Reference status

The compile-tested sandbox control contract describes the public surface. The contract declares principal-scoped idempotent Operations, immutable Effective Specs, typed process results, bounded output replay, finite limits, and safe image-admission metadata.

The local developer adapter is explicitly constructed through NewLocalUnsafeClient with the literal local-unsafe acknowledgement. It does not execute commands or read ambient process state. It only accepts a caller-provided convenience environment after removing credential, proxy, and SSH-agent variables, advertises all security authority profiles as unavailable, and refuses secrets, mounts, volumes, and isolation requirements. It is never Firecracker, production, or hostile-tenant security evidence.

The deterministic FakeControlClient pairs a manually advanced FakeClock with scripted durable control states, typed failures, process results, and explicit observation gaps. It never executes commands, opens network connections, or touches a filesystem. Both developer adapters expose Client.Capabilities: a structured versioned profile with a digest derived from every profile fact. A create or restore Operation binds that digest, and a reconnect under a changed profile fails closed. These are unit/orchestration contracts, not a claim of process-restart durability or Firecracker isolation.

The deterministic in-memory fixture is unit/conformance evidence only; it does not claim process-restart durability, Firecracker enforcement, or tenant isolation.

The public Temporal payload reference. Its local converter compares complete wire representations before keeping normal, zstd, or immutable blob-reference payloads. The Temporal UI handler reuses that chain only for inspection; workers retain no remote-codec dependency. This is a library slice, not yet a deployed runtime role or production blob deployment.

The runtime provides a Temporal-free public Go contract and deterministic kernel. It defines typed IDs, immutable revision/session snapshots, idempotent bounded Input, serialized Turn state, explicit cancellation, and ordered cursor replay. The HTTP/OpenAPI transport is implemented, while the runtime role still uses its explicitly labelled in-memory test store. The declared Go SDK symbol index is generated from the documented public sdk/go declarations and methods; it records source shape, not additional runtime evidence. The declared PostgreSQL data-authority foundation now has reviewed bounded schema artifacts, a disposable PostgreSQL constraint proof, and a narrow internal first-admission repository seam. That seam is not wired to public routes, records an outbox without a publisher or recovery guarantee, and does not imply durable cursors or the Temporal adapter.

Generated files live only under website/src/content/docs/docs/reference/generated/. Curated pages explain semantics and ownership without duplicating unverified schemas.