source register

{
  "id": "P09-S-001",
  "evidence_class": "observed",
  "source": "[local path redacted]",
  "observed": "2026-08-27",
  "kind": "local-decision-record",
  "claim": "SQLite-vs-Postgres is decided by donor-fork cost not writer concurrency ('the cost is the fork, not the database'); one Postgres server with separate schemas per donor chosen over shared-schema (migration coupling) and per-donor servers (ops burden); cross-schema joins explicitly traded away and answered by consuming donor events into owned tables; Convex rejected as hosted proprietary.",
  "limitations": "One product context (single brokerage, single VPS). Not a multi-tenant SaaS deployment; does not test tenant cardinality.",
  "disposition": "load-bearing"
}

{
  "id": "P09-S-002",
  "evidence_class": "observed",
  "source": "[local path redacted]",
  "observed": "2026-08-27",
  "kind": "local-decision-record",
  "claim": "Supersedes federation: absorb donors, copy code, repoint data layer at one Postgres, delete donor login. One app, one database, one schema with real foreign keys between brokerage records and document/table records. Explicitly kills Ed25519 launch tokens, external-ref mapping, Svix event projection and six identity adapters for absorbed donors. Names the honest cost: rewriting a data layer per donor (models, queries, migrations, background jobs, file handling).",
  "limitations": "Dated 2026-07-31, one day after the federation contract it supersedes; applies to donors whose code is owned, not to Plane (host) or infra (never fork).",
  "disposition": "load-bearing"
}

{
  "id": "P09-S-003",
  "evidence_class": "observed",
  "source": "[local path redacted]",
  "observed": "2026-08-27",
  "kind": "local-decision-record",
  "claim": "Concrete absorption seam questions for a Postgres-native donor: own schema vs merged, who owns migrations per table (one owner never two), auth seam for host-session injection, exact cut line. Observable success criteria include rows surviving a Postgres restart and donor and host tables visible in the same database.",
  "limitations": "Teable-specific and Postgres-native, i.e. the cheapest possible absorption; does not generalize to donors on other stores.",
  "disposition": "load-bearing"
}

{
  "id": "P09-S-004",
  "evidence_class": "observed",
  "source": "clients/actionmodel/research/packs/source-files/reusable-block-framework-report.md",
  "observed": "2026-08-27",
  "kind": "local-research-report",
  "claim": "Block dossier data vocabulary (mode none/read_only_external/owned_postgres/api_only, tables_owned/read/write, columns_sensitive, tenant_key, rls_policy, migrations, transaction_policy, idempotency, rollback) plus Postgres boundary primitives: schemas as namespaces with an unsafe-search_path warning, information_schema portability, privilege vs ownership distinction, RLS default-deny with no applicable policy, constraints at the boundary. Drizzle introspection proves a database-first path.",
  "limitations": "Design recommendation, not a production benchmark; the dossier is explicitly too monolithic for a composition interface (A13 rejected).",
  "disposition": "vocabulary-source"
}

{
  "id": "P09-S-005",
  "evidence_class": "observed",
  "source": "clients/actionmodel/architecture/feature-matrix/ARCHITECTURE.md",
  "observed": "2026-08-27",
  "kind": "local-architecture",
  "claim": "Assigns a platform DB view/schema adapter (introspect allow-listed schema, tenant-scoped views, generated clients never own or migrate platform tables) and a deny-by-default policy engine with no LLM-authored production policy. Generated applications receive a typed tenant-scoped resource interface, never arbitrary DB credentials or migration authority.",
  "limitations": "Inherited scoped-Postgres assumptions that CURRENT_STATE flags as needing testing; written for the scoped builder, not the mixed-donor host.",
  "disposition": "hypothesis-to-test"
}

