authority, logical atomic versus physical placement and per-connection execution first.",
        "implementationScope": [
          "KL-001"
        ],
        "laterQualificationScope": [],
        "stageDoneGate": "Versioned identity, atomicity/ACK, typed errors/tokens, cancellation and bounds agreed for each admitted operation; unsupported multi-partition atomic/global unique paths reject.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F0",
      "executionOwner": "RepositoryGovernance / approved manifests",
      "nextDeliverable": "Freeze canonical identities, bounded operation semantics, same-partition atomicity and explicit unsupported cross-partition cases.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 491,
        "heading": "KL-002 · Формальні API та consistency contracts",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-003",
      "title": "ZoneTree durability audit і crash harness",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-003",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "66e508d924e8262349a02f989e93636d5b19ae45c4289d8e84c0499c39c4169e",
        "dependencies": [
          "KL-001",
          "KL-002"
        ],
        "deliverable": "Перевірити data WAL, transaction log, flush ordering, manifest та recovery; instrument failure points.",
        "acceptance": "Задокументовано durable ACK boundary; щонайменше 1000 seeded crash trials збережено; жодної підтвердженої часткової транзакції; power-loss gate має окремий результат."
      },
      "implementationPrerequisites": [
        "KL-001",
        "KL-002"
      ],
      "review": {
        "id": "KL-003",
        "finding": "1000 seeded trials and power-reset evidence are qualification, not prerequisites for constructing the storage/Orleans foundation; no process-kill power-loss substitution.",
        "implementationScope": [
          "KL-001",
          "KL-002"
        ],
        "laterQualificationScope": [
          "KL-020",
          "KL-035",
          "KL-041"
        ],
        "stageDoneGate": "Native ZoneTree commit/flush/replay boundaries and actual owned crash harness are implemented, with whole-operation state oracle; long/fault gates remain independently required.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "StorageRecovery / silo-local ZoneTree Grain Service",
      "nextDeliverable": "Open actual ZoneTree with current WAL guarantees; recover original committed state after process failure.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 499,
        "heading": "KL-003 · ZoneTree durability audit і crash harness",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-004",
      "title": "Transactional read view spike",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-004",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "2bd64dca19ffab4af83592d4b3c90d55608fd644caf54fa9a2433f34ae28906c",
        "dependencies": [
          "KL-001",
          "KL-002"
        ],
        "deliverable": "Перевірити point reads, index scans, Snapshot і transaction visibility; реалізувати safe bounded fallback.",
        "acceptance": "Readers ніколи не спостерігають половину document/index batch; тестовано overwrite/delete під час scan; виміряно snapshot/segment-move overhead."
      },
      "implementationPrerequisites": [
        "KL-001",
        "KL-002"
      ],
      "review": {
        "id": "KL-004",
        "finding": "Safe fallback must preserve the promised cut, not silently weaken consistency. Snapshot/segment overhead measurement belongs to late measured qualification.",
        "implementationScope": [
          "KL-001",
          "KL-002"
        ],
        "laterQualificationScope": [
          "KL-006"
        ],
        "stageDoneGate": "Native committed point/range reads share one bounded authorized view; overwrite/delete and leased disposal have meaningful whole-operation regressions.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "StorageRecovery / silo-local ZoneTree Grain Service",
      "nextDeliverable": "Reuse native snapshot/iterator APIs for bounded consistent reads with actual lifetime and disposal.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 507,
        "heading": "KL-004 · Transactional read view spike",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-005",
      "title": "Backup/restore spike",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-005",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "ab7e871d3d56ccae135fb2a3011b3a927dcdef389b60a21e2b7d820013d20007",
        "dependencies": [
          "KL-003",
          "KL-004"
        ],
        "deliverable": "Реалізувати closed transactional backup всіх authoritative файлів та versioned manifest.",
        "acceptance": "Restore у чистий каталог відновлює документи, індекси, dedup та apply position; corrupted/incomplete backup відхиляється."
      },
      "implementationPrerequisites": [
        "KL-003",
        "KL-004"
      ],
      "review": {
        "id": "KL-005",
        "finding": "Original003/004 omit storage handle/file ownership and ordered commit as implementation prerequisites; minimal closed backup precedes cluster/model drills.",
        "implementationScope": [
          "KL-002",
          "KL-003",
          "KL-004",
          "KL-008",
          "KL-009"
        ],
        "laterQualificationScope": [
          "KL-035",
          "KL-042"
        ],
        "stageDoneGate": "Checksummed complete native authoritative manifest and closed-cut capture/restore, corrupt/incomplete refusal and exact model/dedup/apply restoration are implemented.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "StorageRecovery / silo-local ZoneTree Grain Service",
      "nextDeliverable": "Capture and restore one actual current-format native backup with complete state and owner cleanup.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 515,
        "heading": "KL-005 · Backup/restore spike",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-006",
      "title": "Порівняльні бенчмарки та кластерна методологія",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-006",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "0569a8bc55f6e8b04803fc392890ff637d888eaa45a5f2ef481b760bb115dc64",
        "dependencies": [
          "KL-001"
        ],
        "deliverable": "Побудувати однакові workloads embedded/standalone/cluster із параметрами WAL та індексів; визначити PostgreSQL baseline, same-quality/same-durability methodology й datasets для KL-073.",
        "acceptance": "Кожен результат має hardware, OS, package version, dataset seed, durability mode, raw samples, p50/p95/p99 і allocs/op."
      },
      "implementationPrerequisites": [
        "KL-001"
      ],
      "review": {
        "id": "KL-006",
        "finding": "P0 benchmark harness is incorrectly a blocker for product foundation through017/028/030/040; embedded/standalone topology wording predates native1/3-only matrix.",
        "implementationScope": [
          "KL-001"
        ],
        "laterQualificationScope": [
          "KL-008",
          "KL-014",
          "KL-020"
        ],
        "stageDoneGate": "Only after native capabilities exist: isolated Linux jobs execute canonical100k/1M datasets and operation counts with original provenance/equivalent acknowledgement and complete oracles; no feature waits for benchmark success to be implemented.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F6",
      "executionOwner": "Performance / original native profiles and Linux comparisons",
      "nextDeliverable": "Only after native capabilities exist: isolated Linux jobs execute canonical100k/1M datasets and operation counts with original provenance/equivalent acknowledgement and complete oracles; no feature waits for benchmark success to be implemented.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 523,
        "heading": "KL-006 · Benchmark harness і PostgreSQL methodology",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-007",
      "title": "KeyCodec і storage envelopes",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-007",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "ff6edcfe64ab863538e6af208329121c040f543dc05d581564b56642d6ac75ab",
        "dependencies": [
          "KL-002"
        ],
        "deliverable": "Реалізувати binary composite ordering, immutable payload envelope, type/null/missing semantics.",
        "acceptance": "10 000 generated ordering/roundtrip cases; golden bytes збережені; mixed types, negatives, Unicode, escaping та extrema покриті."
      },
      "implementationPrerequisites": [
        "KL-002"
      ],
      "review": {
        "id": "KL-007",
        "finding": "Type/null/missing ordering must be versioned native raw storage plus stable Orleans aliases/Ids; generated case count alone is not native persistence proof.",
        "implementationScope": [
          "KL-001",
          "KL-002"
        ],
        "laterQualificationScope": [],
        "stageDoneGate": "Exact binary golden ordering/roundtrip/extrema/Unicode cases and actual write/read/reopen paths preserve the same keys and envelopes.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "StorageRecovery / silo-local ZoneTree Grain Service",
      "nextDeliverable": "Keep sortable canonical keys, native generated binary values and exact corruption/format refusal.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 531,
        "heading": "KL-007 · KeyCodec і storage envelopes",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-008",
      "title": "Storage adapter і lifetime",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-008",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "7c412102cbda073046a379c53bd1dc80a9df55a2c97a90281921c96937170ab3",
        "dependencies": [
          "KL-003",
          "KL-004",
          "KL-007"
        ],
        "deliverable": "Інкапсулювати ZoneTree behind partition API; додати read leases, maintainer lifecycle і file locking.",
        "acceptance": "Другий process owner відхиляється; dispose очікує leases/jobs; pooled buffers не змінюють збережені значення."
      },
      "implementationPrerequisites": [
        "KL-003",
        "KL-004",
        "KL-007"
      ],
      "review": {
        "id": "KL-008",
        "finding": "Spike evidence must be distinguished from actual node-local owner integration. Lease/job shutdown and second-process exclusion are mandatory from first usable owner.",
        "implementationScope": [
          "KL-003",
          "KL-004",
          "KL-007"
        ],
        "laterQualificationScope": [],
        "stageDoneGate": "Actual PartitionHost owns native ZoneTree/WAL/locks/apply; competing process refused and all original reads/jobs/buffers settle before disposal.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "StorageRecovery / silo-local ZoneTree Grain Service",
      "nextDeliverable": "Open and close the original physical partition through its silo-local Grain Service; preserve file exclusion and every original task.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 539,
        "heading": "KL-008 · Storage adapter і lifetime",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-009",
      "title": "Partition writer і command envelope",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-009",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "724eca31d33f81573e03f82b2302d66d298e2b6e435c0db6c4596bb4a23ccfe1",
        "dependencies": [
          "KL-002",
          "KL-008"
        ],
        "deliverable": "Створити bounded writer queue, deterministic apply та explicit ownership hook.",
        "acceptance": "Order відтворюється після replay; переповнення черги дає backpressure; external network calls відсутні під apply gate."
      },
      "implementationPrerequisites": [
        "KL-002",
        "KL-008"
      ],
      "review": {
        "id": "KL-009",
        "finding": "Explicit ownership hook is ambiguous: native Orleans routes while node-local ordered gate owns mutation; network under gate is forbidden.",
        "implementationScope": [
          "KL-002",
          "KL-008"
        ],
        "laterQualificationScope": [
          "KL-019",
          "KL-020"
        ],
        "stageDoneGate": "Bounded ordered admission/apply produces deterministic original outcomes and replay; overflow/backpressure/cancellation and original owner cleanup are tested.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "DocumentStorage / canonical partition writer",
      "nextDeliverable": "Retain one ordered atomic writer with original authority, byte limits, durable receipt and apply/recovery order.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 547,
        "heading": "KL-009 · Partition writer і command envelope",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-010",
      "title": "Document CRUD та CAS",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-010",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "7ad7b28f52d0a63985752df7171ea39273604a26014912f6956df35b94db023c",
        "dependencies": [
          "KL-009"
        ],
        "deliverable": "Реалізувати Get/Put/Patch/Delete, JSON validation, expectedRevision та tombstone.",
        "acceptance": "CAS race має одного переможця для однакової expected revision; duplicate JSON names/oversized/deep payloads відхиляються за контрактом."
      },
      "implementationPrerequisites": [
        "KL-009"
      ],
      "review": {
        "id": "KL-010",
        "finding": "Original DAG omits early persisted authorization and quotas; CRUD kernel need not await all query/search capability.",
        "implementationScope": [
          "KL-009",
          "KL-015"
        ],
        "laterQualificationScope": [
          "KL-020",
          "KL-021"
        ],
        "stageDoneGate": "Native whole CRUD/CAS/tombstone plus exact JSON rejection and single-winner race preserve full result, no partial effects, replay and healthy continuation.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "DocumentStorage / canonical partition writer",
      "nextDeliverable": "SDK write/read/CAS/delete and healthy replay through the real RF3 public path.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 555,
        "heading": "KL-010 · Document CRUD та CAS",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-011",
      "title": "Strict indexes і unique scope",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-011",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "dc1e74ae8751d77b8ad8870620733bb63468328789c97b440e40a917769f81d8",
        "dependencies": [
          "KL-007",
          "KL-010"
        ],
        "deliverable": "Реалізувати equality/range/composite/partition-unique; old/new index delta в одній транзакції.",
        "acceptance": "Reference model збігається після insert/update/delete/crash; два live documents не займають один unique key у заявленому scope."
      },
      "implementationPrerequisites": [
        "KL-007",
        "KL-010"
      ],
      "review": {
        "id": "KL-011",
        "finding": "Strict partition uniqueness and atomic old/new deltas are implementation; randomized/crash matrix is later qualification of the same implementation.",
        "implementationScope": [
          "KL-007",
          "KL-010",
          "KL-009"
        ],
        "laterQualificationScope": [
          "KL-003",
          "KL-020"
        ],
        "stageDoneGate": "Insert/update/delete/unique-conflict whole batches match independent rows/indexes and rollback atomically; no global uniqueness claim.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "DocumentStorage / canonical partition writer",
      "nextDeliverable": "Canonical index/unique changes commit with their document and refuse conflicts without effects.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 563,
        "heading": "KL-011 · Strict indexes і unique scope",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-012",
      "title": "Batch і persisted idempotency",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-012",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "9ff9ff3e75df08088181ce2d23f953efd817c015ddd85e5ebf1a1cca5528550f",
        "dependencies": [
          "KL-009",
          "KL-010",
          "KL-011"
        ],
        "deliverable": "Зберігати CommandId, payload hash, outcome та position атомарно з batch.",
        "acceptance": "100 повторів command до/після restart дають один ефект; same ID/different payload дає conflict; retention window задокументовано."
      },
      "implementationPrerequisites": [
        "KL-009",
        "KL-010",
        "KL-011"
      ],
      "review": {
        "id": "KL-012",
        "finding": "Generic persisted command inbox does not need completion of every index feature;011 is required for indexed whole-operation qualification.",
        "implementationScope": [
          "KL-002",
          "KL-009",
          "KL-010"
        ],
        "laterQualificationScope": [
          "KL-011",
          "KL-003",
          "KL-020"
        ],
        "stageDoneGate": "Command ID+typed payload identity+outcome+position commit with effects; same-ID changed payload conflicts and success/failure replays preserve all state and receipts.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "DocumentStorage / canonical partition writer",
      "nextDeliverable": "Persist stable command outcomes and same-partition atomic batches; evaluate native transactional grain state only with a participating provider.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 571,
        "heading": "KL-012 · Batch і persisted idempotency",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-013",
      "title": "Query AST, planner і cursors",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-013",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "914a564cd2ce76035ee97042c45a1a134d24fcd1297991fc8fa93d51c9fd8fc4",
        "dependencies": [
          "KL-004",
          "KL-011"
        ],
        "deliverable": "Реалізувати внутрішні predicates, ordered seek, projection, limits, Explain та versioned cursor; SQL frontend, binding і shared protocol деталізовані у KL-045..KL-054.",
        "acceptance": "Index plan і reference scan збігаються; pagination stable за контрактом; tampered/expired cursors відхиляються."
      },
      "implementationPrerequisites": [
        "KL-004",
        "KL-011",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-013",
        "finding": "AST/planner/ordered cursor is several deliverables. Index plan depends011, but bounded scalar AST does not; SQL frontend/protocol are separate explicit dependencies.",
        "implementationScope": [
          "KL-002",
          "KL-004",
          "KL-010",
          "KL-015"
        ],
        "laterQualificationScope": [
          "KL-011",
          "KL-045",
          "KL-046",
          "KL-047",
          "KL-054"
        ],
        "stageDoneGate": "Bounded authorized AST execution, scan/index differential results, exact projections and cursor tamper/expiry/scope/current-policy refusal are implemented; supported dialect inventory remains honest.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "Bounded authorized AST execution, scan/index differential results, exact projections and cursor tamper/expiry/scope/current-policy refusal are implemented; supported dialect inventory remains honest.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 579,
        "heading": "KL-013 · Query AST, planner і cursors",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-014",
      "title": "RF3 server and C# SDK",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-014",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "681d5fc29433d5353b758fa92d02535c58098f84b7032d71c21eb184176b9a4b",
        "dependencies": [
          "KL-010",
          "KL-012",
          "KL-013"
        ],
        "deliverable": "HTTP API, CLI, local Orleans host, config/data directory та typed client outcomes.",
        "acceptance": "Clean machine запускає сервер без зовнішніх сервісів; SDK обробляє unknown write outcome повтором CommandId."
      },
      "implementationPrerequisites": [
        "KL-010.minimum-command",
        "KL-012.minimum-stable-id",
        "KL-019",
        "KL-053.connection-owner",
        "KL-052",
        "KL-061",
        "KL-064",
        "KL-065.document-acl",
        "KL-066.local-epochs"
      ],
      "review": {
        "id": "KL-014",
        "finding": "Replace nested application/silo hosting with one native host; physical ZoneTree opening belongs to the silo-local Grain Service. Deferred constructors and post-Active catalog bootstrap avoid the real startup dependency cycles.",
        "implementationScope": [
          "KL-001",
          "KL-002",
          "KL-015",
          "KL-018",
          "KL-019",
          "KL-020",
          "KL-010",
          "KL-012"
        ],
        "laterQualificationScope": [
          "KL-013",
          "KL-054",
          "KL-074"
        ],
        "stageDoneGate": "Three native silos and real DB owners boot through Aspire-discovered endpoints; standard ASP.NET auth and SDK original command/outcome/retry/cleanup work without manual sidecar topology.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "ClientApi / ASP.NET admission and Orleans connection",
      "nextDeliverable": "Replace nested hosts with one native host and admit SDK/MCP only after the actual RF3 database is ready.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 587,
        "heading": "KL-014 · Standalone server і C# SDK",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-015",
      "title": "Security і telemetry baseline",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-015",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "dfba0c3dd37118bd254ca076eb111d881ab77b5e0b59f5e266789f4a5e1fbc81",
        "dependencies": [
          "KL-014"
        ],
        "deliverable": "Додати tenant/auth context, admin boundary, payload/query quotas та OpenTelemetry. До real-data milestone підключити principals, sensitive catalog, usage checks і safe projector із KL-061..KL-064 та ранній admission KL-052.",
        "acceptance": "Cross-tenant reads/writes/index scans блокуються; invalid payload не доводить сервер до OOM; telemetry не містить payload/секретів."
      },
      "implementationPrerequisites": [
        "KL-001",
        "KL-002"
      ],
      "review": {
        "id": "KL-015",
        "finding": "Waiting for014 postpones security and OpenTelemetry until after host implementation. Split foundational telemetry/admission from later full adversarial qualification.",
        "implementationScope": [
          "KL-001",
          "KL-002"
        ],
        "laterQualificationScope": [
          "KL-014",
          "KL-061",
          "KL-062",
          "KL-063",
          "KL-064",
          "KL-068"
        ],
        "stageDoneGate": "OpenTelemetry/activity/context and payload-free diagnostics start with native host; verified subject-only auth, fresh persisted permissions, tenant isolation and bounded inputs are present before real data.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F0",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Standard ASP.NET subject authentication, fresh persisted permissions and actual OpenTelemetry from the first host.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 595,
        "heading": "KL-015 · Security і telemetry baseline",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-016",
      "title": "Committed projection outbox",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-016",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "c6e1a01e70cd74476e0c67f2448303ea332de746dcd485c670a62d75e198cab5",
        "dependencies": [
          "KL-012"
        ],
        "deliverable": "Записувати mutation stream, consumer checkpoints, index generation та retention pins.",
        "acceptance": "Crash між commit і delivery не втрачає подію; duplicate delivery безпечна; checkpoint не перескакує failed event."
      },
      "implementationPrerequisites": [
        "KL-012"
      ],
      "review": {
        "id": "KL-016",
        "finding": "One task mixes mutation log, checkpoints, generations and retention pins; freeze smallest atomic outbox first, add provider-specific consumers afterward.",
        "implementationScope": [
          "KL-009",
          "KL-012"
        ],
        "laterQualificationScope": [
          "KL-029",
          "KL-031",
          "KL-034"
        ],
        "stageDoneGate": "Original acknowledged batch atomically records bounded outbox; original consumer checkpoint cannot jump a failed record, duplicate replay is safe and pins/retention preserve recovery.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "DocumentStorage / canonical partition writer",
      "nextDeliverable": "Persist projection outbox atomically with canonical changes, bounded catch-up and deterministic replay.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 603,
        "heading": "KL-016 · Committed projection outbox",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-017",
      "title": "Consensus provider qualification",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-017",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "ba3914a69c172f13cd9d07dfe54d0919878d14bbfa10d9d66fdfb3664f1224f9",
        "dependencies": [
          "KL-002",
          "KL-003",
          "KL-006"
        ],
        "deliverable": "Оцінити .NEXT persistent-state/flush/term/vote semantics і альтернативний шлях за потреби.",
        "acceptance": "Є evidence для follower durable-before-ACK та stable term/vote; total power-reset test визначає supported durability; слабший режим має інше explicit ім’я."
      },
      "implementationPrerequisites": [
        "KL-002",
        "KL-003",
        "KL-019.native-membership"
      ],
      "review": {
        "id": "KL-017",
        "finding": "Explicit .NEXT provider selection is superseded by native Orleans foundation and current database RF3 implementation;006 is later comparison, not consensus implementation prerequisite.",
        "implementationScope": [
          "KL-001",
          "KL-002",
          "KL-003",
          "KL-009"
        ],
        "laterQualificationScope": [
          "KL-006",
          "KL-020",
          "KL-035",
          "KL-041"
        ],
        "stageDoneGate": "Current database consensus ACK/term/vote/apply authority is specified and native replicated-operation path implemented independently of Orleans membership; real fault/power-reset qualification remains open until executed.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "ClusterReplication / native Orleans replica services",
      "nextDeliverable": "Qualify existing database replication over native Orleans transport; no second membership or liveness runtime.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 611,
        "heading": "KL-017 · Consensus provider qualification",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-018",
      "title": "Native host and persisted catalog bootstrap",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-018",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "ff4e0135e1efafaad98f983a27b178829af4dd0c936e060282b3d4af75e21924",
        "dependencies": [
          "KL-017"
        ],
        "deliverable": "Реалізувати seeds, node identity, durable catalog group і прямий internal transport.",
        "acceptance": "Кластер стартує без Orleans calls до readiness; повторний start не створює інший cluster identity; metadata CAS працює після leader loss."
