Browse the complete decision corpus by domain, authority edge and bounded neighborhood.

Authoritative relations

2 supersedes edges declared in ADR frontmatter

• KF-ADR-019f86da-4f90-71eb-b4c0-376ca7bc7ad3 supersedes KF-ADR-019f86da-4f90-7a55-9b15-93fcab44a33a
• KF-ADR-019f86da-4f90-7394-9953-5dbb467859fa supersedes KF-ADR-019f86da-4f90-730a-a068-06e8758324e1

548 inferred nearby edges are navigation aids only; they do not create architecture authority.

facts-storage · 42 records

Facts, storage, and replay

• KF · bf48 Observer-relative timeline projection over causal facts
  accepted partial legacy-unreviewed 0 qualification refs
• KF · d540 Xinfa baselines split into tracked witnesses and ignored local material
  accepted staged self-reviewed 2 qualification refs
• KF · 37de Runtime storage service as the persistence contract above journal, payloads, and projections
  accepted staged self-reviewed 5 qualification refs
• KF · 2132 schema-registry contract invariants are welded at compile time — tag uniqueness and payload layout↔version binding
  accepted implemented legacy-unreviewed 1 qualification refs
• KF · 6cc1 Storage backend changes are authority-atomic, resumable operations
  accepted staged self-reviewed 6 qualification refs
• KF · 8910 yijinjing journal frame/page publish protocol → `atomic_ref` release/acquire
  accepted implemented legacy-unreviewed 2 qualification refs
• KF · 141a location role replaces trading category and journal page size is storage policy
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 7ad3 authoritative structured facts have one schema owner — Hana POD or FlatBuffers
  accepted staged legacy-unreviewed 0 qualification refs
• KF · 2715 Episode Admission is destination-owned and transport-neutral
  accepted staged self-reviewed 4 qualification refs
• KF · e7a8 Episode bundles carry their owned bytes, and import materializes them
  accepted implemented self-reviewed 4 qualification refs
• KF · 5cae the Episode manifest is the object's trust boundary — POD journal records, one typed fold, and JSON at the edge
  accepted staged self-reviewed 5 qualification refs
• KF · 78d9 Episode identity is two layers — a local coordinate plus a sealed content root committed in the manifest
  proposed not-started legacy-unreviewed 0 qualification refs
• KF · d0df the journal container epoch is derived from its layout, and cross-epoch replay is offline conversion
  accepted staged legacy-unreviewed 0 qualification refs
• KF · 89ae The minimal generic `.kungfu` core closure — libkungfu owns generic maintenance/self-describing primitives; domain interpretation stays in outer rings; expose generic frame decode and frame checksum on the membrane
  accepted staged self-reviewed 0 qualification refs
• KF · cefb Episode is the atomic safety and fault-containment unit, qualified by evidence under load
  proposed not-started self-reviewed 0 qualification refs
• KF · 65b0d5 KFD-1 durability config requests policy; the runtime earns admission
  accepted implemented self-reviewed 5 qualification refs
• KF · 6692 Episode manifest records live in the yijinjing journal format
  accepted partial legacy-unreviewed 0 qualification refs
• KF · e16a frame identity layering — journal-local frame uid, ledger-global stream position
  accepted staged self-reviewed 1 qualification refs
• KF · dce4 Xinfa admits qualified sealed Episodes as sourced successor-Atlas evidence
  accepted implemented self-reviewed 4 qualification refs
• KF · b0f5 KF-ADR-019f86da-4f90-70c5-b572-89ec183b37de storage-service records are Hana-core kernel metadata; JSON is an edge projection, not the contract
  accepted implemented self-reviewed 3 qualification refs
• KF · 6327 Episode is the first-class causal segment object
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 780b Native work and Agent Console form one Episode-backed loop
  accepted staged self-reviewed 3 qualification refs
• KF · 759f the schema type registry has one authoritative set and trait-derived subsets
  accepted partial legacy-unreviewed 0 qualification refs
• KF · a33a yijinjing schema serialization — a FlatBuffers runtime schema over the zero-copy POD layout
  superseded not-applicable legacy-unreviewed 0 qualification refs
• KF · d450 frame checksum v2 uses CRC32C receipt metadata
  accepted partial legacy-unreviewed 0 qualification refs
• KF · b367 Fact Root v2 uses a closed typed binary preimage
  accepted implemented self-reviewed 13 qualification refs
• KF · 6424 Product diagnostics are one read-only projection over existing authorities
  accepted implemented self-reviewed 6 qualification refs
• KF · c03b Xinfa compiles bounded Human, Task Chart, and GUI projections from one Atlas
  accepted implemented self-reviewed 4 qualification refs
• KF · c732 Git Workspace stores qualified sealed Episodes as immutable per-Episode segments
  accepted implemented self-reviewed 1 qualification refs
• KF · d265 yijinjing schema layout is the v4 greenfield fact contract
  accepted partial legacy-unreviewed 0 qualification refs
• KF · ff1c Fact identity, versions, relations, Cuts, refs, CAS, and receipts form one backend-neutral kernel
  accepted staged self-reviewed 39 qualification refs
• KF · 41bf Agent action timeline and rewind/replay boundary
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 7ae8 Fact-Episode Ontology is distinct from Action Geometry
  accepted staged self-reviewed 4 qualification refs
• KF · 8654 hash taxonomy separates internal ids, frame checksums, and content hashes
  accepted partial legacy-unreviewed 0 qualification refs
• KF · eb04 Python yijinjing schema exposes only core public runtime types
  accepted partial legacy-unreviewed 0 qualification refs
• KF · bbb0d5 frame integrity starts at the C++ recorder and raw carrier_type allocation is gated
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 4104 runtime fact queries use explicit bases, one logical plan, and a proof-carrying changelog
  accepted staged legacy-unreviewed 0 qualification refs
• KF · dc01 Workspace-local `.kungfu` is the default fact ledger home
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 6aca tiered durability separates hot visibility, durable fact admission, projections, and replication
  accepted staged self-reviewed 0 qualification refs
• KF · 9194 journal lifecycle management belongs to Storage and Episode boundaries
  accepted staged maintainer-reviewed 0 qualification refs
• KF · cd72 retire journal Session and separate live state from schema projections
  accepted staged legacy-unreviewed 0 qualification refs
• KF · 861e Assignment orchestration state is fact-backed and portably sealed
  accepted staged self-reviewed 4 qualification refs

