{"adrs":[{"id":"ADR-001","title":"Diamond orphan branch rewrite instead of iterative refactor","file":"adr-001-diamond-orphan-branch.md","status":"accepted","date":"2026-04-13","cites":9,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["architecture","rewrite","diamond","orphan-branch"],"room":true},{"id":"ADR-002","title":"Forever v0.x -- no v1.0 target","file":"adr-002-forever-v0x.md","status":"accepted","date":"2026-04-13","cites":6,"supersedes":[],"superseded_by":[],"layers":[],"tags":["versioning","release-model","semver"],"room":true},{"id":"ADR-003","title":"12-gate crate admission protocol","file":"adr-003-12-gate-admission.md","status":"accepted","date":"2026-04-13","cites":20,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["process","quality","gates","admission"],"room":true},{"id":"ADR-004","title":"Context-window-sized crate architecture","file":"adr-004-context-window-sized-crates.md","status":"accepted","date":"2026-04-13","cites":13,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["architecture","sizing","crate-structure","context-window"],"room":true},{"id":"ADR-005","title":"Trait-based error hierarchy with NikaErrorCode and Box<dyn>","file":"adr-005-error-hierarchy.md","status":"accepted","date":"2026-04-13","cites":8,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["error-handling","traits","error-codes"],"room":true},{"id":"ADR-006","title":"Layered architecture with kernel ISP atomic traits and trait_variant","file":"adr-006-layered-kernel-isp-traits.md","status":"accepted","date":"2026-04-13","cites":25,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["architecture","kernel","traits","isp"],"room":true},{"id":"ADR-007","title":"Forward-compat invariants with non_exhaustive, new(), and pre-planted hooks","file":"adr-007-forward-compat-invariants.md","status":"accepted","date":"2026-04-13","cites":19,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["forward-compat","non-exhaustive","invariants","kernel-hooks"],"room":true},{"id":"ADR-008","title":"TOML-driven catalog with build-time codegen and perfect-hash lookup","file":"adr-008-toml-driven-catalog.md","status":"accepted","date":"2026-04-14","cites":3,"supersedes":[],"superseded_by":[],"layers":["L0","L4"],"tags":["catalog","toml","codegen","build-time"],"room":true},{"id":"ADR-009","title":"ADR process and hook discipline (meta)","file":"adr-009-adr-process.md","status":"accepted","date":"2026-04-14","cites":3,"supersedes":[],"superseded_by":[],"layers":[],"tags":["process","adr","documentation","meta"],"room":true},{"id":"ADR-010","title":"miette as the L4 diagnostic presentation layer","file":"adr-010-miette-diagnostic-layer.md","status":"accepted","date":"2026-04-14","cites":5,"supersedes":[],"superseded_by":[],"layers":["L0","L4"],"tags":["diagnostics","miette","error-rendering","l4"],"room":true},{"id":"ADR-011","title":"cargo xtask as canonical automation surface","file":"adr-011-cargo-xtask.md","status":"accepted","date":"2026-04-14","cites":4,"supersedes":[],"superseded_by":[],"layers":[],"tags":["tooling","xtask","automation","ci"],"room":true},{"id":"ADR-012","title":"Typestate for nika-runtime workflow lifecycle","file":"adr-012-typestate-runtime.md","status":"accepted","date":"2026-04-14","cites":6,"supersedes":[],"superseded_by":[],"layers":["L0.5","L2"],"tags":["typestate","runtime","workflow","lifecycle"],"room":true},{"id":"ADR-013","title":"Loom-based concurrency verification for L0.5 and L3","file":"adr-013-loom-concurrency-verification.md","status":"accepted","date":"2026-04-14","cites":3,"supersedes":[],"superseded_by":[],"layers":["L0.5","L3"],"tags":["testing","concurrency","loom","verification"],"room":true},{"id":"ADR-014","title":"Sealed kernel traits with explicit adapter registration","file":"adr-014-sealed-kernel-traits.md","status":"accepted","date":"2026-04-14","cites":14,"supersedes":[],"superseded_by":[],"layers":["L0.5"],"tags":["kernel","sealed-traits","api-stability"],"room":true},{"id":"ADR-015","title":"expect-test for inline snapshot assertions on rendered