      },
      "implementationPrerequisites": [
        "KL-018.stable-host-identity",
        "KL-020",
        "KL-061.bootstrap-identity",
        "KL-052.core-bounds",
        "KL-043.current-format"
      ],
      "review": {
        "id": "KL-018",
        "finding": "Open local storage through the native Grain Service, then join native membership and publish the database catalog after RF3/native Active. Host membership is not a canonical database catalog.",
        "implementationScope": [
          "KL-001",
          "KL-002",
          "KL-008",
          "KL-019"
        ],
        "laterQualificationScope": [
          "KL-017",
          "KL-020",
          "KL-021"
        ],
        "stageDoneGate": "Same silo-local Grain Service opens/recover files once before borrowers use them; native membership reaches Active before quorum/catalog RPC; actual startup/partial failure/cold restart preserve original owner and authority.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "ClusterReplication / native Orleans replica services",
      "nextDeliverable": "Native storage initialization before local use; native Active before RF3/catalog RPC; same original owner through failed startup.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 619,
        "heading": "KL-018 · Metadata bootstrap",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-019",
      "title": "Native Orleans membership, placement and ownership",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-019",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "1b549c10b39944e055e338852ebd820e2c313d393640905ab35e91aed77828dc",
        "dependencies": [
          "KL-018"
        ],
        "deliverable": "Додати membership CAS, partition routing/placement map та explicit epoch fences.",
        "acceptance": "Duplicate activation і старий epoch не допускають canonical write; restart зберігає filesystem ownership."
      },
      "implementationPrerequisites": [
        "KL-019.native-membership",
        "KL-018"
      ],
      "review": {
        "id": "KL-019",
        "finding": "Reuse actual native provider/directory/placement/repartitioner. Storage owners never migrate; audit native Immovable and manual movement separately for locality-sensitive grains. Current signed DB voter/incarnation fences remain.",
        "implementationScope": [
          "KL-001",
          "KL-002",
          "KL-015"
        ],
        "laterQualificationScope": [
          "KL-018",
          "KL-009",
          "KL-020",
          "KL-021",
          "KL-036"
        ],
        "stageDoneGate": "Native provider/directory plus explicit per-grain placement and automatic/manual migration policy; correct actual physical owner before effects, no open handles move with activation, first three-voter boot and healthy cold continuation.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "ClusterReplication / native Orleans replica services",
      "nextDeliverable": "Native membership/directory and per-grain placement/migration policy, with current physical authority checked separately.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 627,
        "heading": "KL-019 · Orleans membership і ownership adapter",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-020",
      "title": "Три-вузловий replicated apply",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-020",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "086a935154d2531fcb705c3c65cd93e24f789ecd09c5c79846e64884cd17ce1d",
        "dependencies": [
          "KL-009",
          "KL-012",
          "KL-017",
          "KL-019"
        ],
        "deliverable": "Перенести ordered command path на consensus group та atomic lastApplied.",
        "acceptance": "Після leader loss зберігаються acknowledged durable commands; retries не дублюють effects; minority не приймає strong writes."
      },
      "implementationPrerequisites": [
        "KL-009",
        "KL-012.minimum-stable-id",
        "KL-017",
        "KL-019.native-membership"
      ],
      "review": {
        "id": "KL-020",
        "finding": "Whole-consensus qualification versus native membership readiness must not form a cycle; implementation requires native boot stage of019, not completed all ownership/fault acceptance.",
        "implementationScope": [
          "KL-002",
          "KL-008",
          "KL-009",
          "KL-012",
          "KL-017",
          "KL-018",
          "KL-019"
        ],
        "laterQualificationScope": [
          "KL-003",
          "KL-035",
          "KL-041"
        ],
        "stageDoneGate": "Real native RF3 replicates one original bounded command and atomic lastApplied/outcome; durable ACK, minority refusal, leader-loss replay and all owned resources have meaningful complete flows.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "ClusterReplication / native Orleans replica services",
      "nextDeliverable": "Three real voter owners acknowledge/apply the same canonical command and recover the same receipt.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 635,
        "heading": "KL-020 · Три-вузловий replicated apply",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-021",
      "title": "Strong read і session tokens",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-021",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "ad721594805677a285687a98feb29aaf11243353bb1428b9ceed7e05b1808695",
        "dependencies": [
          "KL-020"
        ],
        "deliverable": "Read barrier, applied position, follower stale mode, token validation.",
        "acceptance": "Read-after-write із token проходить після failover; stale leader не повертає strong read без authority; invalid incarnation відхиляється."
      },
      "implementationPrerequisites": [
        "KL-020",
        "KL-019",
        "KL-053.connection-owner",
        "KL-061"
      ],
      "review": {
        "id": "KL-021",
        "finding": "Token-bearing strong reads need current persisted authority and scoped identity, not status-only leader readiness or global scalar cut.",
        "implementationScope": [
          "KL-002",
          "KL-015",
          "KL-020"
        ],
        "laterQualificationScope": [
          "KL-035",
          "KL-036",
          "KL-041"
        ],
        "stageDoneGate": "Actual read barrier covers acknowledged token; failover/current-owner/incarnation checks reject stale authority without partial page; native SDK/MCP reads preserve complete values.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "ClusterReplication / native Orleans replica services",
      "nextDeliverable": "Receipt/session cut reads, absent/tombstone cases, original unknown outcomes and healthy failover/replay.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 643,
        "heading": "KL-021 · Strong read і session tokens",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-022",
      "title": "Graph storage",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-022",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "685e484c84ee60c919b70960bb95da08ed70aa5563b58b914f02bd27599ff507",
        "dependencies": [
          "KL-011",
          "KL-012"
        ],
        "deliverable": "Entity references, edge record, incoming/outgoing indexes і delete policy.",
        "acceptance": "Random graph reference збігається; local edge mutation атомарна; duplicate edge command не створює зайвих ребер."
      },
      "implementationPrerequisites": [
        "KL-011",
        "KL-012",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-022",
        "finding": "Clarify canonical full EntityRef, endpoint deletion policy and same-partition atomicity; cross-partition reverse projection is038, not implicit local graph completion.",
        "implementationScope": [
          "KL-010",
          "KL-011",
          "KL-012",
          "KL-015"
        ],
        "laterQualificationScope": [
          "KL-020",
          "KL-038"
        ],
        "stageDoneGate": "Actual graph records plus both adjacency indexes match independent local mutation/reference model with bounded current authorization and stable original retry.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "GraphTraversal / partition grains and ZoneTree",
      "nextDeliverable": "Actual graph records plus both adjacency indexes match independent local mutation/reference model with bounded current authorization and stable original retry.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 651,
        "heading": "KL-022 · Graph storage",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-023",
      "title": "Bounded graph traversal",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-023",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "08b5a32f4d047454bf08b5e1fb1221be4e538cfbb820ddbec55af8c0a4d54a11",
        "dependencies": [
          "KL-013",
          "KL-022"
        ],
        "deliverable": "Neighbors, BFS, unweighted shortest path, batched frontier і budgets.",
        "acceptance": "Cycles не зациклюють query; reference shortest path збігається; depth/node/edge/deadline caps реально припиняють виконання."
      },
      "implementationPrerequisites": [
        "KL-022",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-023",
        "finding": "Neighbors/BFS/unweighted shortest path are several capability gates;013 applies to query composition, not the direct traversal kernel.",
        "implementationScope": [
          "KL-004",
          "KL-015",
          "KL-022"
        ],
        "laterQualificationScope": [
          "KL-013",
          "KL-020"
        ],
        "stageDoneGate": "Real authorized traversal has independent exact shortest-path/cycle oracle and enforced depth/vertex/edge/work/deadline limits; no hidden intermediate traversal or partial success.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "GraphTraversal / partition grains and ZoneTree",
      "nextDeliverable": "Real authorized traversal has independent exact shortest-path/cycle oracle and enforced depth/vertex/edge/work/deadline limits; no hidden intermediate traversal or partial success.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 659,
        "heading": "KL-023 · Bounded graph traversal",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-024",
      "title": "Time-series core",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-024",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "83949344e84ade3d66211f62e0228002cf122fa258614496c7cd28a88e130277",
        "dependencies": [
          "KL-007",
          "KL-012"
        ],
        "deliverable": "Series metadata, AppendBatch, UTC keys, equal timestamps і event dedup.",
        "acceptance": "Out-of-order/equal-timestamp samples читаються у визначеному порядку; retry не змінює кількість samples."
      },
      "implementationPrerequisites": [
        "KL-007",
        "KL-012",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-024",
        "finding": "Series identity/order/dedup contract must match actual selected ManagedCode.TimeSeries APIs; keep library ownership distinct from consumer workaround.",
        "implementationScope": [
          "KL-001",
          "KL-007",
          "KL-012",
          "KL-015"
        ],
        "laterQualificationScope": [
          "KL-020",
          "KL-078"
        ],
        "stageDoneGate": "Native append batch stores exact UTC/order/equal-time/out-of-order samples, bounded dedup and original retry; raw/current-policy and replay/reopen state remain equal.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "TimeSeries / native series library and ZoneTree",
      "nextDeliverable": "Native append batch stores exact UTC/order/equal-time/out-of-order samples, bounded dedup and original retry; raw/current-policy and replay/reopen state remain equal.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 667,
        "heading": "KL-024 · Time-series core",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-025",
      "title": "Time-series range і aggregates",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-025",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "f1ffb1be1835508b9df11062d674be73457be6dce60899bca8c81177a2a7356e",
        "dependencies": [
          "KL-013",
          "KL-024"
        ],
        "deliverable": "Range/latest, sum/count/min/max/avg, windows і explicit boundary rules.",
        "acceptance": "Агрегати збігаються з reference model для boundary/timezone/empty/late data; scanned-record budget дотримано."
      },
      "implementationPrerequisites": [
        "KL-024",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-025",
        "finding": "Direct range/arithmetic need not wait for all SQL planner; exact boundaries/null/empty/late-data and native numerical provider must be explicit.",
        "implementationScope": [
          "KL-002",
          "KL-004",
          "KL-015",
          "KL-024"
        ],
        "laterQualificationScope": [
          "KL-013",
          "KL-020",
          "KL-078"
        ],
        "stageDoneGate": "Independent complete range/latest/window and aggregate numerical oracles, raw scan/result bounds, cancellation and same native store healthy/replay/cold paths are implemented.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "TimeSeries / native series library and ZoneTree",
      "nextDeliverable": "Independent complete range/latest/window and aggregate numerical oracles, raw scan/result bounds, cancellation and same native store healthy/replay/cold paths are implemented.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 675,
        "heading": "KL-025 · Time-series range і aggregates",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-026",
      "title": "Retention, expiry і rollups",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-026",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "9735672fc2dee2d3a01bd0f03808c1b29c224df27721307ee3d1e17b7991b683",
        "dependencies": [
          "KL-016",
          "KL-024",
          "KL-025"
        ],
        "deliverable": "Logged expiration, bucket lifecycle, late-event policy, correction і reader leases.",
        "acceptance": "Expired data не повертається; replay однаковий між вузлами; bucket drop очікує reader leases; avg rollup відновлюється із sum/count."
      },
      "implementationPrerequisites": [
        "KL-016",
        "KL-024",
        "KL-025",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-026",
        "finding": "Expiry, late correction, leases and rollup are distinct stages; expiry must be canonical logged authority, never an unreplicated wall-clock delete.",
        "implementationScope": [
          "KL-008",
          "KL-009",
          "KL-016",
          "KL-024",
          "KL-025"
        ],
        "laterQualificationScope": [
          "KL-020",
          "KL-078"
        ],
        "stageDoneGate": "Original logged expiration/rollup has replay-identical sample/model results; old reader leases fence real bucket deletion and avg preserves independent sum/count.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "TimeSeries / native series library and ZoneTree",
      "nextDeliverable": "Original logged expiration/rollup has replay-identical sample/model results; old reader leases fence real bucket deletion and avg preserves independent sum/count.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 683,
        "heading": "KL-026 · Retention, expiry і rollups",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-027",
      "title": "Canonical vectors і exact search",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-027",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "78dd2238e7627235d1c02e9c5e8e974ccd5518e173ee1e3afa38193b74c18cae",
        "dependencies": [
          "KL-010",
          "KL-016"
        ],
        "deliverable": "Typed sidecar vector fields, dimension/model validation, SIMD scoring та exact allowlist path.",
        "acceptance": "Distance/top-k збігаються з reference implementation у допустимій похибці; model/dimension mismatch відхиляється; vector update атомарний із revision."
      },
      "implementationPrerequisites": [
        "KL-010",
        "KL-016",
        "KL-077.normal-simd",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-027",
        "finding": "Normal native SIMD support is mandatory; original scalar portability/disable profiles cannot become optional product execution. Exact path is independently deliverable before ANN.",
        "implementationScope": [
          "KL-001",
          "KL-010",
          "KL-012",
          "KL-015",
          "KL-016"
        ],
        "laterQualificationScope": [
          "KL-006",
          "KL-020",
          "KL-030"
        ],
        "stageDoneGate": "Typed canonical vector revision/dimension/model/finite validation and required intrinsics exact top-k match independent arithmetic; same-batch rollback, stale vectors, policy and replay/cold are covered.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Typed canonical vector revision/dimension/model/finite validation and required intrinsics exact top-k match independent arithmetic; same-batch rollback, stale vectors, policy and replay/cold are covered.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 691,
        "heading": "KL-027 · Canonical vectors і exact search",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-028",
      "title": "Text index provider audit",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-028",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "891913a13bb73c626ef6fd853a1b0c36fa60633fd8b8f761450f0afbe4a07fba",
        "dependencies": [
          "KL-006",
          "KL-016"
        ],
        "deliverable": "Перевірити ZoneTree.FullTextSearch ranking; оцінити Lucene.NET BM25, analyzers та formats.",
        "acceptance": "Capability matrix має підтвердження в API/tests; Ukrainian/English corpus пройдено; обраний provider підтримує потрібну replay/delete semantics."
      },
      "implementationPrerequisites": [
        "KL-001",
        "KL-016",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-028",
        "finding": "Provider selection/audit wording (Lucene alternative) is stale after owner selected ZoneTree.FullTextSearch; no new provider adoption implied and benchmark006 is not a coding blocker.",
        "implementationScope": [
          "KL-001",
          "KL-010",
          "KL-016"
        ],
        "laterQualificationScope": [
          "KL-006",
          "KL-058"
        ],
        "stageDoneGate": "Use selected actual native provider with explicit ranking/analyzer/delete/replay capability contract and original language corpus; missing capability is explicit, late audit/performance evidence remains separate.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Use selected actual native provider with explicit ranking/analyzer/delete/replay capability contract and original language corpus; missing capability is explicit, late audit/performance evidence remains separate.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 699,
        "heading": "KL-028 · Text index provider audit",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-029",
      "title": "Text projection і rebuild",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-029",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "603b96711d4d1959a97cd0e5dc53550635ed1d0eb438718deef2c41d7dd71a05",
        "dependencies": [
          "KL-016",
          "KL-028"
        ],
        "deliverable": "Index worker, checkpoint, deletes, analyzer generations, initial maintenance rebuild.",
        "acceptance": "Видалення проєкції та replay повертають очікувану видачу; crash на checkpoint не приховує missing updates; stale revision не воскресає."
      },
      "implementationPrerequisites": [
        "KL-016",
        "KL-028",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-029",
        "finding": "Basic disposable native projection/rebuild is separable from online generation swap; corruption/source absence must not silently recreate authority.",
        "implementationScope": [
          "KL-004",
          "KL-008",
          "KL-016",
          "KL-028"
        ],
        "laterQualificationScope": [
          "KL-020",
          "KL-034",
          "KL-039"
        ],
        "stageDoneGate": "Original canonical outbox rebuild/update/delete and checkpoint retain exact source revisions; lost projection rebuilt from real records, crash/duplicate replay cannot resurrect stale data.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Original canonical outbox rebuild/update/delete and checkpoint retain exact source revisions; lost projection rebuilt from real records, crash/duplicate replay cannot resurrect stale data.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 707,
        "heading": "KL-029 · Text projection і rebuild",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-030",
      "title": "ANN provider qualification",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-030",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "26a4ca1a74e5bcce0160ad0fff24576b4b3bf68dbd61a312b00bebde052f378b",
        "dependencies": [
          "KL-006",
          "KL-027"
        ],
        "deliverable": "Managed ANN candidate: source/license/transitive-dependency audit, filtering, concurrency, ownership і save/load. USearch допускається як optional external comparison; обраний baseline deployment зберігає managed-first constraint.",
        "acceptance": "Exact comparison і stress delete/reinsert пройдено; memory bounded; усі потрібні operations доступні на pinned targets. Деталізований implementation gate продовжується у KL-059."
      },
      "implementationPrerequisites": [
        "KL-001",
        "KL-027",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-030",
        "finding": "Candidate source/license/comparison audit should not delay native foundation; keep current managed candidate and no unapproved native dependency. KL059 owns remaining implementation qualification.",
        "implementationScope": [
          "KL-001",
          "KL-015",
          "KL-027"
        ],
        "laterQualificationScope": [
          "KL-006",
          "KL-059"
        ],
        "stageDoneGate": "Existing managed ANN API/lifetime/save/load/filter/delete bounds are defined and implemented against exact oracle; required Linux recall/concurrency/memory measurements remain explicit late gates.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Existing managed ANN API/lifetime/save/load/filter/delete bounds are defined and implemented against exact oracle; required Linux recall/concurrency/memory measurements remain explicit late gates.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 715,
        "heading": "KL-030 · ANN provider qualification",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-031",
      "title": "ANN projection lifecycle",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-031",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8eea75dc5378235a19721c21fe1a1849b165da3eecbce2900dbc47b7845ae8e1",
        "dependencies": [
          "KL-016",
          "KL-030"
        ],
        "deliverable": "Snapshot+deltas, atomic generation manifest, replay-safe update/delete та rebuild.",
        "acceptance": "Crash у всіх manifest/save/replay точках дає коректний recovery; duplicate outbox delivery безпечна; obsolete generation не приймає updates."
      },
      "implementationPrerequisites": [
        "KL-016",
        "KL-030",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-031",
        "finding": "Snapshot+deltas/rebuild and online swap overlap039; share generation/lease primitives without31↔39 cycle, then qualify swap as separate integration.",
        "implementationScope": [
          "KL-008",
          "KL-016",
          "KL-027",
          "KL-030"
        ],
        "laterQualificationScope": [
          "KL-020",
          "KL-034",
          "KL-039",
          "KL-041"
        ],
        "stageDoneGate": "Native ANN current generation/outbox update/delete and persisted snapshot manifest recover atomically; duplicates and obsolete generation writes fail correctly with joined owner lifetime.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Native ANN current generation/outbox update/delete and persisted snapshot manifest recover atomically; duplicates and obsolete generation writes fail correctly with joined owner lifetime.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 723,
        "heading": "KL-031 · ANN projection lifecycle",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-032",
      "title": "Filtered vector planner",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-032",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "2dedeb4c17511896be61a21a3c890fab1b101d1e8011354c0193d52c646b9543",
        "dependencies": [
          "KL-013",
          "KL-023",
          "KL-027",
          "KL-031"
        ],
        "deliverable": "Allowlist planning, exact fallback, ANN expansion, authoritative final filtering.",
        "acceptance": "Zero cross-tenant/ACL leaks; recall@10 ≥0.95 на затверджених cohorts або release-blocking result; підсумкова кількість/partial status правдиві."
      },
      "implementationPrerequisites": [
        "KL-013",
        "KL-023",
        "KL-027",
        "KL-031",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-032",
        "finding": "Full ANN projection and graph scope are conditional modality dependencies, not prerequisites for authorized exact filtered search. Recall is a later approved-cohort gate.",
        "implementationScope": [
          "KL-013",
          "KL-015",
          "KL-027"
        ],
        "laterQualificationScope": [
          "KL-023",
          "KL-031",
          "KL-006"
        ],
        "stageDoneGate": "Exact allowlist/final canonical row+field authorization is complete first; ANN variant then proves bounded refill/truthful completeness and approved recall without leaks or hidden fallback.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Exact allowlist/final canonical row+field authorization is complete first; ANN variant then proves bounded refill/truthful completeness and approved recall without leaks or hidden fallback.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 731,
        "heading": "KL-032 · Filtered vector planner",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-033",
      "title": "Hybrid rank і Explain",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-033",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "6ea586344a46277447e9b75717198bfcec2998ab0aaab570c367de0eea61c1c7",
        "dependencies": [
          "KL-029",
          "KL-032"
        ],
        "deliverable": "BM25/vector candidate merge, weighted RRF, stable ties, optional rerank hook.",
        "acceptance": "Ranking reproduces deterministic fixture; score contributions пояснюються; candidate-window effects виміряні на relevance corpus."
      },
      "implementationPrerequisites": [
        "KL-029",
        "KL-032",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-033",
        "finding": "Exact text/vector weighted fusion does not require completed ANN qualification. Optional rerank is undefined external work unless separately authorized and bounded.",
        "implementationScope": [
          "KL-015",
          "KL-027",
          "KL-029"
        ],
        "laterQualificationScope": [
          "KL-032",
          "KL-031",
          "KL-006"
        ],
        "stageDoneGate": "Independent fixed branch ranks/weights/ties produce exact complete hit and Explain contributions; opt-in metadata obeys privacy and cumulative limits; later relevance-window measurements remain open.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Independent fixed branch ranks/weights/ties produce exact complete hit and Explain contributions; opt-in metadata obeys privacy and cumulative limits; later relevance-window measurements remain open.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 739,
        "heading": "KL-033 · Hybrid rank і Explain",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-034",
      "title": "Search freshness contract",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-034",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8658b7940d0f4b0e843b9267783166b43300ebc5d453537de9ae220af27069dd",
        "dependencies": [
          "KL-016",
          "KL-021",
          "KL-029",
          "KL-031"
        ],
        "deliverable": "CommitToken, WaitForIndex, error states, GC pins та generation handling.",
        "acceptance": "Wait завершується лише після потрібного prefix; timeout/failure visible; deleted documents відсутні навіть зі stale projection."