agent-control · 21 records

Agent and work control

• KF · 5fdf Project Cut settlement is agent-first and hook-optional
  accepted implemented self-reviewed 6 qualification refs
• KF · 21dc Mission and Go authority cuts over once at an exact parity root
  accepted staged self-reviewed 6 qualification refs
• KF · 40d8 Mission Control composes Mission and Go responsibility over runtime facts
  accepted staged self-reviewed 4 qualification refs
• KF · 13b1 Project Cut history uses explicit rooted bindings outside the Cut preimage
  accepted implemented self-reviewed 2 qualification refs
• KF · 0716 Completion review is independent, root-bound, and mechanically continuable
  accepted implemented self-reviewed 10 qualification refs
• KF · d2be Project Cut v1 uses a closed canonical root input and an explicit source projection
  accepted implemented self-reviewed 4 qualification refs
• KF · 03bf Kungfu Skill as the agent context layer above kfx
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 45f8 Agent-mediated guidance is a first-class product interface
  proposed not-started unreviewed 0 qualification refs
• KF · a623 Project Cut binds source, Xinfa Atlas, and Kungfu Episodes without becoming a fourth primitive
  accepted partial self-reviewed 0 qualification refs
• KF · 3917 Real-world agent work preserves four independently addressable roles
  accepted staged self-reviewed 25 qualification refs
• KF · 7173 Kungfu centers the product loop on Project Cut
  accepted partial self-reviewed 5 qualification refs
• KF · f302 KFD-2 assessments are claim-triggered jobs coordinated by the workspace coordinator
  accepted staged legacy-unreviewed 0 qualification refs
• KF · ad30 Project Cut composition binds concurrent publications without rewriting task Cuts
  accepted staged self-reviewed 4 qualification refs
• KF · 26ba A Git-settled shadow can open a workspace without becoming runtime authority
  accepted staged self-reviewed 4 qualification refs
• KF · 17b1 Agent-first KFX Profile Suites carry domain semantics over a domain-neutral Core
  accepted staged self-reviewed 0 qualification refs
• KF · faef one fenced AgentSessionCapsule owns each live agent PTY
  accepted partial self-reviewed 17 qualification refs
• KF · a45f Initiative and Assignment are the canonical L3 control-plane terms
  accepted staged self-reviewed 8 qualification refs
• KF · 9aa5 Assignment request capture is build-free, content-addressed, and pre-admission
  accepted staged self-reviewed 4 qualification refs
• KF · 928a Assignment claim separates Owner, Agent, Slot, and Lease
  accepted staged self-reviewed 3 qualification refs
• KF · e8cf Project Cut is the public Work loop facade
  accepted staged self-reviewed 12 qualification refs
• KF · 25a3 Workspace Federation and Assignment Graph preserve one authority per workspace
  accepted staged self-reviewed 7 qualification refs