output","file":"adr-015-expect-test-inline-snapshots.md","status":"accepted","date":"2026-04-15","cites":5,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["testing","snapshots","expect-test","dx"],"room":true},{"id":"ADR-016","title":"Cancellation model: future-drop primary, CancelCtx cooperative module","file":"adr-016-cancellation-model.md","status":"accepted","date":"2026-04-16","cites":14,"supersedes":[],"superseded_by":[],"layers":["L0.5"],"tags":["kernel","async","cancellation","forward-compat"],"room":true},{"id":"ADR-017","title":"Streaming policy: bounded mpsc(32), ReceiverStream at kernel boundary","file":"adr-017-streaming-policy.md","status":"accepted","date":"2026-04-16","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0.5"],"tags":["kernel","async","streaming","backpressure"],"room":true},{"id":"ADR-018","title":"Runtime + sync primitives: single Tokio rt, parking_lot default","file":"adr-018-runtime-sync-primitives.md","status":"accepted","date":"2026-04-16","cites":6,"supersedes":[],"superseded_by":[],"layers":["L0.5","L1","L2","L3"],"tags":["runtime","tokio","parking-lot","concurrency"],"room":true},{"id":"ADR-019","title":"Retry + timeout ownership: stratified by layer","file":"adr-019-retry-timeout-ownership.md","status":"accepted","date":"2026-04-16","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0.5","L1","L2"],"tags":["retry","timeout","reliability","layer-discipline"],"room":true},{"id":"ADR-020","title":"WASM plugin boundary + Sandbox: trait stubs now, dual timeout later","file":"adr-020-wasm-plugin-boundary.md","status":"accepted","date":"2026-04-16","cites":12,"supersedes":[],"superseded_by":[],"layers":["L0.5"],"tags":["wasm","plugin","sandbox","capability"],"room":true},{"id":"ADR-021","title":"YAML envelope convention: apiVersion + kind + metadata + spec, multi-doc, 9 doc kinds","file":"adr-021-yaml-envelope-convention.md","status":"superseded","date":"2026-04-16","cites":6,"supersedes":[],"superseded_by":["ADR-082"],"layers":["L0","L0.5"],"tags":["schema","yaml","envelope","k8s"],"room":true},{"id":"ADR-022","title":"Foundation crate layout v0.81: 14 crates, publish = false, 5 renames + extracts","file":"adr-022-foundation-crate-layout-v081.md","status":"accepted","date":"2026-04-16","cites":11,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L4"],"tags":["architecture","crates","layout","publish"],"room":true},{"id":"ADR-023","title":"File modularity discipline: 800 LOC warn / 1500 fail / 3000 fail-with-LOC-EXEMPT-allowlist","file":"adr-023-file-modularity-discipline.md","status":"accepted","date":"2026-04-16","cites":6,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["hygiene","file-loc","modularity","discipline"],"room":true},{"id":"ADR-024","title":"Adopt SOTA Rust patterns: bon Builder, Arc<str>, camino, sealed module, strum, public-api","file":"adr-024-sota-rust-patterns.md","status":"accepted","date":"2026-04-16","cites":5,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["rust-idioms","sota","bon","builder"],"room":true},{"id":"ADR-025","title":"Per-crate semver via release-plz (publishable crates only)","file":"adr-025-per-crate-semver-release-plz.md","status":"accepted","date":"2026-04-16","cites":3,"supersedes":[],"superseded_by":[],"layers":["L5"],"tags":["semver","release-plz","publish","versioning"],"room":true},{"id":"ADR-026","title":"workspace.toml single source of truth + auto-generated crate.md","file":"adr-026-workspace-toml-ssot.md","status":"accepted","date":"2026-04-16","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["hygiene","ssot","metadata","workspace"],"room":true},{"id":"ADR-027","title":"Strict L0 sublayer tiers + max 3 sibling deps + cargo timings per-crate budget","file":"adr-027-strict-l0-tiers-cargo-timings.md","status":"accepted","date":"2026-04-16","cites":6,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["architecture","tiers","cargo-timings","compile-budget"],"room":true},{"id":"ADR-028","title":"Forward-compat API-type reservation (amended — feature scheduling