      },
      "implementationPrerequisites": [
        "KL-016",
        "KL-021",
        "KL-029",
        "KL-031",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-034",
        "finding": "Text freshness can ship before all ANN lifecycle; generation and token scopes are independent and must not infer applied work from a status counter.",
        "implementationScope": [
          "KL-008",
          "KL-016",
          "KL-021",
          "KL-029"
        ],
        "laterQualificationScope": [
          "KL-031",
          "KL-039",
          "KL-006"
        ],
        "stageDoneGate": "Actual WaitForIndex covers requested committed prefix/current generation and retains pins; timeout/cancel/failed generation is explicit and stale deleted rows never escape.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Actual WaitForIndex covers requested committed prefix/current generation and retains pins; timeout/cancel/failed generation is explicit and stale deleted rows never escape.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 747,
        "heading": "KL-034 · Search freshness contract",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-035",
      "title": "Replica snapshot і installation",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-035",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "752e173faa66baaa2c99bd67f926eb505271c421d4511186e3232e241d455185",
        "dependencies": [
          "KL-005",
          "KL-020"
        ],
        "deliverable": "Створити committed cut, index/term/config metadata, checksummed transfer та atomic install.",
        "acceptance": "Follower із порожнім диском наздоганяє leader; interrupted install відновлюється; log GC не видаляє останній recovery path."
      },
      "implementationPrerequisites": [
        "KL-005",
        "KL-020"
      ],
      "review": {
        "id": "KL-035",
        "finding": "Recovery-critical snapshot installation belongs before optional search/movement, while exhaustive fault matrix is progressive qualification. Use native Orleans peer execution.",
        "implementationScope": [
          "KL-005",
          "KL-008",
          "KL-019",
          "KL-020"
        ],
        "laterQualificationScope": [
          "KL-003",
          "KL-041"
        ],
        "stageDoneGate": "Actual canonical committed cut/term/config transfer and atomic install catch an empty follower up; interrupted install and log-GC recovery path have independent native state/receipt oracles.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "StorageRecovery / silo-local ZoneTree Grain Service",
      "nextDeliverable": "Install a real checkpoint and replay/catch up without replacing active or unclosed physical ownership.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 755,
        "heading": "KL-035 · Replica snapshot і installation",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-036",
      "title": "Controlled partition movement",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-036",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8121dc95dce309e3ebbfc957f9c5cb1025cc935af1711f44343a844bf3bd7698",
        "dependencies": [
          "KL-019",
          "KL-035"
        ],
        "deliverable": "Durable migration state machine: copy/catch-up/barrier/switch/cleanup.",
        "acceptance": "Crash на кожному кроці без втрати durable commands; старий owner fenced; routing tokens коректно обробляють epoch change."
      },
      "implementationPrerequisites": [
        "KL-019",
        "KL-035"
      ],
      "review": {
        "id": "KL-036",
        "finding": "Storage move is distinct from native activation migration; no custom network/HTTP transport. It must not delay static-owner query/reverse-edge implementation.",
        "implementationScope": [
          "KL-002",
          "KL-008",
          "KL-019",
          "KL-020",
          "KL-035"
        ],
        "laterQualificationScope": [
          "KL-021",
          "KL-041"
        ],
        "stageDoneGate": "Native Orleans coordinated copy/catch-up/barrier/switch/cleanup retains real file ownership and original RF3 receipt; each old epoch fenced and original failure/replay/cold behavior preserved.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "ClusterRouting / native placement and physical owners",
      "nextDeliverable": "Move physical data through checkpoint/catch-up/authority cutover; activation migration never moves files.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 763,
        "heading": "KL-036 · Controlled partition movement",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-037",
      "title": "Distributed query execution",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-037",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "996e9497a72f5ac45699e603bd7f18a2fb4ba9f0c62974033374439b4b40126c",
        "dependencies": [
          "KL-013",
          "KL-021",
          "KL-033",
          "KL-036"
        ],
        "deliverable": "Bounded fan-out, per-modality global candidate merge, query cancellation та statistics epoch.",
        "acceptance": "Порівняння з centralized oracle; exact/approximate differences задокументовано; slow shard дає bounded timeout/explicit partial."
      },
      "implementationPrerequisites": [
        "KL-013",
        "KL-021",
        "KL-033",
        "KL-036",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-037",
        "finding": "Monolithic distributed scalar/search/statistics/approximate merge overstates universal033/036 prerequisites. Split static scalar fanout from optional global ranking and movement faults.",
        "implementationScope": [
          "KL-013",
          "KL-015",
          "KL-019",
          "KL-021"
        ],
        "laterQualificationScope": [
          "KL-033",
          "KL-036",
          "KL-057",
          "KL-058"
        ],
        "stageDoneGate": "Static real multi-owner bounded query first matches centralized whole-page oracle and fresh policy; search/global-statistics/ANN and movement variants receive their own explicit acceptance without silent partials.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "ClusterRouting / native placement and physical owners",
      "nextDeliverable": "Static real multi-owner bounded query first matches centralized whole-page oracle and fresh policy; search/global-statistics/ANN and movement variants receive their own explicit acceptance without silent partials.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 771,
        "heading": "KL-037 · Distributed query execution",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-038",
      "title": "Cross-partition graph edges",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-038",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "39a1047e54db20b0d8ed858f457c883a0aaa78b9da0390510ec6829bb77bde1b",
        "dependencies": [
          "KL-016",
          "KL-022",
          "KL-023",
          "KL-036"
        ],
        "deliverable": "Canonical edge owner, async reverse adjacency, tombstones та repair.",
        "acceptance": "Duplicate/out-of-order deliveries не воскресають edges; declared eventual window виміряно; cascade errors видимі."
      },
      "implementationPrerequisites": [
        "KL-016",
        "KL-022",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-038",
        "finding": "Reverse-edge delivery to static distinct owners does not require traversal or completed physical movement. Eventual-window measurement is separate from correctness implementation.",
        "implementationScope": [
          "KL-015",
          "KL-016",
          "KL-019",
          "KL-020",
          "KL-021",
          "KL-022"
        ],
        "laterQualificationScope": [
          "KL-023",
          "KL-036",
          "KL-041"
        ],
        "stageDoneGate": "Actual signed source/target/completion operations preserve canonical edge/tombstone/high-water/receipt authority; duplicate/reorder/contradiction/current-policy/cancel/repair/replay/two-cold flows retain full results.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "GraphTraversal / partition grains and ZoneTree",
      "nextDeliverable": "Actual signed source/target/completion operations preserve canonical edge/tombstone/high-water/receipt authority; duplicate/reorder/contradiction/current-policy/cancel/repair/replay/two-cold flows retain full results.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 779,
        "heading": "KL-038 · Cross-partition graph edges",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-039",
      "title": "Online index generation swap",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-039",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "3efdf40c2eecab1d6ad5c758f3264e23866bd7fe1600e8f8fd0d6f6a78dbc671",
        "dependencies": [
          "KL-004",
          "KL-016",
          "KL-029",
          "KL-031",
          "KL-036"
        ],
        "deliverable": "Consistent cut, delta catch-up, validation, catalog swap та leased retirement.",
        "acceptance": "Concurrent update/delete під час build не губляться; rollback/restart зберігає active generation; старі readers завершуються без missing files."
      },
      "implementationPrerequisites": [
        "KL-004",
        "KL-016",
        "KL-029",
        "KL-031",
        "KL-036.owner-fence-contract",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-039",
        "finding": "Text generation lease/swap need not wait for ANN and physical movement. Separate common resource ownership primitives from each provider-specific lifecycle.",
        "implementationScope": [
          "KL-004",
          "KL-008",
          "KL-016",
          "KL-029"
        ],
        "laterQualificationScope": [
          "KL-031",
          "KL-036",
          "KL-041"
        ],
        "stageDoneGate": "Original concurrent update/delete, failed capture, live reader pins and idempotent disposal preserve exact files/active generation; last native reader release removes retired directory and replay/cold stays correct.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "Original concurrent update/delete, failed capture, live reader pins and idempotent disposal preserve exact files/active generation; last native reader release removes retired directory and replay/cold stays correct.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 787,
        "heading": "KL-039 · Online index generation swap",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-040",
      "title": "Resource governor",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-040",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "cb98433b48d7660878133dc67521acf2a99eb5f8d319071f37a6644c6c8d5103",
        "dependencies": [
          "KL-006",
          "KL-015",
          "KL-020",
          "KL-031"
        ],
        "deliverable": "Розширити ранні node/tenant budgets із KL-052: compaction quotas, hot-partition throttling, memory/disk accounting і lag admission. Базовий admission впроваджується у P1.",
        "acceptance": "Sustained overload дає bounded memory/queue; disk-full не створює false durable ACK; RSS/native budgets виміряні під rebuild."
      },
      "implementationPrerequisites": [
        "KL-015",
        "KL-020",
        "KL-052"
      ],
      "review": {
        "id": "KL-040",
        "finding": "P6-only governor is too late; early queue/admission/retained memory bounds start at foundation. Compaction/rebuild accounting expands when those capabilities exist.",
        "implementationScope": [
          "KL-008",
          "KL-009",
          "KL-015",
          "KL-052"
        ],
        "laterQualificationScope": [
          "KL-006",
          "KL-020",
          "KL-029",
          "KL-031"
        ],
        "stageDoneGate": "Every native producer has bounded admission/cancel/join first; later tenant/compaction/disk-full/lag tests prove complete no-false-ACK behavior under actual resource bounds and matched measurements.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "ResourceExecution / bounded silo-local admission",
      "nextDeliverable": "Keep bounded silo-local RAM/cache/admission and real ownership settlement; reuse native maintenance only if its join contract fits.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 795,
        "heading": "KL-040 · Resource governor",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-041",
      "title": "Chaos і corruption suite",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-041",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "08bd12d2de6512a6f75511ca73f918a8061eb9cf64e67219418600c2207b87ff",
        "dependencies": [
          "KL-020",
          "KL-035",
          "KL-036",
          "KL-039"
        ],
        "deliverable": "Network partitions, pauses, stale leaders, partial I/O, corrupt WAL, power-reset fault model.",
        "acceptance": "History checker не знаходить forbidden outcomes; кожна corruption class має явний recovery/fail-stop результат та збережений seed."
      },
      "implementationPrerequisites": [
        "KL-020",
        "KL-035",
        "KL-036",
        "KL-039"
      ],
      "review": {
        "id": "KL-041",
        "finding": "Chaos only after all advanced features postpones essential durability feedback; progressive capability-scoped fault suites start with the native owner. Power reset remains distinct from process kill.",
        "implementationScope": [
          "KL-003",
          "KL-008",
          "KL-009",
          "KL-020"
        ],
        "laterQualificationScope": [
          "KL-035",
          "KL-036",
          "KL-039"
        ],
        "stageDoneGate": "Original seeded faults and history/state oracle run for each admitted capability; full final corruption/network/stale-owner/movement/index matrix retains explicit recovery/fail-stop and authentic Linux artifacts.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F5",
      "executionOwner": "Qualification / actual native functional operations",
      "nextDeliverable": "Original seeded faults and history/state oracle run for each admitted capability; full final corruption/network/stale-owner/movement/index matrix retains explicit recovery/fail-stop and authentic Linux artifacts.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 803,
        "heading": "KL-041 · Chaos і corruption suite",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-042",
      "title": "Cluster backup і restore drills",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-042",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "4279d72ef9f91636703965f8f1227ab16f1d27b04068914ba7bef0b56356144b",
        "dependencies": [
          "KL-005",
          "KL-035",
          "KL-038"
        ],
        "deliverable": "Catalog-consistent manifest з per-partition cuts, off-node destination та restore CLI.",
        "acceptance": "Restore на чистий cluster відновлює declared cut semantics; retained outbox/graph repair узгоджені; RPO/RTO виміряні."
      },
      "implementationPrerequisites": [
        "KL-005",
        "KL-035"
      ],
      "review": {
        "id": "KL-042",
        "finding": "Document-cluster backup should not wait for cross-partition graph capability; graph/outbox consistency is mandatory when those capabilities are included, not a fabricated universal predecessor.",
        "implementationScope": [
          "KL-005",
          "KL-016",
          "KL-018",
          "KL-020",
          "KL-035"
        ],
        "laterQualificationScope": [
          "KL-038",
          "KL-041"
        ],
        "stageDoneGate": "Actual catalog/per-partition cuts and off-node manifest restore a clean native cluster; every included model/receipt/outbox/repair relationship matches independent expected data, with later RPO/RTO measurements.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F5",
      "executionOwner": "BackupRestore / actual native checkpoints",
      "nextDeliverable": "Actual catalog/per-partition cuts and off-node manifest restore a clean native cluster; every included model/receipt/outbox/repair relationship matches independent expected data, with later RPO/RTO measurements.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 811,
        "heading": "KL-042 · Cluster backup і restore drills",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-043",
      "title": "Current-format recovery, backup and restore",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-043",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "4fe48bc21272c0931d63160439df05bcfeb722f40d99fdde521cd37aecd0e201",
        "dependencies": [
          "KL-001",
          "KL-007",
          "KL-035",
          "KL-039"
        ],
        "deliverable": "Golden databases, rolling upgrade matrix, reader/writer capability negotiation і migrations.",
        "acceptance": "Попередні supported formats читаються; unsupported downgrade відхиляється до mutation; restore/replay перевірені для кожної supported version pair."
      },
      "implementationPrerequisites": [
        "KL-043.current-format",
        "KL-005",
        "KL-035"
      ],
      "review": {
        "id": "KL-043",
        "finding": "Golden previous databases, rolling upgrade and migrations conflict with first-release current-format-only/no legacy policy. Reserve native IDs, reject unsupported formats; future upgrade contract is separate.",
        "implementationScope": [
          "KL-001",
          "KL-002",
          "KL-007"
        ],
        "laterQualificationScope": [
          "KL-035",
          "KL-039",
          "KL-041",
          "KL-042"
        ],
        "stageDoneGate": "Current native wire/persistence capability identity and malformed/unknown/downgrade refusal before effects are implemented; current restore/replay is verified without legacy handler, alias shim or migration.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F1",
      "executionOwner": "StorageRecovery / silo-local ZoneTree Grain Service",
      "nextDeliverable": "Reject unknown current-format data before effects and restore/replay supported current data; no legacy migration.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 819,
        "heading": "KL-043 · Upgrade і format compatibility",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-044",
      "title": "Release gate і operational handbook",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-044",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "a40e93874b6636afd126ccc2313f492288507da0218e87bd917f15dd1f666e26",
        "dependencies": [
          "KL-040",
          "KL-041",
          "KL-042",
          "KL-043"
        ],
        "deliverable": "72-hour sustained workload, recovery drills, alerts, capacity guide та documented guarantees.",
        "acceptance": "Немає необмеженого WAL/outbox/compaction backlog; correctness перевірено після тесту; опубліковані raw metrics, fault model і відомі обмеження."
      },
      "implementationPrerequisites": [
        "KL-040",
        "KL-041",
        "KL-042",
        "KL-043"
      ],
      "review": {
        "id": "KL-044",
        "finding": "Original four predecessor list is not complete product release readiness; it omits SQL/client/security/native RF3 and added owner scopes. Handbook/alerts begin early, release qualification remains last.",
        "implementationScope": [
          "KL-015",
          "KL-040",
          "KL-041",
          "KL-042",
          "KL-043"
        ],
        "laterQualificationScope": [
          "KL-006",
          "KL-054",
          "KL-068",
          "KL-074",
          "KL-075",
          "KL-076",
          "KL-077",
          "KL-080",
          "KL-104",
          "KL-105"
        ],
        "stageDoneGate": "Only authentic exact-source full required suites, native RF3 clients, endurance72h/full final correctness, bounded backlog, restoration and complete approved evidence permit a scoped release statement; no source-review closure.",
        "wholeTaskGate": "Stage code readiness is not whole-task acceptance: preserve original required native TUnit/process recovery/Aspire RF3 SDK+official MCP/Linux/fault/resource gates; benchmarks/profiling/audits/releases execute last. No current status is changed."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F7",
      "executionOwner": "Delivery / final acceptance and runbooks",
      "nextDeliverable": "Only authentic exact-source full required suites, native RF3 clients, endurance72h/full final correctness, bounded backlog, restoration and complete approved evidence permit a scoped release statement; no source-review closure.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 827,
        "heading": "KL-044 · Release gate і operational handbook",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-045",
      "title": "Query capability manifest і AST version",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-045",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "a2e36e05dea719f17e8f30d5608efdb9d43a050829cfdf1b8ea722d03f2d5526",
        "dependencies": [
          "KL-002"
        ],
        "deliverable": "Визначити supported statements, expressions, named parameters, types, protocol version і stable errors для SQL/JSON/SDK.",
        "acceptance": "Кожен public operator має semantics, cost class і permission requirements; unknown/unsupported operator відхиляється до execution; AST roundtrip fixtures збережено."
      },
      "implementationPrerequisites": [
        "KL-002",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-045",
        "finding": "Manifest bundles grammar, public protocol and semantic execution. Separate these inventories; operator permission/cost/error semantics must be frozen before exposure, while full SQL/client protocol remain mandatory later.",
        "dependencyCorrection": "No dependency removal; narrow KL002 prerequisite to stable identity/contracts rather than all eventual cross-model semantics.",
        "implementationScope": "KL002 identity + bounded typed public-operation inventory, minimum persisted authorization/admission; no full SQL parser required to freeze contract",
        "laterQualificationScope": "Per operator genuine SDK/MCP/SQL conformance, original unknown/unsupported refusal and whole release inventory"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "Version supported operation identity and capability semantics across SQL/SDK/MCP.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1746,
        "heading": "KL-045 · Query capability manifest і AST version",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-046",
      "title": "T-SQL dialect semantics",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-046",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "436d2a4be2c31f8837d49a7636b0b8aef9706cc80e16e56b8cdee41294c5ebfb",
        "dependencies": [
          "KL-045"
        ],
        "deliverable": "Зафіксувати null/missing, numeric promotion, JSON paths, collation, deterministic order, endpoint filters і SEARCH eligibility.",
        "acceptance": "Є executable semantic fixtures для boundary cases; SQL-підмножина має versioned specification; full PostgreSQL compatibility не заявляється."
      },
      "implementationPrerequisites": [
        "KL-045",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-046",
        "finding": "Selected T-SQL semantics via ScriptDOM. Null/missing, numeric bounds, collation, ordering, cursors and supported operators are explicit; the minimum profile is separate from full SQL acceptance.",
        "dependencyCorrection": "KL045 contract is genuine; full PostgreSQL compatibility is neither selected language nor prerequisite.",
        "implementationScope": "KL045 versioned contract, exact canonical scalar semantics",
        "laterQualificationScope": "All current implemented T-SQL operators, bounds/security and native parity before full language claim"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "Define current supported T-SQL semantics before lowering; keep full language and minimum profile distinct.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1754,
        "heading": "KL-046 · SQL dialect semantics",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-047",
      "title": "Microsoft ScriptDOM parser adapter and diagnostics",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-047",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "eb68eb02eb6023217bff76ef4af1c43dedf08c5f1a4120ed3bd361db3317844c",
        "dependencies": [
          "KL-001",
          "KL-045",
          "KL-046"
        ],
        "deliverable": "Кваліфікувати SqlParser-cs або власний bounded parser, підключити dialect extensions, source spans і error positions.",
        "acceptance": "Fuzzed malformed/deep/oversized input не створює unbounded CPU/RAM; parsed unsupported SQL дає capability error; lexical errors не відображають sensitive parameters."
      },
      "implementationPrerequisites": [
        "KL-001",
        "KL-045",
        "KL-046",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-047",
        "finding": "Actual centrally pinned Microsoft ScriptDOM replaces handwritten parsing entirely. Complete bounded syntax/semantic lowering and precise unsupported errors; no PostgreSQL grammar fallback.",
        "dependencyCorrection": "Keep harness/contracts; parser-selection research is resolved, not a new dependency/re-evaluation.",
        "implementationScope": "KL001 trusted functional harness; KL045/046 current T-SQL contracts; selected pinned Microsoft.SqlServer.TransactSql.ScriptDom",
        "laterQualificationScope": "Actual malformed/deep/oversized parser-to-native operations, exact safe spans/errors and unsupported semantics; full Linux parser/native parity"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "Use actual Microsoft ScriptDOM with bounded input and safe parse/lower/unsupported diagnostics.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1762,
        "heading": "KL-047 · SQL parser adapter і diagnostics",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-048",
      "title": "Binder і field lineage",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-048",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "6bf39863ca8d7293475a6f2b48f3b2838c8ff8f912e52c35b77c8f29691cb4be",
        "dependencies": [
          "KL-047",
          "KL-015"
        ],
        "deliverable": "Names → catalog IDs, type inference, function whitelist, dependency lineage для expressions і field-use permissions.",
        "acceptance": "Alias/nested extraction/function не обходять field restriction; unknown types і unsafe casts відхиляються перед storage access; principal-scoped binds повторювані."
      },
      "implementationPrerequisites": [
        "KL-047",
        "KL-061",
        "KL-062",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-048",
        "finding": "Binder conflates neutral name/type resolution and principal-scoped authorization. Freeze immutable normalized representation then reload current permissions at each execution; do not cache a trusted role or imply fullSQL is needed for early RBAC.",
        "dependencyCorrection": "KL015 is permission prerequisite only; broad security/telemetry audit is late qualification, not a binder blocker.",
        "implementationScope": "KL047 native lowering; schema/type catalog; minimum persisted field-use policy from KL015/061/062",
        "laterQualificationScope": "Every declared expression/alias/operator full lineage denies before unsafe lookup; real native/RF3 requests"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "KL047 native lowering; schema/type catalog; minimum persisted field-use policy from KL015/061/062",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1770,
        "heading": "KL-048 · Binder і field lineage",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-049",
      "title": "Rule-based optimizer",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-049",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "be1113f430cda202330903a6c62b4990a18e35dbead5bf80b776cc19580412ad",
        "dependencies": [
          "KL-048",
          "KL-013"
        ],
        "deliverable": "Index matching, route pruning, bounded sort/aggregate, residual predicates, protected policy barriers і plan-cache signature.",
        "acceptance": "Optimized і reference plans дають однаковий результат; unsafe policy reordering заборонене; estimated scan/fan-out видимі в Explain."
