Layering
Repository map
Required boundaries
- REST fields are the canonical public contract.
- MCP, CLI, CI, and console surfaces adapt shared services.
- All tenant data access filters by
team_idthrough repositories. - Services own commit and rollback.
- Enums come from
app.db.models.enums. - Source adapters are registered code; configuration cannot supply executable imports.
- Signal publication requires linked evidence and an allowed verification state.