{
  "id": "P09-S-006",
  "evidence_class": "observed",
  "source": "clients/actionmodel/knowledge/02-ASSUMPTION-LEDGER.md",
  "observed": "2026-08-27",
  "kind": "local-synthesis",
  "claim": "A08 Postgres-as-default-for-new-owned-transactional is inferred; A09 every-block-uses-Postgres rejected; A10 one-ORM-in-the-contract rejected; A11 one-owner-per-table-and-migration observed/principle; A12 events/read-models over shared-table mutation inferred.",
  "limitations": "Synthesis layer; exact counts must come from direct receipts, not this file.",
  "disposition": "governing"
}

{
  "id": "P09-S-007",
  "evidence_class": "observed",
  "source": "clients/actionmodel/research/lovable-teardown-2026-08-26.md",
  "observed": "2026-08-27",
  "kind": "local-research-report",
  "claim": "ML6 architectural critique: browser talks near-directly to Postgres via PostgREST with LLM-authored RLS policies, a known data-leak class, no dev/prod separation. Scoped case removes this because the platform owns schema and policies.",
  "limitations": "Secondary-sourced critique of a competitor; the security asymmetry claim is reasoning, not a tested result.",
  "disposition": "supporting"
}

{
  "id": "P09-S-008",
  "evidence_class": "observed",
  "source": "clients/actionmodel/knowledge/05-EXPERIMENT-ROADMAP.md",
  "observed": "2026-08-27",
  "kind": "local-synthesis",
  "claim": "Loop 2 defines the data-plane bake-off across owned Postgres via typed ports, donor-native service API, event-fed read model and SQLite/libSQL, measuring adaptation hours, expressiveness, tenancy clarity, migration ownership, rollback, testability, runtime burden and storage-logic leakage.",
  "limitations": "Designed, never run; this lane feeds it rather than executing it.",
  "disposition": "experiment-vehicle"
}

{
  "id": "P09-S-009",
  "evidence_class": "observed",
  "source": "[local path redacted]",
  "observed": "2026-08-27",
  "kind": "local-schema",
  "claim": "Assembly records require components with work_id, role, responsibilities, depends_on and evidence arrays, plus an operating_loop and capability_model; immutable versioned records with machine validation already exist locally.",
  "limitations": "Registry record discipline, not a data-plane contract; relevance is compatibility, not reuse.",
  "disposition": "compatibility-constraint"
}

{
  "id": "P09-S-010",
  "evidence_class": "observed",
  "source": "clients/actionmodel/research/workstreams/p09-data-plane/runs/2026-08-27-sprint-1-fable/top-companies.jsonl",
  "observed": "2026-08-27",
  "kind": "this-run-packet",
  "claim": "35 commercial surfaces surveyed, 10 top10. Five licence-badge traps quantified where the GitHub API would mislead an automated pipeline (Convex FSL, PowerSync FSL, Inngest SSPL, Redpanda BSL reported null, Elasticsearch triple-licence with document-level security inside ELv2-only x-pack).",
  "limitations": "Crunchy Data entirely unverified (rate limit); Elastic Cloud Serverless 404; Typesense Cloud pricing unfetched; NATS accounts-as-tenancy and Temporal namespace-to-tenant inferred not read.",
  "disposition": "this-run-evidence"
}

{
  "id": "P09-S-011",
  "evidence_class": "observed",
  "source": "clients/actionmodel/research/workstreams/p09-data-plane/runs/2026-08-27-sprint-1-fable/top-repos.jsonl",
  "observed": "2026-08-27",
  "kind": "this-run-packet",
  "claim": "41 OSS projects surveyed, 10 top10, 32 licence bodies actually read. Landmines: Citus AGPL-3.0, Liquibase FSL-1.1 (API says 'Other'), Redpanda licence null to the API, Meilisearch now MIT AND BUSL-1.1, MinIO AGPL and archived. Multi-tenancy frameworks for a TypeScript host: effectively none exist — tenant isolation is bespoke work Actionist must own.",
  "limitations": "Transitive dependency licences not verified for any repo; 9 rows badge-level only; host runtime language not yet fixed, which gates several register-tier choices.",
  "disposition": "this-run-evidence"
}