      },
      "implementationPrerequisites": [
        "KL-048",
        "KL-013",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-049",
        "finding": "Oversized optimizer scope combines index matching, sorting, aggregation, cache and routing. Deliver deterministic safe rules per supported operator; an optional rule/cache cannot block the first correct bounded plan executor.",
        "dependencyCorrection": "KL048 and actual index/read contracts genuine; measured gain and exhaustive optimization belong late, no benchmark prerequisite for correct execution.",
        "implementationScope": "KL048 validated expressions and existing KL013 bounded execution/index contracts",
        "laterQualificationScope": "Independent reference versus optimized plans plus policy order, limits, Explain and current authority"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "KL048 validated expressions and existing KL013 bounded execution/index contracts",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1778,
        "heading": "KL-049 · Rule-based optimizer",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-050",
      "title": "Batch executor і secure operator boundaries",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-050",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "4c79c0e83c48be5089e151a8c5b80d1ae65c3c7bcf5893d81aaddb901468f2bc",
        "dependencies": [
          "KL-049",
          "KL-004"
        ],
        "deliverable": "Leased read views, RecordBatch pipeline, bounded queues, late materialization і cancellation.",
        "acceptance": "Operators звільняють leases/buffers при cancel/exception; scan не читає partial transaction; batch allocations і queue bounds виміряні."
      },
      "implementationPrerequisites": [
        "KL-049",
        "KL-004",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-050",
        "finding": "RecordBatch pipeline/late materialization/queues are architectural choices, not blanket permission to add second execution/lifecycle framework. Current native leased/read budget path must be preserved and proved before optimization.",
        "dependencyCorrection": "Full KL049 optimizer is over-strong prerequisite for foundational lease and cancellation safety. Split baseline execution from optimization and measured allocation acceptance.",
        "implementationScope": "KL004 consistent scoped reads + bounded cancellation/admission; normalized operation contract from KL048/049 subset",
        "laterQualificationScope": "Actual lease/buffer join on success/failure/cancel, no partial transaction; matched allocation/queue evidence late"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "KL004 consistent scoped reads + bounded cancellation/admission; normalized operation contract from KL048/049 subset",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1786,
        "heading": "KL-050 · Batch executor і secure operator boundaries",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-051",
      "title": "SQL/JSON/C# equivalence",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-051",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "3c35ac71733583f1f062607471a691337ff8742b8960c3a10a8a7d396e70217b",
        "dependencies": [
          "KL-050",
          "KL-014"
        ],
        "deliverable": "Public query endpoints, typed parameters/vector attachments і builder lowering в той самий AST.",
        "acceptance": "Три входи мають equivalent normalized plans/results/errors; unsupported LINQ не переходить до implicit client evaluation."
      },
      "implementationPrerequisites": [
        "KL-050",
        "KL-014",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-051",
        "finding": "Task should name current selected language, version and actual builder coverage. Add operators incrementally with complete parity; a class or adapter shape is not proof.",
        "dependencyCorrection": "Do not require every future batch optimizer or full SQL family before testing already exposed operation parity.",
        "implementationScope": "KL014 actual SDK contract; current executable SQL/AST capability subset and KL050 bounded execution",
        "laterQualificationScope": "Same normalized typed operations, independent complete results/errors/receipts through SDK/JSON/currentTSQL; no implicit client evaluation"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "Show independently expected equivalent SDK, official MCP and supported T-SQL operation effects.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1794,
        "heading": "KL-051 · SQL/JSON/C# equivalence",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-052",
      "title": "Ранній admission control",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-052",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "a72ea579a283488fef67a3964740e622875d02a00ab12ce779591293340674fd",
        "dependencies": [
          "KL-015",
          "KL-006",
          "KL-009"
        ],
        "deliverable": "Per-principal/tenant/node concurrent query limits, payload/depth/CPU/memory/deadline caps і write backpressure.",
        "acceptance": "Overload дає bounded queue/RSS і stable errors; cancel реально припиняє роботу; control traffic не блокується heavy-query burst. Розширений governor залишається у KL-040/KL-076."
      },
      "implementationPrerequisites": [
        "KL-052.core-bounds",
        "KL-009"
      ],
      "review": {
        "id": "KL-052",
        "finding": "Confirmed dependency defect: early payload/depth/CPU/memory/connection deadlines and control lanes cannot wait for KL006 benchmark kit. Existing slowbody saturation differs from actual physical disconnect/producer return and both must retain evidence.",
        "dependencyCorrection": "REMOVE KL006 from implementation prerequisites; retain it only for final comparable performance/resource qualification. No fullSQL prerequisite.",
        "implementationScope": "KL009 ordered native write/admission owner; minimal KL015/061 persisted identity and native diagnostics; actual HTTP/SDK/MCP lifetime",
        "laterQualificationScope": "Genuine overload + selected cancel/disconnect + capacity return + healthy operation/RF3 control liveness; sustained RSS measurement late"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "ClientApi / ASP.NET admission and Orleans connection",
      "nextDeliverable": "Refuse over-budget work before allocation/effects; cancellation releases actual original owners.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1802,
        "heading": "KL-052 · Ранній admission control",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-053",
      "title": "Connection-owned independent operation contexts",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-053",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "5fb553c99f02754319d8fc10d1e2f42a1895d756e7a13e554a183dc7013e2363",
        "dependencies": [
          "KL-014",
          "KL-052"
        ],
        "deliverable": "Optional SessionGrain для token/subscription state; звичайні queries виконує independent context із data-local routing.",
        "acceptance": "Один blocked query не блокує всі requests principal; idle sessions не тримають index handles; grain interleaving не змінює security context."
      },
      "implementationPrerequisites": [
        "KL-053.connection-owner",
        "KL-014",
        "KL-052"
      ],
      "review": {
        "id": "KL-053",
        "finding": "ADR-125 owns the native connection grain and separate signed bounded operations. Preserve original task/iterator settlement, context isolation, fresh persisted permissions and joined close; no second session dispatcher.",
        "dependencyCorrection": "Keep transport/admission; no new session layer or custom dispatcher, no full query-language completion prerequisite.",
        "implementationScope": "KL014 public transport ownership; KL052 admission; current ADR125 signed call-local execution",
        "laterQualificationScope": "Real overlapping independent operations on SAME server-owned connection, persisted-policy isolation, actual native iterator/cancel/release/cleanup and restart"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "ClientApi / ASP.NET admission and Orleans connection",
      "nextDeliverable": "Keep one native connection owner with independent bounded operations and original stream/task settlement.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1810,
        "heading": "KL-053 · Session facade та independent query contexts",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-054",
      "title": "SQL differential і metamorphic suite",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-054",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "6776da73df3a3c4470aaed24ef2adeb1a461e625b478cbc0a12bfba7ffe44c2d",
        "dependencies": [
          "KL-051"
        ],
        "deliverable": "Reference evaluator, equivalent predicate transformations, prepared/parsed path, scalar reference PG cases у спільній семантиці.",
        "acceptance": "Generated fixtures покривають null/missing/Unicode/bounds; index/scan plans збігаються; intentional dialect differences явно збережені."
      },
      "implementationPrerequisites": [
        "KL-051",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-054",
        "finding": "Differential suite must target selected ScriptDOM/TSQL semantics; PostgreSQL is an external differential arm with explicit differences, never grammar authority. Final broad corpus audit is late; focused regressions stay inside each stage.",
        "dependencyCorrection": "KL051 per-capability genuine; external competitor measurement is qualification-only, not prerequisite for semantic correctness fixtures.",
        "implementationScope": "KL051 actual admitted language/API parity per operator",
        "laterQualificationScope": "Generated null/missing/Unicode/bounds transformations on real current operations, index/scan equality; external reference only inside defined shared semantics"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "QueryExecution / native bounded executor",
      "nextDeliverable": "KL051 actual admitted language/API parity per operator",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1818,
        "heading": "KL-054 · SQL differential і metamorphic suite",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-055",
      "title": "GraphScope / GraphRetriever / GraphExpansion",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-055",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "6cc059c0dfaa9cc23eb7ecc198a2393fc71588016d6d1f8e85f8d268a4e6e0c7",
        "dependencies": [
          "KL-023",
          "KL-045"
        ],
        "deliverable": "Окремі AST operators, seed refs, shortest-hop score, endpoint-only predicates і authorized path semantics.",
        "acceptance": "Hidden vertex policy дотримано; endpoint predicate не видаляє валідний intermediate type; cycles/path duplicates не множать rank contribution."
      },
      "implementationPrerequisites": [
        "KL-023",
        "KL-045",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-055",
        "finding": "Separate Scope/Retriever/Expansion responsibilities and give each explicit current permissions/readcut/work limits. Task is appropriately model-stage once foundation works.",
        "dependencyCorrection": "No change to genuine model prerequisites; public/RF3 tests qualify, not a gate to initial native operator implementation.",
        "implementationScope": "KL023 canonical graph/visible vertex model; KL045 versioned operator contract; foundation same-view read/auth/bounds",
        "laterQualificationScope": "Exact shortest hops, cycles/dedup, hidden intermediates, endpoint-only filtering and bounded no-partial response through real clients"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "GraphTraversal / partition grains and ZoneTree",
      "nextDeliverable": "KL023 canonical graph/visible vertex model; KL045 versioned operator contract; foundation same-view read/auth/bounds",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1826,
        "heading": "KL-055 · GraphScope / GraphRetriever / GraphExpansion",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-056",
      "title": "Three-way hybrid retrieval",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-056",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "e285da52fdbd0f46e97e95115ba8263a7b20da7cc5f2ed68fdfb160021936b1b",
        "dependencies": [
          "KL-033",
          "KL-055",
          "KL-050"
        ],
        "deliverable": "Named text/vector/graph branches, same EntityRef identity, weightedRrfV1, version validation, refill і candidate windows.",
        "acceptance": "Exact small-corpus oracle збігається; missing branch contribution нульовий; duplicate/revoked/stale hit не займає фінальний rank."
      },
      "implementationPrerequisites": [
        "KL-033",
        "KL-055",
        "KL-050",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-056",
        "finding": "Definition combines exact fusion and future candidate-window semantics. Specify exact bounded implemented window and unsupported/completeness behavior; no ANN quality/performance claim from small exact corpus. Current r8 independent full33 peer found actual uncertain-close defect; coherent34 repair pending root integration.",
        "dependencyCorrection": "Prerequisites genuine at capability-contract level; whole high-scale benchmark work is not required before exact functional composition.",
        "implementationScope": "KL033 current text/vector fusion/explanation subset; KL055 graph operator; KL050 common authorized read lifetime",
        "laterQualificationScope": "Independent full EntityRef/revision/redaction/rank/contribution oracle, stale/deleted/refill, current denial/repair, nonfinite accumulation, cleanup/replay/two-cold"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "KL033 current text/vector fusion/explanation subset; KL055 graph operator; KL050 common authorized read lifetime",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1834,
        "heading": "KL-056 · Three-way hybrid retrieval",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-057",
      "title": "Global branch ranking",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-057",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "9a6dd481fa76df74f185c11537582f6a1a409daa7c6fbf0cff483b792f7ae50b",
        "dependencies": [
          "KL-037",
          "KL-056"
        ],
        "deliverable": "Порівнянні modality scores, global windows перед fusion, stable tie-break, bounded transport і completeness metadata.",
        "acceptance": "Exact results зберігаються після зміни shard layout за незмінних corpus/cut; ANN/window error позначений; втрата shard не маскується як повна відповідь."
      },
      "implementationPrerequisites": [
        "KL-037",
        "KL-056",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-057",
        "finding": "Comparable modality score and global-window policies need frozen semantics; avoid guessed local topK completeness. Layout-changing qualification may depend on KL071 but transport/merge implementation need not.",
        "dependencyCorrection": "Keep037/056 native contracts. Add actual movement only for layout-change acceptance, not all initial global branch logic; comparative scaling late.",
        "implementationScope": "KL037 actual bounded multi-owner query transport; KL056 branch identity/rank contract; explicit shared cut/authority/completeness",
        "laterQualificationScope": "Independent exact same-corpus results across declared shard layouts; native unavailable/incomplete shard fails rather than complete-success; quality/window limits explicit"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "KL037 actual bounded multi-owner query transport; KL056 branch identity/rank contract; explicit shared cut/authority/completeness",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1842,
        "heading": "KL-057 · Global branch ranking",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-058",
      "title": "BM25 corpus і statistics epochs",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-058",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "f16ebd2dba1170473e99d8e2a0fe1b4d47de1db940b864f37e6ae7a4a1bdb6b3",
        "dependencies": [
          "KL-029",
          "KL-015"
        ],
        "deliverable": "Tenant/security-corpus IDF, persisted versioned statistics, guarded diagnostics і local-approximate profile.",
        "acceptance": "Дані іншого tenant не входять у corpus; всі shards strict profile використовують той самий statistics epoch; overlapping-ACL limitations задокументовано."
      },
      "implementationPrerequisites": [
        "KL-029",
        "KL-061",
        "KL-062",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-058",
        "finding": "Security-corpus IDF plus distributed strict epochs and diagnostics are separable. No other-tenant statistics can enter a basic local corpus while waiting for strict distributed profile.",
        "dependencyCorrection": "KL015 required current policy, not broad final audit. Multi-owner publication is implementation prerequisite only for strict distributed profile.",
        "implementationScope": "KL029 native full-text/canonical corpus, KL015/061 current security corpus; bounded publication/generation lifecycle",
        "laterQualificationScope": "Same authorized corpus exact BM25 oracle; persisted epoch/reopen/deny/reclassification; strict cross-shard profile only after shared distribution"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "KL029 native full-text/canonical corpus, KL015/061 current security corpus; bounded publication/generation lifecycle",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1850,
        "heading": "KL-058 · BM25 corpus і statistics epochs",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-059",
      "title": "Managed ANN implementation qualification",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-059",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "531acb0b37b45b2e098fbeebed53582c692138c0445aa36a955a71d450a48b86",
        "dependencies": [
          "KL-030",
          "KL-027"
        ],
        "deliverable": "Оцінити managed HNSW codebase/implementation, packing, persistence, delta/tombstones, platform compatibility та transitive dependencies.",
        "acceptance": "Required targets працюють без mandatory native ANN package; search/update/delete/rebuild tests пройдено; recall/RSS/allocations порівняні з exact і optional external baseline."
      },
      "implementationPrerequisites": [
        "KL-030",
        "KL-027",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-059",
        "finding": "Evaluate codebase wording is stale once a canonical provider is selected; do not reopen provider choice or add native alternatives. Freeze currently supported hardware/Linux and genuine implementation boundaries.",
        "dependencyCorrection": "027/030 genuine; optional external baseline and comparative resource measurements are final qualification, not storage/lifecycle implementation blockers.",
        "implementationScope": "KL030 accepted current managed HNSW contract and KL027 canonical vector storage; native SIMD/hardware validation",
        "laterQualificationScope": "Real update/delete/rebuild/publication/restart with native exact oracle and approved recall cohorts; final comparable RSS/allocations/competitor measurement"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "KL030 accepted current managed HNSW contract and KL027 canonical vector storage; native SIMD/hardware validation",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1858,
        "heading": "KL-059 · Managed ANN implementation qualification",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-060",
      "title": "Adaptive filtered retrieval",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-060",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "cce25b0ab4dcbdf13e18abb8b2d6eb6d856c6b9ccc9544d93a6c0693451a945e",
        "dependencies": [
          "KL-032",
          "KL-059"
        ],
        "deliverable": "Allowed cardinality, small-set exact, filtered ANN expansion, budgeted fallback і correlation cohorts.",
        "acceptance": "Recall target перевірено окремо для 100/10/1/0.1% filters і correlation; traversal topology не обрізається наївним output filter; actual fallback costs видимі."
      },
      "implementationPrerequisites": [
        "KL-032",
        "KL-059",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-060",
        "finding": "Task bundles algorithm selection, exact fallback and benchmark-quality cohorts. Preserve required normal SIMD, explicit ANN approximation and no unsupported fallback fiction; separate functional branch correctness from final recall/performance acceptance.",
        "dependencyCorrection": "032/059 genuine where ANN used; exact-small-set branch can follow its eligible-set contract independently. All required quality cohorts remain final gates.",
        "implementationScope": "KL032 current eligible-set and authorization semantics; KL059 actual ANN lifecycle; common bounds",
        "laterQualificationScope": "Independent exact eligible-set recall per declared filter/correlation, actual bounded fallback/error and unchanged current permissions before/after restart"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Search / native FTS and bounded Orleans work",
      "nextDeliverable": "KL032 current eligible-set and authorization semantics; KL059 actual ANN lifecycle; common bounds",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1866,
        "heading": "KL-060 · Adaptive filtered retrieval",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-061",
      "title": "Principals, API keys і RBAC",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-061",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "7ef0027104054f5c7c50451f18f2a046502f857770fdcb026da2cde4a4c8d1e8",
        "dependencies": [
          "KL-015"
        ],
        "deliverable": "Human/service accounts, trusted tenant mapping, scoped key verifier, expiry/revocation, role grants і administrative separation.",
        "acceptance": "Forged principal/tenant/roles у JSON і grain calls відхиляються; revoked/expired keys не приймаються за declared barrier; plaintext secrets не логуються."
      },
      "implementationPrerequisites": [
        "KL-015"
      ],
      "review": {
        "id": "KL-061",
        "finding": "Early RBAC is foundational. Definition must name standard ASP.NET Core Authentication/Authorization subject-only tickets and native ManagedCode.Orleans.Identity call context; no alternate user store or full SQL prerequisite.",
        "dependencyCorrection": "Narrow KL015 dependency to actual permission primitives. Broad adversarial/dependency audits are late, focused auth correctness is immediate.",
        "implementationScope": "KL015 minimum permission model; stable catalog/commit/read barrier and standard ASP.NET Core authentication",
        "laterQualificationScope": "Actual stored verifiers/principals, forged roles/tenant denial, expiry/revocation after ACK, protected cluster authority, SDK/MCP failover and sanitized native OTel"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Persist principals/API keys/RBAC; refuse missing/revoked credentials and repair through a healthy administrator flow.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1874,
        "heading": "KL-061 · Principals, API keys і RBAC",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-062",
      "title": "Sensitive field catalog",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-062",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "74bc868120e91a8d8b65217471f4b8486ccd781499cbe43bbc66e166997e5048",
        "dependencies": [
          "KL-061",
          "KL-045"
        ],
        "deliverable": "Versioned path classifications, nested/array matching, read/use/output permissions і privileged schema mutations.",
        "acceptance": "Plain document patch не знижує classification; quoted/escaped paths мають один canonical meaning; catalog change інвалідує affected plans."
      },
      "implementationPrerequisites": [
        "KL-061",
        "KL-045.capability-identity"
      ],
      "review": {
        "id": "KL-062",
        "finding": "Path semantics and policy catalog limits need closed concrete definitions; catalog baseline must precede SQL bind/search projection exposure, without waiting for entire language. Current full38 successor remains source not acceptance.",
        "dependencyCorrection": "KL045 minimal inventory only; complete SQL is not an early field-catalog prerequisite.",
        "implementationScope": "KL061 persisted admin/subject authority; KL045 permission/schema contract subset",
        "laterQualificationScope": "Actual256/257 catalog boundaries, canonical nested/escaped paths, write/use/output checks and current-authority invalidation; exact receipts/replay/cold"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Persist classification catalog and enforce read/use/write boundaries without leaking output or private inventory.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1882,
        "heading": "KL-062 · Sensitive field catalog",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-063",
      "title": "Sensitive expression usage enforcement",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-063",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "e92e2b94014af2b1754f9ef2aeb6da68ae6b5c8fa3e5221447e76851783a115e",
        "dependencies": [
          "KL-062",
          "KL-048"
        ],
        "deliverable": "Перевіряти SELECT/functions/WHERE/ORDER/GROUP/COUNT/EXISTS/facets/retrieval за повною field lineage.",
        "acceptance": "Adaptive predicate attack відхиляється до storage lookup; aliases/functions/JSON wrappers не обходять restriction; error payload sanitized."
      },
      "implementationPrerequisites": [
        "KL-063.basic-field-authority",
        "KL-048"
      ],
      "review": {
        "id": "KL-063",
        "finding": "Expression inventory is intentionally broad and needs per-admitted-operator completion cells. Native Get/search/graph usage cannot wait for fullSQL binder; future functions remain unavailable until guards exist.",
        "dependencyCorrection": "Split native use-guards from SQL lineage dependency048; full adversarial aggregate late under068, never defer known exposure fixes.",
        "implementationScope": "KL062 canonical policy paths; KL048 lineage for SQL expressions; native readcut/admission",
        "laterQualificationScope": "Current field-use denial before unsafe storage, aliases/functions/wrappers cannot hide lineage, safe exact errors and repair/healthy operations"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Guard expressions at each newly exposed operator using current persisted classification.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1890,
        "heading": "KL-063 · Sensitive expression usage enforcement",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-064",
      "title": "Єдиний safe projector",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-064",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "48af47a03a31161db887b7b91c918d8f8fa02236e645acd8cca36e011ce51fad",
        "dependencies": [
          "KL-063",
          "KL-050"
        ],
        "deliverable": "Omit і typed redacted output, generic/path metadata policy, protected PUT/PATCH roundtrip; підключення Get/Query/Export/CDC.",
        "acceptance": "Sensitive canary відсутній у всіх unprivileged outputs/logs; authorized raw read працює; masked object не стирає hidden values без дозволу."