xinfa-docs · 15 records

Xinfa and documentation

• KF · f164 Xinfa onboards unknown repositories through evidence, non-authoritative proposals, and an explicit authority transition
  accepted staged self-reviewed 6 qualification refs
• KF · 3c88 Xinfa context quality is a deterministic adversarial ratchet
  accepted staged self-reviewed 4 qualification refs
• KF · cc70 Automatic go context uses project-declared structured route resolution
  accepted staged self-reviewed 4 qualification refs
• KF · ba57 Xinfa compiles one hash-pinned WebAssembly engine for development execution and receipt verification while the native trunk alone mints production receipts
  accepted staged self-reviewed 2 qualification refs
• KF · 5a56 Xinfa joins the canonical Rust workspace without surrendering extraction or product identity
  accepted staged self-reviewed 7 qualification refs
• KF · 0059 Xinfa is an independently governed Rust component linked into the Kungfu trunk
  accepted staged self-reviewed 6 qualification refs
• KF · 3e2b Action Geometry and Domain Profiles are separate semantic layers
  accepted staged self-reviewed 10 qualification refs
• KF · 5fff Xinfa compiles portable repository context packs
  accepted implemented self-reviewed 2 qualification refs
• KF · 397f Xinfa Atlas is the immutable compiled context primitive
  accepted implemented self-reviewed 3 qualification refs
• KF · 75b5 Xinfa owns semantic project materialization
  accepted implemented self-reviewed 3 qualification refs
• KF · 3df8 Xinfa is a standalone context compiler product
  accepted partial self-reviewed 2 qualification refs
• KF · 7cf7 Xinfa compiles one verified context for humans and Agents
  accepted implemented self-reviewed 2 qualification refs
• KF · 116a Documentation directory authority
  accepted implemented maintainer-reviewed 3 qualification refs
• SHIFU · ed82 Documentation Protocol and provider boundary
  accepted implemented self-reviewed 2 qualification refs
• SHIFU · 51d6 Human surface closure and Xinfa impact authority
  accepted implemented self-reviewed 9 qualification refs

extensions-sdk · 15 records

Extensions, SDKs, and language boundaries

• KF · bc81 Core action-recording surface lives in the C++ polyglot membrane
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 8bcc KFX packages are immutable content; Core owns transactional lifecycle state
  accepted partial self-reviewed 0 qualification refs
• KF · ef05 Rust host trunk, layered CLI, and the assembled runtime distribution
  accepted staged self-reviewed 9 qualification refs
• KF · 8f82 native compilers share one C++ contract; modules remain qualification-only
  accepted staged self-reviewed 11 qualification refs
• KF · aa80 v4 frontend = platform (capability SDK + loose kfx contract) + minimal reference app
  accepted partial legacy-unreviewed 0 qualification refs
• KF · d390 One Action MJS package runs in source Node and installed libnode hosts
  accepted staged self-reviewed 6 qualification refs
• KF · 8708 capability ownership follows Core, System KFX, and Profile KFX boundaries
  accepted implemented self-reviewed 5 qualification refs
• KF · 2847 extension isolation and the trusted channel on the runtime plane
  proposed not-started legacy-unreviewed 0 qualification refs
• KF · 053d control axis — the Python coroutine integration layer (continue / redesign / drop)
  withdrawn not-applicable self-reviewed 0 qualification refs
• KF · 3f06 CLI implementation split — Rust trunk vs Python, and growing the embedding membrane's diagnostic surface
  accepted partial self-reviewed 15 qualification refs
• KF · 16be dual-host kfx loading — a host-agnostic load plan and the background service facet on the OS-sandbox plane
  proposed not-started legacy-unreviewed 0 qualification refs
• KF · 31c6 KFX execution profiles — Rust-primary native, WebAssembly components, managed runtimes, and subprocesses
  accepted implemented maintainer-reviewed 1 qualification refs
• KF · e8ab KFX admission consumes KFD facts and exact Buildchain attestations
  accepted partial self-reviewed 5 qualification refs
• KF · 6704 control axis — the Node watcher snapshot model
  withdrawn not-applicable self-reviewed 0 qualification refs
• KF · b500 Layered APIs share one C ABI waist and each identity protocol owns its canonical bytes
  accepted staged self-reviewed 13 qualification refs

