Separate protocol authority from mutable API contracts

Move API artifacts out of docs/spec, define concrete execution and deletion refinements, and document TLA+ abstraction boundaries so architecture prose cannot become a competing protocol specification.
This commit is contained in:
ms2k 2026-07-14 11:50:10 +09:00
commit dfd60cf104

View file

@ -3,6 +3,7 @@ EXTENDS Naturals, FiniteSets
\* This model covers the durable API operation ledger around an abstract
\* JobProtocol effect; JobProtocol remains the sole phase-transition model.
\* Identities range over one retention epoch; record expiry is outside the model.
CONSTANTS
OperationScopes, EligibilityClaims, OperationIds, MutationKinds,