      },
      "implementationPrerequisites": [
        "KL-063.basic-field-authority",
        "KL-050.bounded-output"
      ],
      "review": {
        "id": "KL-064",
        "finding": "Oversized unified projector gate spans Get/Query/Export/CDC. Deliver shared safe primitive and qualify each capability before exposure; do not wait for all expression forms/SQL/model types.",
        "dependencyCorrection": "Full063/050 tasks are over-strong prerequisites for basic safe Get output. Required expression-specific guards stay before that operator, later export/CDC qualify at their own stage.",
        "implementationScope": "KL061/062 current read/output permissions and canonical typed projection; KL050 owned result/read lifetime",
        "laterQualificationScope": "Canary-free real public output/metadata/errors/logs, authorized raw controls, protected replacement/patch, cancellation and current-policy repair"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Project point/query/error outputs safely at the actual current authorized read cut.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1898,
        "heading": "KL-064 · Єдиний safe projector",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-065",
      "title": "Row ACL planner і graph enforcement",
      "statusAtReview": "done",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-065",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "eb605b499d7c63e07bba98da59c3bd0d446b75b2000d9d43029409897466b832",
        "dependencies": [
          "KL-061",
          "KL-023"
        ],
        "deliverable": "Owner/team/project predicates, generation-scoped ID sets, final row validation, vertex/edge traversal policy.",
        "acceptance": "Cross-tenant IDs не збігаються в cache; stale grants не проходять final authorization; graph hidden paths не з'являються у response/Explain."
      },
      "implementationPrerequisites": [
        "KL-065.document-acl",
        "KL-023",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-065",
        "finding": "Original phase already splits scalar P1 from graph P3; keep split explicit in DAG. Generation-scoped ID acceleration remains disposable and never authorization authority.",
        "dependencyCorrection": "Do not make basic row ACL wait for complete graph023. Retain graph prerequisite for graph-specific path enforcement.",
        "implementationScope": "KL061 scoped persisted identity; canonical document row readcut; KL023 only graph portion",
        "laterQualificationScope": "Cross-tenant scope/cache isolation, stale grants denied by final current authorization, hidden intermediate graph cannot leak in result/Explain"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Apply current document/row/graph ACL before visible execution results.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1906,
        "heading": "KL-065 · Row ACL planner і graph enforcement",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-066",
      "title": "Revocation epochs і cursor reauthorization",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-066",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "a88c99d0f488df8974f29ece4f69eadbb93e6b85ff65aed21d3b4e490255040d",
        "dependencies": [
          "KL-061",
          "KL-021",
          "KL-064"
        ],
        "deliverable": "Policy read barriers, cache epoch, streaming page checkpoints, revocation ACK contract і fail-closed behavior.",
        "acceptance": "Після policy-change ACK нові requests/pages використовують новий epoch; недоступність authority не повертає sensitive payload; старі cursors reauthorize/invalidate."
      },
      "implementationPrerequisites": [
        "KL-066.local-epochs",
        "KL-021"
      ],
      "review": {
        "id": "KL-066",
        "finding": "P2/P5/localP1 wording conceals multiple gates. Name revocation linearization/ACK boundary and cursor behavior per actual supported family; an old token is not a cached permission.",
        "dependencyCorrection": "KL064 safe output subset genuine, not every future Export/CDC. Cache/stream-specific distributed qualification follows its capability, not a blocker to local policy epochs.",
        "implementationScope": "KL061 current policy; KL021 authoritative strong/session read barrier; current typed projection baseline",
        "laterQualificationScope": "After policy ACK next request/page uses current epoch; unavailable authority fails closed; original cursor reauthorizes or explicitly invalidates, including restart"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Reauthorize current policy and bound cursors; physical identity changes expire them without inventing activation epochs.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1914,
        "heading": "KL-066 · Revocation epochs і cursor reauthorization",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-067",
      "title": "Classification lineage у search projections",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-067",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "911ab78a0bc39779714c6e5206af4c528183b8274c5999e7d437266ef9b261e0",
        "dependencies": [
          "KL-062",
          "KL-029",
          "KL-031"
        ],
        "deliverable": "Source paths для text/vector/snippets, default search exclusion, restricted spaces, reclassification rebuild і safe reranker inputs.",
        "acceptance": "Hidden raw values не надсилаються reranker-у без grant; старі unsafe generations припиняють serving; source-to-derived purge status видимий."
      },
      "implementationPrerequisites": [
        "KL-062",
        "KL-029",
        "KL-031",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-067",
        "finding": "Feature is model-stage after source field policy exists; do not add reranker provider where none selected. Freeze exact source classification/reference and recovery bound.",
        "dependencyCorrection": "Keep actual projection dependencies. Broad full audit068/benchmark comparison are final qualification, not early source policy baseline.",
        "implementationScope": "KL062 source classifications; KL029 native text projection and KL031 vector projection current generations",
        "laterQualificationScope": "Current source-to-derived paths/reclassification, old unsafe generation stops serving, genuine purge/rebuild/refusal/repair; no unauthorized reranker input"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "KL062 source classifications; KL029 native text projection and KL031 vector projection current generations",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1922,
        "heading": "KL-067 · Classification lineage у search projections",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-068",
      "title": "Security adversarial matrix",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-068",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "4a05f20f2b4b12977ed059a8df7d41f4060f69e9f9c5e0d742009adc53841128",
        "dependencies": [
          "KL-064",
          "KL-065",
          "KL-066",
          "KL-067"
        ],
        "deliverable": "Cross-interface attacks, row/field inference, alias/path tricks, invalid tokens, revoked sessions, unsafe highlights/export/trace.",
        "acceptance": "Forbidden output zero для supported threat model; відомі timing/statistics limitations явно зазначені; regressions блокують відповідний release profile."
      },
      "implementationPrerequisites": [
        "KL-064",
        "KL-065",
        "KL-066",
        "KL-067"
      ],
      "review": {
        "id": "KL-068",
        "finding": "Current deps064/065/066/067 would postpone all security testing until advanced search. Split focused stage-required negative flows from final complete supported-capability matrix audit.",
        "dependencyCorrection": "No full067 prerequisite for foundational credential/RBAC/admission attacks. Final full matrix retains all original dependencies before release.",
        "implementationScope": "Each exposed capability actual field/row/epoch/projector contracts; later derived lineage067 only its cells",
        "laterQualificationScope": "Independent real SDK/MCP/SQL attack→denial/no forbidden output→healthy/replay/restart per supported threat model; explicit timing/statistical limits"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F5",
      "executionOwner": "Authorization / committed ZoneTree policy",
      "nextDeliverable": "Each exposed capability actual field/row/epoch/projector contracts; later derived lineage067 only its cells",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1930,
        "heading": "KL-068 · Security adversarial matrix",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-069",
      "title": "Atomic/physical partition contracts",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-069",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "0d8499d914c230a55f29c8a3456c93041172b0d4fcc9d35c0cac9fe6dc2ee7f9",
        "dependencies": [
          "KL-002",
          "KL-019"
        ],
        "deliverable": "Stable AtomicPartitionId, virtual buckets, physical shards, routing schemes і explicit atomicity/unique scope при packing/split.",
        "acceptance": "Node-count change не міняє identity; unsupported atomic split відхиляється; batch scope зберігається після migration."
      },
      "implementationPrerequisites": [
        "KL-002"
      ],
      "review": {
        "id": "KL-069",
        "finding": "Atomic vs physical identity is foundation and must precede model partition claims. Virtual bucket/routing variants need actual supported inventory, not an implicit extra storage format.",
        "dependencyCorrection": "Native contract work early; migration/split behaviors qualify later with actual operations, not a requirement to implement advanced movement before basic identity.",
        "implementationScope": "KL002 stable complete atomic identity +KL019 native cluster routing; current persisted physical catalog",
        "laterQualificationScope": "Full tuple stable across node/activation changes, explicit same-partition atomicity/unique scope, no fragment split/multi-owner implicit transaction"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F0",
      "executionOwner": "ClusterRouting / native placement and physical owners",
      "nextDeliverable": "Keep logical atomic partition IDs distinct from physical replica placement and activation identity.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1938,
        "heading": "KL-069 · Atomic/physical partition contracts",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-070",
      "title": "Placement і tenant packing",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-070",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "ff00bb4cafe4e493d41cac44b69d68d8864c5e3809ef995fcb47a36cf968de49",
        "dependencies": [
          "KL-069",
          "KL-036"
        ],
        "deliverable": "Capacity/failure-domain aware placement, shared small tenants, dedicated large tenants, persisted placement intents.",
        "acceptance": "RF copies розміщуються за anti-affinity policy; overload tenant throttled; перестановка node membership не дає двох writers."
      },
      "implementationPrerequisites": [
        "KL-069",
        "KL-036"
      ],
      "review": {
        "id": "KL-070",
        "finding": "Native activation placement/repartitioning and physical replica placement are separate. Do not recreate Orleans directory/activation scheduler; define capacity/failure-domain policy and persisted intents only for physical owners.",
        "dependencyCorrection": "036 required for executing movement; native placement selection contract can freeze earlier. Performance measurement late, no benchmark blocks physical correctness.",
        "implementationScope": "KL069 atomic/physical identity; KL036 actual whole-partition transfer/fences; native membership/readiness and persisted capacity authority",
        "laterQualificationScope": "Declared physical anti-affinity/resource selection, hot-tenant bounded rejection, actual one-writer ownership across membership/restart"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "ClusterRouting / native placement and physical owners",
      "nextDeliverable": "KL069 atomic/physical identity; KL036 actual whole-partition transfer/fences; native membership/readiness and persisted capacity authority",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1946,
        "heading": "KL-070 · Placement і tenant packing",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-071",
      "title": "Physical shard split/merge",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-071",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "05ec109e70f93992820dcb890625e6907c7a72109b87c78645e816623662cc27",
        "dependencies": [
          "KL-070",
          "KL-035"
        ],
        "deliverable": "Перенесення цілих atomic partitions, copy/catch-up/cutover, generation readiness і restartable cleanup.",
        "acceptance": "Crash на кожному state без втрати committed data; unique/batch scope збережено; один hot atomic partition не ділиться мовчки."
      },
      "implementationPrerequisites": [
        "KL-070",
        "KL-035"
      ],
      "review": {
        "id": "KL-071",
        "finding": "Name physical split/merge of groups containing WHOLE atomic partitions, not splitting one hot atomic transaction. No old-format/legacy migration adapter is implied.",
        "dependencyCorrection": "Genuine move/snapshot dependencies; add actual ownership/fencing036 when needed. No version-conversion prerequisite.",
        "implementationScope": "KL070 placement contract +KL035 current snapshot/install; original RF3 transfer authority",
        "laterQualificationScope": "Crash/restart each actual copy/catchup/fence/cutover/retirement state, original receipt conservation and no dual writer; entire atomic partition preserved"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "ClusterRouting / native placement and physical owners",
      "nextDeliverable": "KL070 placement contract +KL035 current snapshot/install; original RF3 transfer authority",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1954,
        "heading": "KL-071 · Physical shard split/merge",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-072",
      "title": "Current ownership tokens and scoped outcomes",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-072",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8c479a4dd85d50a3850f8f1d68cac3279ed1744435544c7c9b7c1581a3a784ba",
        "dependencies": [
          "KL-071",
          "KL-021",
          "KL-034"
        ],
        "deliverable": "Translation старих group positions або stable atomic sequences, WaitForIndex після movement, cursor epoch outcomes.",
        "acceptance": "Старий валідний commit token коректно wait/read після migration або отримує explicit supported invalidation; indices різних logs ніколи не порівнюються без mapping."
      },
      "implementationPrerequisites": [
        "KL-071",
        "KL-021",
        "KL-034"
      ],
      "review": {
        "id": "KL-072",
        "finding": "Rename misleading Token migration lineage: current supported authority outcomes, not prior-format token translation/legacy readers. TokenOwnershipLineage explicitly admits safe invalidation; owner prohibits new old-data migration without explicit request.",
        "dependencyCorrection": "Remove any implied format translation implementation requirement. Keep071 for actual movement tests and native current token validation early.",
        "implementationScope": "KL021 strong/session authority; KL034 actual index wait/watermark; KL071 only physical layout-change acceptance",
        "laterQualificationScope": "Actual original token/cursor/index consumers either remain valid under declared same lineage or return exact supported invalidation after real current-owner transfer; no cross-log raw index comparison"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "ClusterRouting / native placement and physical owners",
      "nextDeliverable": "KL021 strong/session authority; KL034 actual index wait/watermark; KL071 only physical layout-change acceptance",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1962,
        "heading": "KL-072 · Token migration lineage",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-073",
      "title": "PostgreSQL baseline kit",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-073",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "52724aa1a726f053a18d9bf01e1ffe76e9981aa6f79762040cbb5be3dc2d2ff2",
        "dependencies": [
          "KL-006",
          "KL-001"
        ],
        "deliverable": "Reproducible PostgreSQL18/pgvector configs, DDL, prepared clients, RLS role, JSON/index/edge/time fixtures, optional BM25 extension arm.",
        "acceptance": "Version/hardware/durability/plans збережені; iterative ANN і filter indexes налаштовані; no-policy/no-fsync results мають окремі labels."
      },
      "implementationPrerequisites": [
        "KL-006",
        "KL-001"
      ],
      "review": {
        "id": "KL-073",
        "finding": "P0/P1 benchmark-first scheduling is superseded. Version labels must bind actual pin/runtime, never assumed PG18 from prose; disable-policy/fsync comparison cannot be advertised equivalent.",
        "dependencyCorrection": "Entire task late; it must not block foundation SQL parser/auth/readiness/admission or early functional correctness.",
        "implementationScope": "KL006 canonical scenario/provenance methodology +KL001 native test infrastructure; native supported PG/pgvector config",
        "laterQualificationScope": "Linux isolated native1/3 jobs, true membership/ACK/durability/RLS/no plaintext, full records/results and raw source-bound reports; explicit unsupported cells"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F6",
      "executionOwner": "Performance / original native profiles and Linux comparisons",
      "nextDeliverable": "KL006 canonical scenario/provenance methodology +KL001 native test infrastructure; native supported PG/pgvector config",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1970,
        "heading": "KL-073 · PostgreSQL baseline kit",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-074",
      "title": "Hybrid quality/performance benchmark",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-074",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "cf48c98f04139b68d8773b0997524bb75ebf2bd47dbe6ca7d2c683ef40fea22c",
        "dependencies": [
          "KL-073",
          "KL-056",
          "KL-060",
          "KL-058"
        ],
        "deliverable": "Identical embeddings/queries, exact eligible-set oracle, recall/nDCG, candidate windows, text scorer variants і masking overhead.",
        "acceptance": "Primary target обраний до runs; quality/freshness comparable; timeout/error rates входять у report; actual gain або відсутність gain опубліковані."
      },
      "implementationPrerequisites": [
        "KL-073",
        "KL-056",
        "KL-060",
        "KL-058",
        "KL-105.matched-reprofile"
      ],
      "review": {
        "id": "KL-074",
        "finding": "Separate small functional exact/quality model oracles from benchmark publication. Canonical workload identical across targets; unavailable capability remains unavailable, no fabricated measurement.",
        "dependencyCorrection": "All original dependencies genuine for whole comparison. Model correctness oracles stay in each model stage and do not wait for competitor execution.",
        "implementationScope": "KL073 genuine baseline; actual supported056/060/058 semantics, canonical fixed corpus/schedule",
        "laterQualificationScope": "Predeclared quality target, exact eligible oracle, original qrels/recall/nDCG/error/freshness/timeouts and matched native resources/ACK; no winner without genuine Linux data"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F6",
      "executionOwner": "Performance / original native profiles and Linux comparisons",
      "nextDeliverable": "KL073 genuine baseline; actual supported056/060/058 semantics, canonical fixed corpus/schedule",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1978,
        "heading": "KL-074 · Hybrid quality/performance benchmark",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-075",
      "title": "Scaling benchmark і fair deployment arms",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-075",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "1776513e6474d72e66e75a06a7216f5183fc93a3eee5a7a04b30299aa6db943c",
        "dependencies": [
          "KL-073",
          "KL-057",
          "KL-071",
          "KL-072"
        ],
        "deliverable": "1/3/6 nodes, RF і total resource budgets, shard skew, fan-out, movement, replica recovery та open-loop load.",
        "acceptance": "Single-node PG не позначений distributed competitor; optional sharded PG arm має окрему конфігурацію; scale gains і tail regressions виміряні."
      },
      "implementationPrerequisites": [
        "KL-073",
        "KL-057",
        "KL-071",
        "KL-072",
        "KL-105.matched-reprofile"
      ],
      "review": {
        "id": "KL-075",
        "finding": "Canonical task says1/3/6; current owner restricts benchmark inventory to1/3. Node/client counts differ; no relabelled independent replicas or standalone PG as cluster. Actual repeated1M ingestion1/10/500 clients and100K/1M datasets remain separate requirements.",
        "dependencyCorrection": "Keep distribution/movement dependencies only for cells using them; final full supported matrix required before scale claim. No benchmark predecessor to foundation.",
        "implementationScope": "KL073 native competitor kit; KL057 distributed query and071/072 actual current-owner movement/token behavior for relevant cells",
        "laterQualificationScope": "Only active native1/3 node arms, matched effective resources/RF/ACK/durability/workload, real per-cell isolated runner and original complete artifacts"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F6",
      "executionOwner": "Performance / original native profiles and Linux comparisons",
      "nextDeliverable": "KL073 native competitor kit; KL057 distributed query and071/072 actual current-owner movement/token behavior for relevant cells",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1986,
        "heading": "KL-075 · Scaling benchmark і fair deployment arms",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-076",
      "title": "Multi-tenant resource governor",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-076",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "f1521736413dfe41137f69d487a0d7390563d80b18839b7a85b8a7b57c5eed8c",
        "dependencies": [
          "KL-040",
          "KL-052",
          "KL-070"
        ],
        "deliverable": "CPU/memory/native/transitive budget accounting, fair queues, compaction/reindex reservations, hot partition detection.",
        "acceptance": "Sustained overload без unbounded queues/RSS; noisy tenant не знищує control-plane liveness у declared resource envelope; stop-serving до disk-full ACK error."
      },
      "implementationPrerequisites": [
        "KL-040",
        "KL-052",
        "KL-070"
      ],
      "review": {
        "id": "KL-076",
        "finding": "Task combines admission correctness, background reservations, noisy-neighbor fairness and hot-tenant placement. Baseline resource safety cannot wait for advanced packing or comparative benchmarks.",
        "dependencyCorrection": "Split foundation baseline from later070 extension; KL040/052 must not depend on comparative measurement completion.",
        "implementationScope": "KL052 early admission +KL040 actual native resource limits; KL070 only capacity-aware tenant placement extension",
        "laterQualificationScope": "Genuine bounded queues/charges/cancel/join/healthy; control traffic stays live and disk pressure rejects before unsafe ACK. Sustained RSS/CPU/native/transitive resource envelope qualified late"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F2",
      "executionOwner": "ResourceExecution / bounded silo-local admission",
      "nextDeliverable": "Extend the already required initial bounds to fair tenant admission and measured resource settlement.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 1994,
        "heading": "KL-076 · Multi-tenant resource governor",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-077",
      "title": "Hot-path allocation і SIMD оптимізація",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-077",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "dcfbf6263bdc58fb544480c53503085a593217231b7ece9b4500450d2f9903dd",
        "dependencies": [
          "KL-006",
          "KL-008",
          "KL-050"
        ],
        "deliverable": "Late materialization, compact candidate transport, pooled RecordBatch, exact vector SIMD, precompiled field paths.",
        "acceptance": "До/після benchmarks із correctness oracle; buffer reuse race tests пройдено; no hidden memory ownership changes; speedup виміряно окремо від provider changes."
      },
      "implementationPrerequisites": [
        "KL-006",
        "KL-008",
        "KL-050",
        "KL-105.capture"
      ],
      "review": {
        "id": "KL-077",
        "finding": "Split mandatory NORMAL SIMD implementation/hardware admission from deferred optimization. No product disable switch/full scalar fallback or active forced-no-SIMD qualification profile; scalar only bounded tails/independent oracle.",
        "dependencyCorrection": "KL006/105 are measurement/optimization prerequisites, not permission to omit required SIMD from normal product. OTel in foundation supports later measurement.",
        "implementationScope": "KL008 native representations and KL050 bounded owned buffers for relevant operation; mandatory supported-hardware check",
        "laterQualificationScope": "Independent arithmetic/tail oracle and no buffer race from first applicable release path; only after actual profiling105 matched Linux before/after latency/throughput/alloc/RSS"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F6",
      "executionOwner": "Performance / original native profiles and Linux comparisons",
      "nextDeliverable": "Normal execution uses required native SIMD now; select further optimization from measured profiles and remeasure.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2002,
        "heading": "KL-077 · Hot-path allocation і SIMD оптимізація",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-078",
      "title": "Time-series chunk qualification",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-078",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "d0fbb0d79b2712a39c366075fb30482caa532fa6ffbe67b98526028babe69a22",
        "dependencies": [
          "KL-026",
          "KL-006"
        ],
        "deliverable": "Lossless typed chunk format, timestamp/value codecs, corrections, generation manifest і retention.",
        "acceptance": "Roundtrip і aggregate oracle для late/equal/edge cases; bytes/sample та rewrite cost виміряні; recovery не втрачає correction chunks."
      },
      "implementationPrerequisites": [
        "KL-026",
        "KL-077.normal-simd"
      ],
      "review": {
        "id": "KL-078",
        "finding": "Separate codec/correction correctness from benchmark qualification. Required current native Orleans serialization/raw storage contracts remain; independently owned library defects require owning-repo repair, not consumer format workaround.",
        "dependencyCorrection": "KL006 is final measurement infrastructure, not prerequisite for implementing lossless chunks and focused recovery.",
        "implementationScope": "KL026 canonical series/retention/correction semantics and bounded current native storage; no legacy format conversion",
        "laterQualificationScope": "Lossless exact roundtrip/raw aggregate/date/correction oracle, native current-format corruption refusal/replay/recovery +real SDK/MCP; measured bytes/sample/rewrite late"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "TimeSeries / native series library and ZoneTree",
      "nextDeliverable": "KL026 canonical series/retention/correction semantics and bounded current native storage; no legacy format conversion",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2010,
        "heading": "KL-078 · Time-series chunk qualification",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-079",
      "title": "Resumable change feed і обмежені live queries",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-079",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8bd5b95efa88d36fc6364bc6d7d894130b32392c34f87b78ce5068b83694060f",
        "dependencies": [
          "KL-016",
          "KL-066",
          "KL-064",
          "KL-013"
        ],
        "deliverable": "Protected change projection, cursors, policy recheck, simple predicate subscriptions, delivery/backpressure semantics.",
        "acceptance": "Reconnect не пропускає committed changes у retention window; duplicates documented/idempotent; old subscription не зберігає revoked grant; feed не повертає raw PII."