runtime · 18 records

Runtime, live services, and lifecycle

• KF · 8ad0 Kungfu is the only public Action Primitive CLI entrypoint
  accepted staged self-reviewed 13 qualification refs
• KF · 5950 libwasm is a governed product runtime, not a copied spike library
  accepted partial maintainer-reviewed 0 qualification refs
• KF · 7d8b runtime libraries propagate structured errors; loop owners decide how execution stops
  proposed not-started legacy-unreviewed 0 qualification refs
• KF · 00e0 peer communication primitives — layering and domain-neutral channel/outlet naming
  accepted partial maintainer-reviewed 1 qualification refs
• KF · a5fb agent coordination on the live runtime — same-host locks, signals, and audited Episodes
  accepted partial maintainer-reviewed 0 qualification refs
• KF · 69ff a first-class content-addressed store is a runtime fact-ledger primitive, with mutable KV and fleet topology kept as separate capabilities
  accepted implemented self-reviewed 4 qualification refs
• KF · 59fa live runtime internals use reactor, peer, and coordinator
  accepted staged maintainer-reviewed 0 qualification refs
• KF · 86d0 Canonical ADR authority and lifecycle audit
  accepted implemented maintainer-reviewed 3 qualification refs
• KF · 15cf runtime exposes a greenfield core surface, not trading typed helpers
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 08a7 product upgrades install immutable runtimes before Core activates them
  accepted staged self-reviewed 17 qualification refs
• KF · 231b Event routes carry declared phase and state access
  accepted implemented self-reviewed 2 qualification refs
• KF · 63a8 Live peers reconnect through fenced coordinator authority
  accepted implemented self-reviewed 10 qualification refs
• KF · eb1c Action Loop coordination is receipt-driven and recoverable
  accepted staged self-reviewed 12 qualification refs
• KF · 3d6c live runtime activation is capability-driven and topology-neutral
  accepted implemented self-reviewed 4 qualification refs
• KF · a63f carrier type is transport metadata and business semantics live in action envelopes
  accepted partial legacy-unreviewed 0 qualification refs
• KF · cab6 Unified recovery is a fenced orchestrator over existing authorities
  accepted partial self-reviewed 5 qualification refs
• KF · c416 Stdlib pruning policy for the assembled runtime
  accepted partial legacy-unreviewed 0 qualification refs
• KF · e61c Core Cut is domain-neutral and Work lifecycle shares one native waist
  accepted implemented self-reviewed 21 qualification refs

build-release · 6 records

Build, distribution, and release

• KF · 87f2 Buildchain promotion is the settlement boundary for ADR implementation truth
  accepted implemented self-reviewed 4 qualification refs
• KF · e848 Kungfu UNGFU source signature and public-release evidence boundary
  accepted staged self-reviewed 15 qualification refs
• SHIFU · 7288 Cache profile contract and ownership
  accepted implemented self-reviewed 4 qualification refs
• SHIFU · 4453 Local artifact catalog and safe promotion
  accepted partial unreviewed 0 qualification refs
• SHIFU · 3b13 uv cache enforcement uses a disposable effective lock
  accepted implemented self-reviewed 3 qualification refs
• SHIFU · 4d50 Closed-world workflow and release admission
  accepted implemented self-reviewed 5 qualification refs

product-ui · 7 records

Product and user surfaces

• KF · 8c3a KFX contributes semantics once; GUI, TUI, CLI, and agents project them
  accepted partial self-reviewed 0 qualification refs
• KF · 24e1 Per-user supervisor manages per-data-root masters
  superseded not-applicable legacy-unreviewed 0 qualification refs
• KF · 341a v4 TUI = the platform's second reference surface (shell-native, zero-copy, React/Ink)
  accepted staged self-reviewed 3 qualification refs
• KF · 8dff every product layer is independently complete and the core remains domain-neutral
  accepted implemented legacy-unreviewed 19 qualification refs
• KF · 5d36 Desktop selects one explicit workspace and initializes its data home lazily
  proposed not-started unreviewed 0 qualification refs
• KF · e62e one Core-native KFX runtime serves GUI, TUI, CLI, and agents
  accepted partial self-reviewed 0 qualification refs
• KF · 1042 Docker-first Hub Starter is a product contract before it is an image
  accepted staged self-reviewed 5 qualification refs