      },
      "implementationPrerequisites": [
        "KL-016",
        "KL-066",
        "KL-064",
        "KL-013",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-079",
        "finding": "Scope simple live predicates explicitly; fullSQL/ANN/global joins do not silently enter supported subscriptions. Global multi-partition CDC is separate. Original regressions must remain visible even if historical acceptance passed.",
        "dependencyCorrection": "All original dependencies needed only at supported subset scope. Final stress/audit not an implementation blocker to bounded native feed correctness.",
        "implementationScope": "KL016 atomic outbox; KL066 current epochs; KL064 safe projection; KL013 actual bounded predicate subset",
        "laterQualificationScope": "No committed retained gap on reconnect, explicit duplicates/history loss and signed cursor reauthorization, no stale revoked payload; cancellation/bounds/healthy and genuine cold clients"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "Resume actual committed feeds with fresh authorization, bounded cursors/backpressure and original cancellation settlement.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2018,
        "heading": "KL-079 · Resumable change feed і обмежені live queries",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-080",
      "title": "Integrated feature і performance release gate",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-080",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "297124221b49dfbd7c82db451d42dcc77d0ca3000da2f697326562b4c49cc4ea",
        "dependencies": [
          "KL-044",
          "KL-054",
          "KL-068",
          "KL-074",
          "KL-075",
          "KL-076",
          "KL-077"
        ],
        "deliverable": "Зіставити capability manifest, documentation, benchmarks, privacy tests, read/durability evidence та supported deployment profiles.",
        "acceptance": "Жоден advertised feature не спирається на mock-only tests; benchmark advantage має точний workload і raw evidence; guarantees/freshness/approximation/limitations відповідають реальній реалізації."
      },
      "implementationPrerequisites": [
        "KL-044",
        "KL-054",
        "KL-068",
        "KL-074",
        "KL-075",
        "KL-076",
        "KL-077",
        "KL-105",
        "KL-105.final-acceptance"
      ],
      "review": {
        "id": "KL-080",
        "finding": "Large release task should be an explicit gate/checklist over capability-specific receipts, not a new umbrella implementation. Does not postpone focused correctness, built-in OTel, foundation tests or discovered defect repairs.",
        "dependencyCorrection": "Original final dependencies remain; foundation milestone qualification runs immediately without waiting for all performance/comparison work.",
        "implementationScope": "All advertised capability implementation plus original044/054/068/074/075/076/077 final qualification; honest exact native source/image evidence",
        "laterQualificationScope": "Manifest/docs/native functional+process recovery+RF3+privacy/resources/correct benchmark cohorts agree, no mocked authority or unsupported promise; whole105 not inferred from source"
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F7",
      "executionOwner": "Delivery / final acceptance and runbooks",
      "nextDeliverable": "All advertised capability implementation plus original044/054/068/074/075/076/077 final qualification; honest exact native source/image evidence",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2026,
        "heading": "KL-080 · Integrated feature і performance release gate",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-081",
      "title": "Eventing contracts і shared TransactionDomain",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-081",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "7a47514ead2432cf579dcc6d65d5e2c1f39284b928eaca618f3d306faac10f8a",
        "dependencies": [
          "KL-002",
          "KL-045"
        ],
        "deliverable": "Зафіксувати domain binding, atomic producer/consumer scope, stream revisions, delivery guarantees, retry/retention horizons та stable errors.",
        "acceptance": "Кожен resource резолвиться у server-verified atomic scope; однаковий literal key різних domains не зливається; compatibility fixtures для попереднього isolated-domain routing збережені."
      },
      "implementationPrerequisites": [
        "KL-002",
        "KL-045",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-081",
        "finding": "Compatibility wording is stale under forward-only policy; retain immutable historical evidence, not an active old-routing fallback.",
        "implementationScope": "Verified atomic scope, canonical identities, SQL AST contracts and persisted authorization baseline.",
        "wholeTaskGate": "Original dependency completion plus real same-literal/different-domain routing, authorized producer/consumer and crash receipts."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "Define one canonical transaction domain for documents, tables, graph references, events and queues.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2554,
        "heading": "KL-081 · Eventing contracts і shared TransactionDomain",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-082",
      "title": "Event/queue keyspace і state envelopes",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-082",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "0536880271b6c5d9a792141f0225acd71e2bfe50d29dc3a867de0cba3fa842db",
        "dependencies": [
          "KL-007",
          "KL-008",
          "KL-081"
        ],
        "deliverable": "Додати SH/EV/ED/EF/ES, QB/QM/QR/QS/QL/QD, SG/SC/SD/IN; metadata для state versions і classified payloads.",
        "acceptance": "Golden ordering/roundtrip tests пройдено; graph E namespace незмінний; ready/scheduled/lease indexes мають rebuild/validation recipe; body buffers immutable."
      },
      "implementationPrerequisites": [
        "KL-007",
        "KL-008",
        "KL-081",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-082",
        "finding": "Prefix list alone is insufficient specification: reconcile actual namespaces, frozen aliases/IDs, metadata/classification ownership before edits.",
        "implementationScope": "081 contracts, native generated serialization and node-local canonical ordered commit/recovery.",
        "wholeTaskGate": "Original full dependencies; golden ordering/roundtrip plus real immutable payload/state and secondary-index rebuild/recovery operations."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "081 contracts, native generated serialization and node-local canonical ordered commit/recovery.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2562,
        "heading": "KL-082 · Event/queue keyspace і state envelopes",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-083",
      "title": "AppendEvents, expected revision та dedup",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-083",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "396fc5801e70eb1144677b7b64070d78f9fe6966801f820d3b8aa2b7c5a4436d",
        "dependencies": [
          "KL-009",
          "KL-012",
          "KL-082"
        ],
        "deliverable": "Atomic event batches, stream head, Exact/NoStream/Any, EventId/fingerprint і persisted outcomes.",
        "acceptance": "Concurrent Exact append має одного committed переможця; retry не дублює batch; same ID/different payload дає Conflict; head і events узгоджені після seeded crashes."
      },
      "implementationPrerequisites": [
        "KL-009",
        "KL-012",
        "KL-082",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-083",
        "finding": "Missing written early security/authority foundation; do not defer current grants until final adversarial suite.",
        "implementationScope": "082 envelopes, bounded admission, atomic commit/idempotency and current persisted permissions.",
        "wholeTaskGate": "Original full dependencies; one concurrent Exact winner, real idempotent retry/conflict and seeded crash/cold head+events invariants."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "082 envelopes, bounded admission, atomic commit/idempotency and current persisted permissions.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2570,
        "heading": "KL-083 · AppendEvents, expected revision та dedup",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-084",
      "title": "ReadStream, feed cursors і catch-up",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-084",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "6e87d79b88192892f12bfe9dc64fe0fe40f6491bffc770834a9181489884ad6f",
        "dependencies": [
          "KL-004",
          "KL-013",
          "KL-083"
        ],
        "deliverable": "Bounded forward/backward reads, stable per-atomic EventSequence, vector cursor, catch-up → tail без lost wake-up.",
        "acceptance": "Reader бачить тільки committed batch; race append/register не губить event; gaps через retention explicit; restart/reconnect зберігає доступні events."
      },
      "implementationPrerequisites": [
        "KL-004",
        "KL-013",
        "KL-083",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-084",
        "finding": "Split local read/tail from distributed vector coverage; native Orleans Streams do not replace persisted KeyLoad business history.",
        "implementationScope": "Committed local append, bounded scoped reads and current policy; stable local EventSequence before distributed cursor work.",
        "wholeTaskGate": "Original dependencies plus distributed cursor/retention/movement prerequisites for those cases; lost-wakeup, restart and explicit gaps through real operations."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "Committed local append, bounded scoped reads and current policy; stable local EventSequence before distributed cursor work.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2578,
        "heading": "KL-084 · ReadStream, feed cursors і catch-up",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-085",
      "title": "Aggregate snapshots, schemas та replay",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-085",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "50ed13ef4c5243fe235dd50ac41b1f73e176cf75838ba9ef11bd6ff7c7fa67c8",
        "dependencies": [
          "KL-084",
          "KL-064"
        ],
        "deliverable": "SourceRevision/ReducerVersion snapshots, exact current-schema pure external-worker replay і projection concurrency без schema conversion або compatibility fallback.",
        "acceptance": "Snapshot+tail відтворює reference state; incompatible reducer snapshot і неточна current event schema відхиляються до callback; erased/missing history explicit; bounded cancellable replay зберігає original event/snapshot/receipt bytes та за замовчуванням не запускає external outputs."
      },
      "implementationPrerequisites": [
        "KL-084",
        "KL-064",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-085",
        "finding": "Safe output projection does not grant worker access to required inputs; retain native callback/side-effect boundary.",
        "implementationScope": "084 local history, exact current schema, 063 required-input usage and 064 safe projection contracts.",
        "wholeTaskGate": "Original dependencies; real snapshot+tail reference, before-callback incompatibility/required-input denial, bounded cancellation, missing history, unchanged original bytes and no default external outputs."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "084 local history, exact current schema, 063 required-input usage and 064 safe projection contracts.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2586,
        "heading": "KL-085 · Aggregate snapshots, schemas та replay",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-086",
      "title": "Durable enqueue і queue-lane state",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-086",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "66069abb81a83520af0b81b1a7f1b32544b9b11249c7a904d5733653f43d54e3",
        "dependencies": [
          "KL-012",
          "KL-082"
        ],
        "deliverable": "QB/QM atomic insert, ready/scheduled indexes, message identity/fingerprint, lane quotas та terminal metadata.",
        "acceptance": "Enqueue retry дає один message у horizon; duplicate ID/different payload rejected; quota failure відхиляє producer batch; crash не відділяє payload від state."
      },
      "implementationPrerequisites": [
        "KL-012",
        "KL-082",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-086",
        "finding": "Ready/scheduled indexes are derived; neither index presence nor clock availability substitutes for canonical state or real health admission.",
        "implementationScope": "082 envelopes, atomic batch/quota/idempotency baseline and current producer grants; early logged-time contract for scheduling fields.",
        "wholeTaskGate": "Original dependencies; one enqueue within horizon, conflicting payload refusal, whole-batch quota rollback, payload/state crash atomicity."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "082 envelopes, atomic batch/quota/idempotency baseline and current producer grants; early logged-time contract for scheduling fields.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2594,
        "heading": "KL-086 · Durable enqueue і queue-lane state",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-087",
      "title": "Claim, ACK, renew і delivery fencing",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-087",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "5ab0314d0373c4c86c1e9a195f50149458aeb5d5725d0b86d24b6fa926fe8b04",
        "dependencies": [
          "KL-003",
          "KL-086",
          "KL-096"
        ],
        "deliverable": "ReceiveRequestId, bounded ClaimBatch, persisted lease token, ACK/NACK/renew preconditions і outcome lookup.",
        "acceptance": "Delivery відбувається після потрібного commit; lost claim/ACK response recovery пройдено; stale token не впливає на нову lease; multi-lane response чесно показує partial outcomes."
      },
      "implementationPrerequisites": [
        "KL-003",
        "KL-086",
        "KL-096",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-087",
        "finding": "Do not add whole 092 as prerequisite: 092 depends on 088 which depends on 087. Split early clock foundation from scheduler completion.",
        "implementationScope": "086 plus minimal 096 consume/required-input authorization, authority and early 092 clock contract.",
        "wholeTaskGate": "Original dependencies; real committed claims, lost-response outcome recovery, stale-token fencing and explicit multi-lane partial results, with RF3/cold qualification."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "Use canonical claim/ACK/renew receipts and delivery fences; native timers/jobs trigger authorized work only.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2602,
        "heading": "KL-087 · Claim, ACK, renew і delivery fencing",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-088",
      "title": "Retry, DLQ, cancellation та expiry",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-088",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "3a447efef5a5b019ad9f32c6bae955d0a8f0ac9ee6f502a6078b8f5773fd260e",
        "dependencies": [
          "KL-087"
        ],
        "deliverable": "Versioned state machine, backoff/jitter, MaxAttempts, parked state, redrive generation та StrictPerKey profile.",
        "acceptance": "Кожен перехід має reference fixture; full DLQ зберігає pending payload; retries bounded; stale expiry/renew race без double state; ordering-profile limitations задокументовані."
      },
      "implementationPrerequisites": [
        "KL-087",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-088",
        "finding": "Deadline arithmetic, original logged decisions and fresh read health differ; no per-message unbounded timer or synthetic wakeup bypass.",
        "implementationScope": "087 and shared early clock/expiry contract, persisted bounded transition rules and current redrive grants.",
        "wholeTaskGate": "Original dependencies; every real transition/reference, full-DLQ payload preservation, renew/expiry races, bounded retry and documented ordering limits across restart."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "087 and shared early clock/expiry contract, persisted bounded transition rules and current redrive grants.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2610,
        "heading": "KL-088 · Retry, DLQ, cancellation та expiry",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-089",
      "title": "Durable groups і contiguous checkpoints",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-089",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "b929fef21a7468977e9ade5d9162a25f6c338ed076103d8af6de9458796d51a1",
        "dependencies": [
          "KL-084",
          "KL-087"
        ],
        "deliverable": "Independent groups, competing workers, gap bitmap/ranges, filter generations, coverage discovery і ownership epochs.",
        "acceptance": "ACK 103 не просуває checkpoint повз pending 102; bounded gaps дають backpressure; reconnect/filter change/new partition не створюють тихих пропусків; retained history replayable."
      },
      "implementationPrerequisites": [
        "KL-084",
        "KL-087",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-089",
        "finding": "Separate local group implementation from late migration coverage; policy denial cannot silently advance checkpoint.",
        "implementationScope": "084 local event positions, 087 delivery fencing, current 096 policy and bounded gap/filter ownership contracts.",
        "wholeTaskGate": "Original dependencies; ACK103 cannot pass pending102, bounded backpressure, reconnect/filter-generation/partition coverage and retained-history replay; distributed movement cases qualified later."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "084 local event positions, 087 delivery fencing, current 096 policy and bounded gap/filter ownership contracts.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2618,
        "heading": "KL-089 · Durable groups і contiguous checkpoints",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-090",
      "title": "Inbox і CommitProcessing",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-090",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "f0e208028bb826c6643951e81db6ec383afce015543df8a6e94846266fb8aaeb",
        "dependencies": [
          "KL-012",
          "KL-087",
          "KL-091"
        ],
        "deliverable": "Handler/input dedup, protected atomic effects, local ACK в тому самому batch та cross-partition target-inbox pattern.",
        "acceptance": "Crash після effect commit до response не повторює DB effects; stale delivery не commit-ить local batch; external calls винесені за transaction; dedup horizon і redrive identity explicit."
      },
      "implementationPrerequisites": [
        "KL-012",
        "KL-087",
        "KL-091",
        "KL-090.target-inbox-contract",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-090",
        "finding": "Local processing can precede transport; adding whole094 dependency creates cycle094→090→094. Freeze target-inbox contract early, qualify joined cross-partition flow later. External effects are not DB exactly-once.",
        "implementationScope": "087 fencing, 091 atomic compiler, persisted dedup horizon and protected same-partition effects.",
        "wholeTaskGate": "Original dependencies plus 094 for actual cross-partition transfer integration; crash after commit, stale delivery, dedup/redrive and no external network call under transaction."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "Commit inbox/outbox and business effects together with stable retry identity and explicit cross-partition contract.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2626,
        "heading": "KL-090 · Inbox і CommitProcessing",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-091",
      "title": "Document + event + queue atomic batch",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-091",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "c384f3d33238fb3b13091a39fbcaf3e0dad15ff34c459e3a0124375555711f9a",
        "dependencies": [
          "KL-010",
          "KL-011",
          "KL-083",
          "KL-086",
          "KL-081"
        ],
        "deliverable": "Розширити batch compiler/apply для shared domain resources, усіх preconditions, queue quotas, outbox та committed receipt.",
        "acceptance": "Failure кожної operation відхиляє весь batch; після crash усі canonical частини одного commit присутні разом; unrelated domains rejected; ANN freshness відображена окремо."
      },
      "implementationPrerequisites": [
        "KL-010",
        "KL-011",
        "KL-083",
        "KL-086",
        "KL-081",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-091",
        "finding": "Document+event+enqueue alone does not close architecture lines3–13 queue→referenced entity→graph and reverse bounded SQL composition.",
        "implementationScope": "081 domain, 083/086 canonical writes, document/index atomic commit, bounded shared authorization and AST semantics.",
        "wholeTaskGate": "Original dependencies; real all-or-none precondition/quota failure and cold recovery, unrelated-domain denial, separate ANN freshness; central cross-model SQL flow must have an explicit owner/gate."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "Commit document/event/queue effects in one existing same-partition atomic batch.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2634,
        "heading": "KL-091 · Document + event + queue atomic batch",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-092",
      "title": "Native Orleans durable scheduling and persisted deadlines",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-092",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "d34dc8084b6206939bf53106bdbaf7c33dab5ea995ad7eaa6b44b08f0798686b",
        "dependencies": [
          "KL-088",
          "KL-052"
        ],
        "deliverable": "QS/QL seek, bounded deadline heap, authoritative evaluation time, logged transitions, drift/readiness gate і shutdown order.",
        "acceptance": "Restart відновлює schedules; followers застосовують ті самі time decisions; clock-skew і lease-renew races покриті; no per-message timer allocation; lateness виміряно."
      },
      "implementationPrerequisites": [
        "KL-088",
        "KL-052",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-092",
        "finding": "Use native Orleans timers/reminders/Durable Jobs by actual delivery/lifetime contract, ordinary TimeProvider for budgets and committed timestamps for deterministic apply. Remove the rejected custom-clock prerequisite and duplicate job lifecycle runtime.",
        "implementationScope": "After queue state and bounded admission: selected native job provider, canonical due/outbox/version state, idempotent authorized effects and commit-to-schedule recovery. No separate clock provider or ABI gate.",
        "wholeTaskGate": "Actual RF3 SDK/MCP scheduled operations, late/retried/duplicate delivery, renew and cancellation races, worker/silo restart, canonical timestamp decisions, resource bounds and measured lateness under declared load. Alpha package maturity remains explicit."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "Use native Durable Jobs/timers/reminders and canonical persisted deadlines; no custom clock or duplicate scheduler runtime.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2642,
        "heading": "KL-092 · Persisted scheduler і clock contract",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-093",
      "title": "Orleans coordinators і worker SDK",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-093",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "c4fc7d732c9cd1724ed946fd23fd48ad300ca9e16aa5171cf635404e4a16b30c",
        "dependencies": [
          "KL-053",
          "KL-087",
          "KL-089",
          "KL-092"
        ],
        "deliverable": "Shard-level queue/group/scheduler coordinators, external worker receive/renew helpers, auth context і bounded long polling.",
        "acceptance": "Silo/worker restart не губить persisted delivery state; session head-of-line blocking відсутній; handlers не виконують network IO під storage gate; memory inflight quotas дотримано."
      },
      "implementationPrerequisites": [
        "KL-053",
        "KL-087",
        "KL-089",
        "KL-092",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-093",
        "finding": "Full model coordinators are not prerequisite to foundation Orleans. 053 optional SessionGrain text must defer to current mandatory connection-owned execution contract; membership is not replication consistency.",
        "implementationScope": "Already-selected native membership/directory/activation/lifecycle/connection routing; then model-specific 087/089/092 state contracts and authenticated bounded polling.",
        "wholeTaskGate": "Original dependencies; actual SDK/official MCP across RF3, worker/silo restart, no session HOL/network IO under storage gate, bounded inflight and joined cleanup."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "Native coordinators and worker SDK invoke separately authorized bounded connection operations.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2650,
        "heading": "KL-093 · Orleans coordinators і worker SDK",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-094",
      "title": "Cross-partition transfer outbox",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-094",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "e2adced97f66adc2cea604b54c7d6e1a0ee8ec7d7bc78964c0563ce6182a1b60",
        "dependencies": [
          "KL-016",
          "KL-020",
          "KL-086",
          "KL-090"
        ],
        "deliverable": "TransferId, source intent, destination dedup receipt, retry, remote DLQ і retention-reference pins.",
        "acceptance": "Crash на кожному етапі не губить intent/payload; повтор target enqueue безпечний; source показує OutputPending до receipt; destination failures visible; source/dedup horizons узгоджені."
      },
      "implementationPrerequisites": [
        "KL-016",
        "KL-020",
        "KL-086",
        "KL-090",
        "KL-090.target-inbox-contract",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-094",
        "finding": "Do not require full movement to begin transfer contract; do not hide remote failure as success or invent parallel transport dispatcher.",
        "implementationScope": "Foundation RF3/current authority/receipts, durable outbox, enqueue and local inbox; stable intent/dedup contract before joined transport.",
        "wholeTaskGate": "Original dependencies; each actual source/target crash stage, idempotent target, OutputPending until definitive receipt, visible destination failure and aligned retention pins/horizons."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "Foundation RF3/current authority/receipts, durable outbox, enqueue and local inbox; stable intent/dedup contract before joined transport.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2658,
        "heading": "KL-094 · Cross-partition transfer outbox",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-095",
      "title": "Event SQL, queue views та protocol",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-095",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8e2a5ddbd9fa6116fc3293f24452e2abe2ab75f5dcb6facc49f9e38ed582a54e",
        "dependencies": [
          "KL-051",
          "KL-084",
          "KL-087",
          "KL-064"
        ],
        "deliverable": "Authorized EVENTS/QUEUE_MESSAGES operators, stream/queue SDK contracts і explicit mutation endpoints.",
        "acceptance": "SQL/JSON/SDK мають equivalent permissions; SELECT не claim-ить messages; internal state неможливо змінити generic UPDATE; views не розкривають lease tokens."