architecture-governance · 32 records

Architecture and governance

• KF · d844 Exit Bundles compose domain roots, closure, loss, capabilities, and receipts without becoming another authority
  accepted staged self-reviewed 7 qualification refs
• KF · dbab generic source service v1
  accepted partial legacy-unreviewed 0 qualification refs
• KF · e338 Kungfu qualifies one KFD-3 collaboration protocol for conforming Profiles
  accepted implemented self-reviewed 4 qualification refs
• KF · cb76 Freeze workspace `.kungfu` home layout v1
  accepted staged self-reviewed 0 qualification refs
• KF · f481 managed session host placement — a shared durable host for multi-window session workspaces
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 9a0b adopt KFD-1 — welded-surface registers decide patch, minor, and major
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 905f location middle identity segment is namespace
  accepted partial legacy-unreviewed 0 qualification refs
• KF · abd2 The shifu delegation protocol — what installed binaries bake in forever
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 328c fast internal hashes use XXH3
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 1491 manifest-scoped sync root v1
  accepted partial legacy-unreviewed 0 qualification refs
• KF · e7d5 Git-like source sync over Kungfu location and channel
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 4470 Load-bearing self-bootstrap — the adoption path is the validation path
  accepted staged legacy-unreviewed 0 qualification refs
• KF · 3f9f C++23 + Rx is the core language strategy
  accepted implemented self-reviewed 6 qualification refs
• KF · acf9 the extension execution contract — a uniform capability surface across trust tiers
  accepted partial legacy-unreviewed 0 qualification refs
• KF · 5e00 Invariants use one authority-bound verification and release-passport system
  accepted implemented self-reviewed 4 qualification refs
• KF · bba2 KFD-7 v1 exposes cooperative cancellation and process-bounded deadlines honestly
  accepted staged self-reviewed 5 qualification refs
• KF · 10f4 yijinjing separates lock-free publication from cursor, write, and page-lifetime ownership
  proposed not-started legacy-unreviewed 0 qualification refs
• KF · d8bc a single kungfu view interface is the sole FlatBuffers access point; raw FB is not called elsewhere
  accepted partial legacy-unreviewed 0 qualification refs
• KF · e7c4 Codex App Server is a pinned structured-hybrid provider adapter
  accepted staged self-reviewed 8 qualification refs
• KF · 03eb KFD-7 fixes the reality-kernel boundary and one successor libkungfu ABI
  accepted implemented self-reviewed 8 qualification refs
• KF · fe03 KFD contract worlds govern fact admission, historical interpretation, and trust assessment
  accepted implemented self-reviewed 1 qualification refs
• KF · 86f1 v4 capability SDK contract — first cut
  accepted staged legacy-unreviewed 2 qualification refs
• KF · d412 control / event axis modernization — a meta-assessment
  accepted not-applicable self-reviewed 0 qualification refs
• KF · a35f yijinjing mmap behavior is expressed as explicit policies
  accepted implemented maintainer-reviewed 1 qualification refs
• KF · 7733 Domain Profile authoring is declarative, qualified, and Core-neutral
  accepted staged self-reviewed 5 qualification refs
• KF · a40c Incubation passports decide temporary anchors and destined authority
  accepted staged self-reviewed 10 qualification refs
• KF · 8aec Derive the Primitive Catalog from existing authorities
  accepted implemented self-reviewed 5 qualification refs
• KF · ec85 Separate Primitive definition, admission, and availability planes
  accepted implemented self-reviewed 5 qualification refs
• KF · 0429 Portable format authority is a composition contract
  accepted staged self-reviewed 34 qualification refs
• SHIFU · c58b Repository root discovery and jurisdiction
  accepted partial unreviewed 0 qualification refs
• SHIFU · f011 Gate control plane contract
  accepted implemented self-reviewed 11 qualification refs
• SHIFU · 7ace ADR identity is distributed UUIDv7 authority
  accepted implemented maintainer-reviewed 5 qualification refs