      },
      "implementationPrerequisites": [
        "KL-051",
        "KL-084",
        "KL-087",
        "KL-064",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-095",
        "finding": "Operators/views or HTTP CALL alone are not full SQL/client protocol. 047 old handwritten-parser choice is stale under owner ADR130. Queue↔graph cross-model SQL scope needs explicit joined acceptance.",
        "implementationScope": "Actual centrally pinned ScriptDom, versioned canonical AST/binding/execution, 084 reads/087 mutations, current persisted grants and safe projection.",
        "wholeTaskGate": "Original dependencies; actual SQL/JSON/.NET SDK/official MCP equivalent authorization/results, SELECT has no claim effect, internal generic UPDATE denial, no lease-token leakage; wire conformance remains separate."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "Actual centrally pinned ScriptDom, versioned canonical AST/binding/execution, 084 reads/087 mutations, current persisted grants and safe projection.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2666,
        "heading": "KL-095 · Event SQL, queue views та protocol",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-096",
      "title": "Event/message RBAC і sensitive schemas",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-096",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "2c67c06a5ee5f90fbc4684b6aa8ddb414c6024cef20b6cdb0458c28232654ea4",
        "dependencies": [
          "KL-061",
          "KL-062",
          "KL-064",
          "KL-081"
        ],
        "deliverable": "Publish/consume/replay/inspect/redrive permissions, header/body classifications, required-input grants та DLQ policy inheritance.",
        "acceptance": "Unprivileged inspection omits PII; worker із браком required field access отримує явний outcome; schema reclassification/revocation поширюється на наступні deliveries; secrets не логуються."
      },
      "implementationPrerequisites": [
        "KL-061",
        "KL-062",
        "KL-064",
        "KL-081",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-096",
        "finding": "063 required-input use is an unstated concrete prerequisite. Do not wait for late103 broad suite to protect initial real-data delivery.",
        "implementationScope": "061/062/063/064 current principal/catalog/use/projection baseline and 081 resource scopes.",
        "wholeTaskGate": "Original dependencies; real inspection omission, explicit required-input denial, next-boundary reclassification/revoke, DLQ inherited policy and exporter/log privacy."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "061/062/063/064 current principal/catalog/use/projection baseline and 081 resource scopes.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2674,
        "heading": "KL-096 · Event/message RBAC і sensitive schemas",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-097",
      "title": "Event-driven projections і search lineage",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-097",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "7d1f79b56110c9ef465a3f7bb85a4ca9571af72691865ab6ddc55e339e9040bb",
        "dependencies": [
          "KL-085",
          "KL-029",
          "KL-031",
          "KL-067"
        ],
        "deliverable": "EventRef provenance, uploaded → job → vector pipeline, reducer generations, input revision guards та WaitForIndex.",
        "acceptance": "Stale inference result не перезаписує новий document state; replay не запускає side effects за замовчуванням; projection не читає власні mutations нескінченно; PII lineage збережено."
      },
      "implementationPrerequisites": [
        "KL-085",
        "KL-029",
        "KL-031",
        "KL-067",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-097",
        "finding": "Search publication receipts and current canonical revision must remain authority; no synthetic generation, mock index or hidden worker grants.",
        "implementationScope": "085 replay, actual projection/search lifecycle 029/031/067, event references and current required-input/derived-lineage policy.",
        "wholeTaskGate": "Original dependencies; actual upload→job→vector→query, stale result CAS refusal, replay no default effects, self-loop bounds, current PII lineage and original/cold continuation."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "085 replay, actual projection/search lifecycle 029/031/067, event references and current required-input/derived-lineage policy.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2682,
        "heading": "KL-097 · Event-driven projections і search lineage",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-098",
      "title": "Eventing retention, purge і backup state",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-098",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8b39e0a4c4387cd70ec451733a3ffb9f0bec0d0132451bd84a7d2b2869e465d9",
        "dependencies": [
          "KL-005",
          "KL-085",
          "KL-088",
          "KL-089"
        ],
        "deliverable": "Consumer/rebuild/transfer pins, history availability, receipt horizon, event/queue raw backup manifest та paused restore.",
        "acceptance": "Unread/history loss ніколи не маскується successful resume; source positions лишаються стабільними; restore відновлює group/inbox/queue invariants із paused dispatch; remote-transfer cases активуються разом із KL-094."
      },
      "implementationPrerequisites": [
        "KL-005",
        "KL-085",
        "KL-088",
        "KL-089",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-098",
        "finding": "Original AC already defers remote cases to094; do not turn all distributed qualification into a blocker for local safe retention implementation.",
        "implementationScope": "005 canonical backup and local implemented event/queue/group/inbox state; shared retention/dedup horizon contract.",
        "wholeTaskGate": "Original dependencies; real raw backup restore with stable positions, explicit unavailable history, paused dispatch and group/inbox/queue invariants; 094 remote pin/transfer cases joined when implemented."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F3",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "005 canonical backup and local implemented event/queue/group/inbox state; shared retention/dedup horizon contract.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2690,
        "heading": "KL-098 · Eventing retention, purge і backup state",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-099",
      "title": "Eventing replication і migration",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-099",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "fec551afbb235cf14b7561940b09f55a14c383bc9bf62320bbee616a464dd5d8",
        "dependencies": [
          "KL-035",
          "KL-036",
          "KL-072",
          "KL-087",
          "KL-089"
        ],
        "deliverable": "Перенесення domain bindings, event sequence, queue leases, subscriber gaps, delivery generations і recovery readiness.",
        "acceptance": "Старий owner не видає нові claims; committed ACK збережені в normal failover; stream cursor не порівнює різні Raft logs; atomic domain переїжджає зі всіма resources."
      },
      "implementationPrerequisites": [
        "KL-035",
        "KL-036",
        "KL-072",
        "KL-087",
        "KL-089",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-099",
        "finding": "Late eventing movement must not postpone foundation native Orleans membership/directory/activation movement. Physical storage ownership and logical grain activation are distinct.",
        "implementationScope": "Qualified RF3 authority and physical movement 035/036, stable cursor semantics072, persisted leases/groups087/089.",
        "wholeTaskGate": "Original dependencies; actual owner transition/failover/cold receipts, old owner cannot claim, committed ACK retained, no comparing unrelated log positions, whole atomic domain resources move."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "EventStreams / canonical ZoneTree and native Orleans Streams",
      "nextDeliverable": "Qualified RF3 authority and physical movement 035/036, stable cursor semantics072, persisted leases/groups087/089.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2698,
        "heading": "KL-099 · Eventing replication і migration",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-100",
      "title": "Delayed jobs, recurring occurrences і saga state",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-100",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "9b25fbcb80b36ecbad9f92a616f9431c384d7436f697dc2310d166b3b764cfa4",
        "dependencies": [
          "KL-090",
          "KL-092",
          "KL-094"
        ],
        "deliverable": "Versioned schedules, timezone/misfire rules, OccurrenceId, saga CAS і timeout messages у межах заявленого processing contract.",
        "acceptance": "Duplicate timer delivery не створює duplicate occurrence; restart preserves saga state; cancel/timeout race explicit; general workflow-engine compatibility не заявляється без окремого тестування."
      },
      "implementationPrerequisites": [
        "KL-090",
        "KL-092",
        "KL-094",
        "FOUNDATION.operation-gate"
      ],
      "review": {
        "id": "KL-100",
        "finding": "Optional describes minimum release only. User all105 goal makes100 required in overall completion; cannot omit via104 advertised-subset wording. No unqualified general workflow-engine compatibility.",
        "implementationScope": "Local inbox090, qualified early clock+scheduler092;094 required for claimed cross-partition occurrences/effects.",
        "wholeTaskGate": "Original dependencies retained for whole ticket; real occurrence dedup, restart saga CAS, cancel/timeout races, timezone/misfire policy and declared processing contract."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F4",
      "executionOwner": "Messaging / partition grains and native Durable Jobs",
      "nextDeliverable": "Persist recurring occurrences and workflow progress with native jobs and idempotent effects; no new saga runtime.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2706,
        "heading": "KL-100 · Delayed jobs, recurring occurrences і saga state",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-101",
      "title": "Eventing benchmark kit і .NET baselines",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-101",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "5148c6101303db8221674d3f033546c2d55cf63eb697f21a8cb30c290691cdc4",
        "dependencies": [
          "KL-006",
          "KL-073",
          "KL-081"
        ],
        "deliverable": "E01..E11, PG event/lease schemas, Marten/Wolverine integration, optional specialized KurrentDB/RabbitMQ arms.",
        "acceptance": "Durability/quality/security/resource assumptions збережені; receive/ACK і unique-completion metrics відділені від enqueue; перед runs обрано primary target; actual results only після появи implementation."
      },
      "implementationPrerequisites": [
        "KL-006",
        "KL-073",
        "KL-081",
        "KL-105.matched-reprofile"
      ],
      "review": {
        "id": "KL-101",
        "finding": "Old P0 baseline-first scheduling superseded by owner foundation-first. E09 larger-than-RAM must use allowed100k/1M with declared RAM, not introduce5M. Specialized optional arms do not silently remove mandatory approved competitor matrix.",
        "implementationScope": "Retain scenario contracts now; run only after functional equivalent implemented capabilities, selected primary target and source-bound fair deployment inventory.",
        "wholeTaskGate": "Original dependencies plus actual capability prerequisites; original isolated Linux 1/3-native-node cells, 100k/1M records and >=100k measured operations, matched corpus/ack/resources/privacy, actual correctness and receive/ACK/unique completion metrics."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F6",
      "executionOwner": "Performance / original native profiles and Linux comparisons",
      "nextDeliverable": "Retain scenario contracts now; run only after functional equivalent implemented capabilities, selected primary target and source-bound fair deployment inventory.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2714,
        "heading": "KL-101 · Eventing benchmark kit і .NET baselines",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-102",
      "title": "Eventing failure і state-machine suite",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-102",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "8af63cfcc91c2e3cefaffa82c43a29e256f577803a0470c336907c31eaa59dda",
        "dependencies": [
          "KL-091",
          "KL-090",
          "KL-088",
          "KL-099"
        ],
        "deliverable": "Lost responses, expired slow workers, ACK races, checkpoints gaps, process kill, partitions, total-reset model і restore-old-cut.",
        "acceptance": "Ранній local gate активний з KL-091/KL-090/KL-088; cluster cases додаються з KL-099; forbidden partial mutations/duplicate protected effects/скіпи pending input блокують реліз відповідної capability."
      },
      "implementationPrerequisites": [
        "KL-091",
        "KL-090",
        "KL-088",
        "KL-099"
      ],
      "review": {
        "id": "KL-102",
        "finding": "Source2546/2722 explicitly reject waiting for all cluster work before local tests; final broad audit does not defer discovered correctness defects.",
        "implementationScope": "Local091/090/088 as each becomes executable; cluster099 only for its capability-specific cases.",
        "wholeTaskGate": "Original full dependencies; original lost-response/expired worker/ACK/checkpoint/process-kill/partition/total-reset/old-cut evidence, no partial effects/duplicate protected effects/skipped input."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F5",
      "executionOwner": "Qualification / actual native functional operations",
      "nextDeliverable": "Local091/090/088 as each becomes executable; cluster099 only for its capability-specific cases.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2722,
        "heading": "KL-102 · Eventing failure і state-machine suite",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-103",
      "title": "Eventing adversarial security suite",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-103",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "bc9839004ef79b9c6ab5aaa93564c998a897fef05aef15cedf8e2d768dae3128",
        "dependencies": [
          "KL-096",
          "KL-095",
          "KL-097"
        ],
        "deliverable": "Tenant/token forgery, role revoke, headers/body/DLQ leaks, replay із redacted inputs, unsafe export і arbitrary-handler injection.",
        "acceptance": "Local delivery security gate виконується з KL-095/KL-096; search-lineage cases додаються з KL-097; канаркове PII відсутнє в недозволених outputs; required-input policy failures explicit."
      },
      "implementationPrerequisites": [
        "KL-096",
        "KL-095",
        "KL-097"
      ],
      "review": {
        "id": "KL-103",
        "finding": "Do not defer initial security to final audit or block local security until all search projections exist; original2546/2730 already split stages.",
        "implementationScope": "Local095/096 current authority and actual clients;097 only for its search-lineage cases.",
        "wholeTaskGate": "Original full dependencies; actual tenant/token/revoke/header/body/DLQ/replay/export/injection cases, PII canaries absent from denied outputs and explicit required-input failures."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F5",
      "executionOwner": "Qualification / actual native functional operations",
      "nextDeliverable": "Local095/096 current authority and actual clients;097 only for its search-lineage cases.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2730,
        "heading": "KL-103 · Eventing adversarial security suite",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-104",
      "title": "All-in-one release manifest і runbooks",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-104",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "90afdf0bc6de622322677743e038cb3fa3efa9539c62732c277357c84f60b9e5",
        "dependencies": [
          "KL-080",
          "KL-098",
          "KL-099",
          "KL-101",
          "KL-102",
          "KL-103"
        ],
        "deliverable": "Єдиний release gate для declared data/event/messaging capabilities, restores, limits, latency, operator runbooks і dependency provenance.",
        "acceptance": "Кожен advertised contract має real-process evidence; paused restore та redrive runbook перевірені; optional KL-100 потрібен лише для заявленої job/saga capability; непідтверджені performance claims відсутні."
      },
      "implementationPrerequisites": [
        "KL-080",
        "KL-098",
        "KL-099",
        "KL-101",
        "KL-102",
        "KL-103",
        "KL-100"
      ],
      "review": {
        "id": "KL-104",
        "finding": "Advertised-subset minimum-release language cannot silently close original all105 goal. Root owns final integrated manifest/status, not this ignored review.",
        "implementationScope": "All declared capabilities plus user complete105 scope, dependency provenance, supported deployment contracts and current qualification identities.",
        "wholeTaskGate": "Original dependencies plus100 for all105 goal and105 measured-profile/performance gate; each real-process contract, paused restore/redrive, endurance/fault/privacy/bounds/clean Linux measurements and honest limitations/runbooks."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F7",
      "executionOwner": "Delivery / final acceptance and runbooks",
      "nextDeliverable": "All declared capabilities plus user complete105 scope, dependency provenance, supported deployment contracts and current qualification identities.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2738,
        "heading": "KL-104 · All-in-one release manifest і runbooks",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    },
    {
      "id": "KL-105",
      "title": ".NET profiling with dotnet-diagnostics-mcp and measured bottleneck repairs",
      "statusAtReview": "in_progress",
      "originalDefinition": {
        "source": "docs/design/architecture-v0.3.uk.md#kl-105",
        "snapshotSha256": "e4a9e58225ef563ca8b9c82adc709c56927aa530b8acfebd05ee87df86f7bdeb",
        "definitionSha256": "2ff7153994be23bbc763f5a6fa56d1f2fd51138aaa392dd9f0b18a4d48985e0d",
        "dependencies": [
          "KL-075",
          "KL-077",
          "KL-080"
        ],
        "deliverable": "Виконати `dotnet tool install -g dotnet-diagnostics-mcp`, створити skill `dotnet-diagnostics-profiling` і застосувати actual native diagnostics до справжніх .NET процесів. Зняти bounded CPU, allocations, GC, contention та ThreadPool профілі; зіставити hotspots із точним source/DLL/PDB, виправити підтверджені вузькі місця та повторити профілі на зіставних workloads. Джерело інструмента: [pedrosakuma/dotnet-diagnostics](https://github.com/pedrosakuma/dotnet-diagnostics).",
        "acceptance": "[REQ/AC-PROFILE-105](../Features/BenchmarkComparisons/DotnetProfiling.md) вимагають реальні captures, quality/loss/overhead metadata, correctness regressions, matched before/after та original Linux GitHub performance artifacts. Встановлення, skill, source review чи trace самі не закривають задачу та не доводять прискорення. RF3, native Orleans, ZoneTree, persisted authorization, SIMD, admission і durability contracts залишаються обов'язковими."
      },
      "implementationPrerequisites": [
        "KL-105.matched-reprofile"
      ],
      "review": {
        "id": "KL-105",
        "finding": "Formal original DAG is acyclic, but implicit077 optimization→105 capture plus105 full077/080 wait is a semantic cycle. Split105.capture→077.repair→105.reprofile→075/101 clean benchmark→080/104 final release. Profiling cannot select optimizations without captures; setup/idle/client smoke is not acceptance.",
        "implementationScope": "Actual functional source-matched owned process/workload, PID/runtime/DLL/PDB identities and foundation telemetry; do not wait for whole077/080 to collect causal diagnostics.",
        "wholeTaskGate": "Original final obligations retained: real bounded native captures or explicit unavailable results, loss/overhead/source mapping, confirmed owning repair and regressions, matched reprofile, separate original isolated Linux clean benchmarks."
      },
      "qualification": "Complete current owner-selected feature/ADR AC with original exact-source evidence. Implementation milestone readiness does not close this task; historical status is not current cohort proof.",
      "primaryPriorityBand": "F6",
      "executionOwner": "Performance / original native profiles and Linux comparisons",
      "nextDeliverable": "Profile actual processes only for measured bottlenecks; preserve source/workload identities and matched reprofile before speed claims.",
      "definitionLocator": {
        "path": "docs/design/architecture-v0.3.uk.md",
        "line": 2746,
        "heading": "KL-105 · Профілювання .NET і виправлення виміряних вузьких місць",
        "note": "Current resolvable locator; originalDefinition.source and all original snapshots remain frozen historical review input."
      }
    }
  ],
  "milestones": [
    {
      "id": "FOUNDATION.operation-gate",
      "prerequisites": [
        "KL-014",
        "KL-020",
        "KL-021",
        "KL-035",
        "KL-015",
        "KL-052",
        "KL-053",
        "KL-061",
        "KL-064",
        "KL-066",
        "KL-043",
        "FOUNDATION.usable-database"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-001",
      "prerequisites": [],
      "kind": "task-implementation"
    },
    {
      "id": "KL-002",
      "prerequisites": [
        "KL-001"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-003",
      "prerequisites": [
        "KL-001",
        "KL-002"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-004",
      "prerequisites": [
        "KL-001",
        "KL-002"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-005",
      "prerequisites": [
        "KL-003",
        "KL-004"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-006",
      "prerequisites": [
        "KL-001"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-007",
      "prerequisites": [
        "KL-002"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-008",
      "prerequisites": [
        "KL-003",
        "KL-004",
        "KL-007"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-009",
      "prerequisites": [
        "KL-002",
        "KL-008"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-010",
      "prerequisites": [
        "KL-009"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-010.minimum-command",
      "prerequisites": [
        "KL-009",
        "KL-061.bootstrap-identity",
        "KL-052.core-bounds"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-011",
      "prerequisites": [
        "KL-007",
        "KL-010"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-012",
      "prerequisites": [
        "KL-009",
        "KL-010",
        "KL-011"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-012.minimum-stable-id",
      "prerequisites": [
        "KL-010.minimum-command"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-013",
      "prerequisites": [
        "KL-004",
        "KL-011",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-014",
      "prerequisites": [
        "KL-010.minimum-command",
        "KL-012.minimum-stable-id",
        "KL-019",
        "KL-053.connection-owner",
        "KL-052",
        "KL-061",
        "KL-064",
        "KL-065.document-acl",
        "KL-066.local-epochs"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-014.host-composition",
      "prerequisites": [
        "KL-001",
        "KL-002",
        "KL-015",
        "KL-008.silo-local-owner"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "One WebApplication/native Orleans host, awaited silo-local storage Grain Service Init, deferred original borrowers, catalog after Active and public admission after RF3; no nested host or custom clock blocker."
    },
    {
      "id": "KL-015",
      "prerequisites": [
        "KL-001",
        "KL-002"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-016",
      "prerequisites": [
        "KL-012"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-017",
      "prerequisites": [
        "KL-002",
        "KL-003",
        "KL-019.native-membership"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-018",
      "prerequisites": [
        "KL-018.stable-host-identity",
        "KL-020",
        "KL-061.bootstrap-identity",
        "KL-052.core-bounds",
        "KL-043.current-format"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-018.stable-host-identity",
      "prerequisites": [
        "KL-001",
        "KL-002",
        "KL-069"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-019",
      "prerequisites": [
        "KL-019.native-membership",
        "KL-018"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-019.native-membership",
      "prerequisites": [
        "KL-014.host-composition",
        "KL-018.stable-host-identity"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Actual selected native Azure provider, silo generation, distributed directory and audited per-grain placement/migration. This is runtime membership, not database voter/receipt authority."
    },
    {
      "id": "KL-020",
      "prerequisites": [
        "KL-009",
        "KL-012.minimum-stable-id",
        "KL-017",
        "KL-019.native-membership"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-021",
      "prerequisites": [
        "KL-020",
        "KL-019",
        "KL-053.connection-owner",
        "KL-061"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-022",
      "prerequisites": [
        "KL-011",
        "KL-012",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-023",
      "prerequisites": [
        "KL-022",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-024",
      "prerequisites": [
        "KL-007",
        "KL-012",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-025",
      "prerequisites": [
        "KL-024",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-026",
      "prerequisites": [
        "KL-016",
        "KL-024",
        "KL-025",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-027",
      "prerequisites": [
        "KL-010",
        "KL-016",
        "KL-077.normal-simd",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-028",
      "prerequisites": [
        "KL-001",
        "KL-016",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-029",
      "prerequisites": [
        "KL-016",
        "KL-028",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-030",
      "prerequisites": [
        "KL-001",
        "KL-027",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-031",
      "prerequisites": [
        "KL-016",
        "KL-030",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-032",
      "prerequisites": [
        "KL-013",
        "KL-023",
        "KL-027",
        "KL-031",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-033",
      "prerequisites": [
        "KL-029",
        "KL-032",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-034",
      "prerequisites": [
        "KL-016",
        "KL-021",
        "KL-029",
        "KL-031",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-035",
      "prerequisites": [
        "KL-005",
        "KL-020"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-036",
      "prerequisites": [
        "KL-019",
        "KL-035"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-036.owner-fence-contract",
      "prerequisites": [
        "KL-002",
        "KL-069"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-037",
      "prerequisites": [
        "KL-013",
        "KL-021",
        "KL-033",
        "KL-036",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-038",
      "prerequisites": [
        "KL-016",
        "KL-022",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-039",
      "prerequisites": [
        "KL-004",
        "KL-016",
        "KL-029",
        "KL-031",
        "KL-036.owner-fence-contract",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-040",
      "prerequisites": [
        "KL-015",
        "KL-020",
        "KL-052"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-041",
      "prerequisites": [
        "KL-020",
        "KL-035",
        "KL-036",
        "KL-039"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-042",
      "prerequisites": [
        "KL-005",
        "KL-035"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-043",
      "prerequisites": [
        "KL-043.current-format",
        "KL-005",
        "KL-035"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-043.current-format",
      "prerequisites": [
        "KL-001",
        "KL-007"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-044",
      "prerequisites": [
        "KL-040",
        "KL-041",
        "KL-042",
        "KL-043"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-045",
      "prerequisites": [
        "KL-002",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-045.capability-identity",
      "prerequisites": [
        "KL-002"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-046",
      "prerequisites": [
        "KL-045",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-047",
      "prerequisites": [
        "KL-001",
        "KL-045",
        "KL-046",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-048",
      "prerequisites": [
        "KL-047",
        "KL-061",
        "KL-062",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-049",
      "prerequisites": [
        "KL-048",
        "KL-013",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-050",
      "prerequisites": [
        "KL-049",
        "KL-004",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-050.bounded-output",
      "prerequisites": [
        "KL-004",
        "KL-062",
        "KL-052.core-bounds"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-051",
      "prerequisites": [
        "KL-050",
        "KL-014",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-052",
      "prerequisites": [
        "KL-052.core-bounds",
        "KL-009"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-052.core-bounds",
      "prerequisites": [
        "KL-002",
        "KL-015"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-053",
      "prerequisites": [
        "KL-053.connection-owner",
        "KL-014",
        "KL-052"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-053.connection-owner",
      "prerequisites": [
        "KL-014.host-composition",
        "KL-052.core-bounds",
        "KL-061.bootstrap-identity"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-054",
      "prerequisites": [
        "KL-051",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-055",
      "prerequisites": [
        "KL-023",
        "KL-045",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-056",
      "prerequisites": [
        "KL-033",
        "KL-055",
        "KL-050",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-057",
      "prerequisites": [
        "KL-037",
        "KL-056",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-058",
      "prerequisites": [
        "KL-029",
        "KL-061",
        "KL-062",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-059",
      "prerequisites": [
        "KL-030",
        "KL-027",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-060",
      "prerequisites": [
        "KL-032",
        "KL-059",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-061",
      "prerequisites": [
        "KL-015"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-061.bootstrap-identity",
      "prerequisites": [
        "KL-002",
        "KL-015"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-062",
      "prerequisites": [
        "KL-061",
        "KL-045.capability-identity"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-063",
      "prerequisites": [
        "KL-063.basic-field-authority",
        "KL-048"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-063.basic-field-authority",
      "prerequisites": [
        "KL-062"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-064",
      "prerequisites": [
        "KL-063.basic-field-authority",
        "KL-050.bounded-output"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-065",
      "prerequisites": [
        "KL-065.document-acl",
        "KL-023",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-065.document-acl",
      "prerequisites": [
        "KL-061",
        "KL-063.basic-field-authority"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-066",
      "prerequisites": [
        "KL-066.local-epochs",
        "KL-021"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-066.local-epochs",
      "prerequisites": [
        "KL-061",
        "KL-064",
        "KL-065.document-acl"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-067",
      "prerequisites": [
        "KL-062",
        "KL-029",
        "KL-031",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-068",
      "prerequisites": [
        "KL-064",
        "KL-065",
        "KL-066",
        "KL-067"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-069",
      "prerequisites": [
        "KL-002"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-070",
      "prerequisites": [
        "KL-069",
        "KL-036"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-071",
      "prerequisites": [
        "KL-070",
        "KL-035"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-072",
      "prerequisites": [
        "KL-071",
        "KL-021",
        "KL-034"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-073",
      "prerequisites": [
        "KL-006",
        "KL-001"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-074",
      "prerequisites": [
        "KL-073",
        "KL-056",
        "KL-060",
        "KL-058",
        "KL-105.matched-reprofile"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-075",
      "prerequisites": [
        "KL-073",
        "KL-057",
        "KL-071",
        "KL-072",
        "KL-105.matched-reprofile"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-076",
      "prerequisites": [
        "KL-040",
        "KL-052",
        "KL-070"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-077",
      "prerequisites": [
        "KL-006",
        "KL-008",
        "KL-050",
        "KL-105.capture"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-077.normal-simd",
      "prerequisites": [
        "KL-001",
        "KL-002"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-078",
      "prerequisites": [
        "KL-026",
        "KL-077.normal-simd"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-079",
      "prerequisites": [
        "KL-016",
        "KL-066",
        "KL-064",
        "KL-013",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-080",
      "prerequisites": [
        "KL-044",
        "KL-054",
        "KL-068",
        "KL-074",
        "KL-075",
        "KL-076",
        "KL-077",
        "KL-105",
        "KL-105.final-acceptance"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-081",
      "prerequisites": [
        "KL-002",
        "KL-045",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-082",
      "prerequisites": [
        "KL-007",
        "KL-008",
        "KL-081",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-083",
      "prerequisites": [
        "KL-009",
        "KL-012",
        "KL-082",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-084",
      "prerequisites": [
        "KL-004",
        "KL-013",
        "KL-083",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-085",
      "prerequisites": [
        "KL-084",
        "KL-064",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-086",
      "prerequisites": [
        "KL-012",
        "KL-082",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-087",
      "prerequisites": [
        "KL-003",
        "KL-086",
        "KL-096",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-088",
      "prerequisites": [
        "KL-087",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-089",
      "prerequisites": [
        "KL-084",
        "KL-087",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-090",
      "prerequisites": [
        "KL-012",
        "KL-087",
        "KL-091",
        "KL-090.target-inbox-contract",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-090.target-inbox-contract",
      "prerequisites": [
        "KL-002",
        "KL-012"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate"
    },
    {
      "id": "KL-091",
      "prerequisites": [
        "KL-010",
        "KL-011",
        "KL-083",
        "KL-086",
        "KL-081",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-092",
      "prerequisites": [
        "KL-088",
        "KL-052",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-093",
      "prerequisites": [
        "KL-053",
        "KL-087",
        "KL-089",
        "KL-092",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-094",
      "prerequisites": [
        "KL-016",
        "KL-020",
        "KL-086",
        "KL-090",
        "KL-090.target-inbox-contract",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-095",
      "prerequisites": [
        "KL-051",
        "KL-084",
        "KL-087",
        "KL-064",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-096",
      "prerequisites": [
        "KL-061",
        "KL-062",
        "KL-064",
        "KL-081",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-097",
      "prerequisites": [
        "KL-085",
        "KL-029",
        "KL-031",
        "KL-067",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-098",
      "prerequisites": [
        "KL-005",
        "KL-085",
        "KL-088",
        "KL-089",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-099",
      "prerequisites": [
        "KL-035",
        "KL-036",
        "KL-072",
        "KL-087",
        "KL-089",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-100",
      "prerequisites": [
        "KL-090",
        "KL-092",
        "KL-094",
        "FOUNDATION.operation-gate"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-101",
      "prerequisites": [
        "KL-006",
        "KL-073",
        "KL-081",
        "KL-105.matched-reprofile"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-102",
      "prerequisites": [
        "KL-091",
        "KL-090",
        "KL-088",
        "KL-099"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-103",
      "prerequisites": [
        "KL-096",
        "KL-095",
        "KL-097"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-104",
      "prerequisites": [
        "KL-080",
        "KL-098",
        "KL-099",
        "KL-101",
        "KL-102",
        "KL-103",
        "KL-100"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-105",
      "prerequisites": [
        "KL-105.matched-reprofile"
      ],
      "kind": "task-implementation"
    },
    {
      "id": "KL-105.capture",
      "prerequisites": [
        "KL-006",
        "KL-050",
        "KL-057",
        "KL-071",
        "KL-072"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Representative final comparison-cohort baseline capture; 050/057/071/072 apply to that complete workload scope only, never all bounded runtime-symptom diagnosis."
    },
    {
      "id": "KL-105.final-acceptance",
      "prerequisites": [
        "KL-105.matched-reprofile",
        "KL-074",
        "KL-075",
        "KL-101"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "All current PROFILE105 AC including retained captures, quality/loss/overhead/source identities, correctness and original clean Linux comparative artifacts; never depends on an already released KL080."
    },
    {
      "id": "KL-105.matched-reprofile",
      "prerequisites": [
        "KL-105.capture",
        "KL-077"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Matched original before/after actual process profiles after correctness checks; clean comparative artifacts and final acceptance remain separate."
    },
    {
      "id": "KL-105.runtime-symptom-diagnosis",
      "prerequisites": [
        "KL-001",
        "KL-002"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Optional bounded actual-process diagnosis of a concrete active runtime symptom; does not start broad optimization/benchmark campaigns or satisfy KL105 acceptance."
    },
    {
      "id": "KL-008.silo-local-owner",
      "prerequisites": [
        "KL-001",
        "KL-002",
        "KL-003",
        "KL-004",
        "KL-007"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Silo-local storage Grain Service owns the one original async ZoneTree open/publication/late joined close; constructors do not borrow unpublished storage."
    },
    {
      "id": "FOUNDATION.usable-core",
      "prerequisites": [
        "KL-014",
        "KL-020",
        "KL-021",
        "KL-015",
        "KL-052",
        "KL-053.connection-owner",
        "KL-061",
        "KL-064",
        "KL-066.local-epochs",
        "KL-043.current-format"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Actual test-owned three-voter Aspire: persisted bootstrap identity, SDK write, official MCP read, identical-command replay, fresh revoke/refuse/repair, cancellation/healthy continuation, joined same-root cold restart and exact receipt/state."
    },
    {
      "id": "KL-046.minimum-tsql",
      "prerequisites": [
        "KL-045.capability-identity",
        "FOUNDATION.usable-core"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Versioned currently supported T-SQL SELECT/EXEC semantics only, explicit unsupported diagnostics and same canonical authorization/atomicity contract; not a full-language claim."
    },
    {
      "id": "KL-047.minimum-scriptdom",
      "prerequisites": [
        "KL-001",
        "KL-046.minimum-tsql"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "Actual pinned Microsoft ScriptDOM parses and lowers the supported minimum profile without handwritten fallback; malformed/unsupported syntax is bounded and rejected before effects."
    },
    {
      "id": "KL-051.minimum-parity",
      "prerequisites": [
        "KL-047.minimum-scriptdom",
        "KL-064",
        "KL-053.connection-owner"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "SDK, official MCP and minimum T-SQL profile return independently expected same authorized values, receipts, replays and errors."
    },
    {
      "id": "FOUNDATION.usable-database",
      "prerequisites": [
        "FOUNDATION.usable-core",
        "KL-051.minimum-parity",
        "KL-015"
      ],
      "kind": "bounded-task-milestone-or-integrated-gate",
      "scope": "First usable database: three real silo-local ZoneTree owners, native membership/directory, SDK/MCP/minimum T-SQL, telemetry export/privacy, recovery and joined shutdown. Broad models/audits/benchmarks do not block this milestone."
    }
  ],
  "verification": {
    "uniqueTasks": 105,
    "nodes": 133,
    "edges": 433,
    "missingReferences": [],
    "cycles": [],
    "topologicalLayers": [
      [
        "KL-001"
      ],
      [
        "KL-002",
        "KL-006"
      ],
      [
        "KL-003",
        "KL-004",
        "KL-007",
        "KL-015",
        "KL-045.capability-identity",
        "KL-069",
        "KL-073",
        "KL-077.normal-simd",
        "KL-105.runtime-symptom-diagnosis"
      ],
      [
        "KL-005",
        "KL-008",
        "KL-008.silo-local-owner",
        "KL-018.stable-host-identity",
        "KL-036.owner-fence-contract",
        "KL-043.current-format",
        "KL-052.core-bounds",
        "KL-061",
        "KL-061.bootstrap-identity"
      ],
      [
        "KL-009",
        "KL-014.host-composition",
        "KL-062"
      ],
      [
        "KL-010",
        "KL-010.minimum-command",
        "KL-019.native-membership",
        "KL-050.bounded-output",
        "KL-052",
        "KL-053.connection-owner",
        "KL-063.basic-field-authority"
      ],
      [
        "KL-011",
        "KL-012.minimum-stable-id",
        "KL-017",
        "KL-064",
        "KL-065.document-acl"
      ],
      [
        "KL-012",
        "KL-020",
        "KL-066.local-epochs"
      ],
      [
        "KL-016",
        "KL-018",
        "KL-035",
        "KL-040",
        "KL-090.target-inbox-contract"
      ],
      [
        "KL-019",
        "KL-042",
        "KL-043"
      ],
      [
        "KL-014",
        "KL-021",
        "KL-036"
      ],
      [
        "FOUNDATION.usable-core",
        "KL-053",
        "KL-066",
        "KL-070"
      ],
      [
        "KL-046.minimum-tsql",
        "KL-071",
        "KL-076"
      ],
      [
        "KL-047.minimum-scriptdom"
      ],
      [
        "KL-051.minimum-parity"
      ],
      [
        "FOUNDATION.usable-database"
      ],
      [
        "FOUNDATION.operation-gate"
      ],
      [
        "KL-013",
        "KL-022",
        "KL-024",
        "KL-027",
        "KL-028",
        "KL-045"
      ],
      [
        "KL-023",
        "KL-025",
        "KL-029",
        "KL-030",
        "KL-038",
        "KL-046",
        "KL-079",
        "KL-081"
      ],
      [
        "KL-026",
        "KL-031",
        "KL-047",
        "KL-055",
        "KL-058",
        "KL-059",
        "KL-065",
        "KL-082",
        "KL-096"
      ],
      [
        "KL-032",
        "KL-034",
        "KL-039",
        "KL-048",
        "KL-067",
        "KL-078",
        "KL-083",
        "KL-086"
      ],
      [
        "KL-033",
        "KL-041",
        "KL-049",
        "KL-060",
        "KL-063",
        "KL-068",
        "KL-072",
        "KL-084",
        "KL-087",
        "KL-091"
      ],
      [
        "KL-037",
        "KL-044",
        "KL-050",
        "KL-085",
        "KL-088",
        "KL-089",
        "KL-090"
      ],
      [
        "KL-051",
        "KL-056",
        "KL-092",
        "KL-094",
        "KL-097",
        "KL-098",
        "KL-099"
      ],
      [
        "KL-054",
        "KL-057",
        "KL-093",
        "KL-095",
        "KL-100",
        "KL-102"
      ],
      [
        "KL-103",
        "KL-105.capture"
      ],
      [
        "KL-077"
      ],
      [
        "KL-105.matched-reprofile"
      ],
      [
        "KL-074",
        "KL-075",
        "KL-101",
        "KL-105"
      ],
      [
        "KL-105.final-acceptance"
      ],
      [
        "KL-080"
      ],
      [
        "KL-104"
      ]
    ],
    "priorityBandTaskCoverage": 105,
    "originalDefinitionsPreserved": true,
    "taskMilestonePrerequisitesMirrored": true
  },
  "originalFormalGraph": {
    "requestedOriginalTasks": 104,
    "ownerAddedProfilingTask": "KL-105",
    "canonicalTaskCount": 105,
    "canonicalStatusCount": 105,
    "edges": 275,
    "duplicates": [],
    "missingTaskIds": [],
    "missingDependencyIds": [],
    "cycles": [],
    "statusCounts": {
      "in_progress": 85,
      "done": 20
    },
    "titleMismatches": [
      {
        "id": "KL-006",
        "architecture": "Benchmark harness і PostgreSQL methodology",
        "status": "Порівняльні бенчмарки та кластерна методологія"
      },
      {
        "id": "KL-043",
        "architecture": "Upgrade і format compatibility",
        "status": "Current-format recovery, backup and restore"
      },
      {
        "id": "KL-072",
        "architecture": "Token migration lineage",
        "status": "Current ownership tokens and scoped outcomes"
      },
      {
        "id": "KL-105",
        "architecture": "Профілювання .NET і виправлення виміряних вузьких місць",
        "status": ".NET profiling with dotnet-diagnostics-mcp and measured bottleneck repairs"
      }
    ],
    "doneWithOpenPrerequisites": [
      {
        "id": "KL-005",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-003",
          "KL-004"
        ]
      },
      {
        "id": "KL-007",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-002"
        ]
      },
      {
        "id": "KL-008",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-003",
          "KL-004"
        ]
      },
      {
        "id": "KL-010",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-009"
        ]
      },
      {
        "id": "KL-012",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-009"
        ]
      },
      {
        "id": "KL-013",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-004"
        ]
      },
      {
        "id": "KL-020",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-009",
          "KL-017",
          "KL-019"
        ]
      },
      {
        "id": "KL-029",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-028"
        ]
      },
      {
        "id": "KL-033",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-032"
        ]
      },
      {
        "id": "KL-034",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-021",
          "KL-031"
        ]
      },
      {
        "id": "KL-065",
        "historicalStatus": "done",
        "openDirectDependencies": [
          "KL-061"
        ]
      }
    ],
    "doneInterpretation": "20done remain historical unchanged; 11open-prereq relationships do not automatically reopen or requalify any task."
  },
  "preservedWork": "Prepared model, benchmark, profiling and audit contributions are retained; no unqualified implementation packet counts as acceptance. No original required task is omitted.",
  "qualificationGates": {
    "foundation": "Actual Aspire Docker RF3 native storage Grain Services/membership/directory/audited placement; current authorization/connection/admission/OTel; original SDK+official MCP writes, receipt/session reads, replay, failover/minority/recovery and joined shutdown.",
    "model": "Focused whole-operation positive/denied/error/replay/recovery checks per supported capability; full SQL+native client conformance and cross-model composition remain mandatory.",
    "final": "Full unit/recovery/RF3/security/fault/endurance/coverage/resource/restore/license/provenance gates, actual matched profiling and Linux comparative workloads, then release manifests/runbooks.",
    "performanceOrder": [
      "KL-105.capture",
      "KL-077",
      "KL-105.matched-reprofile",
      "KL-074/KL-075/KL-101",
      "KL-105.final-acceptance",
      "KL-080",
      "KL-104"
    ],
    "firstUsable": "FOUNDATION.usable-core then minimum ScriptDOM parity then FOUNDATION.usable-database: exact actual three-voter Aspire SDK/MCP/T-SQL/replay/revoke/cancel/cold/OTel flow; no broad model or benchmark prerequisite."
  },
  "priorityBands": {
    "F0": [
      "KL-001",
      "KL-002",
      "KL-015",
      "KL-069"
    ],
    "F1": [
      "KL-003",
      "KL-004",
      "KL-007",
      "KL-008",
      "KL-009",
      "KL-017",
      "KL-018",
      "KL-019",
      "KL-043"
    ],
    "F2": [
      "KL-005",
      "KL-010",
      "KL-011",
      "KL-012",
      "KL-014",
      "KL-016",
      "KL-020",
      "KL-021",
      "KL-035",
      "KL-040",
      "KL-052",
      "KL-053",
      "KL-061",
      "KL-062",
      "KL-063",
      "KL-064",
      "KL-065",
      "KL-066",
      "KL-076"
    ],
    "F3": [
      "KL-013",
      "KL-022",
      "KL-023",
      "KL-024",
      "KL-025",
      "KL-026",
      "KL-027",
      "KL-028",
      "KL-029",
      "KL-030",
      "KL-031",
      "KL-032",
      "KL-033",
      "KL-034",
      "KL-045",
      "KL-046",
      "KL-047",
      "KL-048",
      "KL-049",
      "KL-050",
      "KL-051",
      "KL-054",
      "KL-055",
      "KL-056",
      "KL-058",
      "KL-059",
      "KL-060",
      "KL-067",
      "KL-078",
      "KL-079",
      "KL-081",
      "KL-082",
      "KL-083",
      "KL-084",
      "KL-085",
      "KL-086",
      "KL-087",
      "KL-088",
      "KL-089",
      "KL-090",
      "KL-091",
      "KL-092",
      "KL-093",
      "KL-095",
      "KL-096",
      "KL-098"
    ],
    "F4": [
      "KL-036",
      "KL-037",
      "KL-038",
      "KL-039",
      "KL-057",
      "KL-070",
      "KL-071",
      "KL-072",
      "KL-094",
      "KL-097",
      "KL-099",
      "KL-100"
    ],
    "F5": [
      "KL-041",
      "KL-042",
      "KL-068",
      "KL-102",
      "KL-103"
    ],
    "F6": [
      "KL-006",
      "KL-073",
      "KL-074",
      "KL-075",
      "KL-077",
      "KL-101",
      "KL-105"
    ],
    "F7": [
      "KL-044",
      "KL-080",
      "KL-104"
    ]
  },
  "nativeFoundation": {
    "decision": "docs/ADR/ADR-136-native-orleans-partition-ownership.md",
    "physicalOwner": "Silo-local Grain Service; same original PartitionHost open/publication/late close, immutable physical identity and native lifecycle joins.",
    "logicalOwner": "Stable partition grain routes to the actual current physical owner through typed Orleans calls; no file handles in migrating grains.",
    "placement": "PreferLocal is a soft initial preference. Audit native Immovable automatic opt-out and manual movement separately; keep repartitioner for eligible grains.",
    "reuse": [
      "native membership and failure detection",
      "distributed grain directory",
      "placement and eligible activation migration",
      "Grain Services and silo lifecycle",
      "native calls and response streams",
      "selected Orleans Streams provider",
      "activation timers and provider-backed reminders/jobs",
      "ZoneTree native WAL/snapshots/local transactions/maintainer/backup within their actual contracts"
    ],
    "transactions": "Native ITransactionalState/ITransactionalStateStorage only enlist participating state; actual canonical ZoneTree/RF3-backed provider and recovery qualification precede cross-grain database ACID claims. Not a first same-partition write blocker.",
    "maintenance": "Do not blindly replace a joined original worker with native fire-and-forget cleanup: pinned IMaintainer does not expose its periodic task join. Preserve known required ownership until native equivalence is proven.",
    "firstUsableMilestone": "FOUNDATION.usable-database",
    "acceptancePromotion": false
  }
}