dropped)","file":"adr-028-forward-compat-reservation-policy.md","status":"accepted","date":"2026-04-16","cites":14,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["forward-compat","reservation","seams","yagni"],"room":true},{"id":"ADR-029","title":"EmbeddingSpec value-type reservation (Cortex seed)","file":"adr-029-embedding-spec-reservation.md","status":"accepted","date":"2026-04-17","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["l0","cortex","embedding","reservation"],"room":true},{"id":"ADR-030","title":"MemoryFrameRef.trust reservation (Shield gate seed)","file":"adr-030-memory-frame-trust.md","status":"accepted","date":"2026-04-17","cites":8,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["l0","cortex","shield","trust-level"],"room":true},{"id":"ADR-031","title":"RecallQuery.tenant reservation (multi-tenant keyspace seed)","file":"adr-031-recall-query-tenant-keyspace.md","status":"accepted","date":"2026-04-17","cites":6,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["l0","cortex","multi-tenant","tenant-id"],"room":true},{"id":"ADR-032","title":"WasmPluginError OutOfFuel + Trap + PluginCallContext reservation","file":"adr-032-wasm-plugin-context.md","status":"accepted","date":"2026-04-17","cites":7,"supersedes":[],"superseded_by":[],"layers":["L0.5"],"tags":["l0.5","wasm","plugin","fuel"],"room":true},{"id":"ADR-033","title":"L0 foundational types: Cost, UUIDv7, TrustLevel, TokenUsage evolution","file":"adr-033-l0-foundational-types.md","status":"accepted","date":"2026-04-16","cites":11,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5"],"tags":["l0","types","foundational","cost"],"room":true},{"id":"ADR-034","title":"L0.5 kernel traits expansion: 6 new traits scoped to v0.81+ additions","file":"adr-034-l05-kernel-traits-expansion.md","status":"accepted","date":"2026-04-16","cites":14,"supersedes":[],"superseded_by":[],"layers":["L0.5"],"tags":["l0.5","kernel","traits","isp"],"room":true},{"id":"ADR-035","title":"Telemetry seams: SpanGuard parent_span_id + SpanRef (OTel-ready)","file":"adr-035-telemetry-seams.md","status":"accepted","date":"2026-04-17","cites":5,"supersedes":[],"superseded_by":[],"layers":["L0.5"],"tags":["l0.5","telemetry","observability","otel"],"room":true},{"id":"ADR-036","title":"MSRV policy: rust-toolchain.toml SSOT + N-2 stable cadence (stub)","file":"adr-036-msrv-policy-stub.md","status":"proposed","date":"2026-04-17","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["msrv","toolchain","forward-compat","ci"],"room":false},{"id":"ADR-037","title":"Bottom-up diamond progression (no feature-milestone defer)","file":"adr-037-bottom-up-diamond-progression.md","status":"accepted","date":"2026-04-17","cites":6,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["philosophy","roadmap","admission","forever-v0x"],"room":true},{"id":"ADR-038","title":"Admit nika-bm25 as the first L1 memory satellite (CRAFT-from-scratch BM25 scorer)","file":"adr-038-nika-bm25-admission.md","status":"accepted","date":"2026-05-12","cites":10,"supersedes":[],"superseded_by":[],"layers":["L1"],"tags":["memory","L1","bm25","ir"],"room":true},{"id":"ADR-039","title":"Streaming MemoryRecall for lazy fusion · recall_stream()","file":"adr-039-streaming-memory-recall.md","status":"proposed","date":"2026-05-12","cites":10,"supersedes":[],"superseded_by":[],"layers":["L0.5","L1","L2"],"tags":["memory","trait-surface","streaming","zero-alloc"],"room":false},{"id":"ADR-040","title":"Cargo feature matrix for nika-memory · zero-cost modularity","file":"adr-040-memory-cargo-feature-matrix.md","status":"proposed","date":"2026-05-12","cites":15,"supersedes":[],"superseded_by":[],"layers":["L1","L2"],"tags":["memory","cargo-features","modularity","zero-cost"],"room":false},{"id":"ADR-041","title":"Type-state lifecycle for nika-memory orchestrator","file":"adr-041-type-state-memory-orchestrator.md","status":"proposed","date":"2026-05-12","cites":7,"supersedes":[],"superseded_by":[],"layers":["L2"],"tags":["memory","type-state","orchestrator","compile-time"],"room":false},{"id":"ADR-042","title":"Autodesc MINIMAL/FULL split · forcing-function moat at W4","file":"adr-042-autodesc-minimal-full-split.md","status":"proposed","date":"2026-05-12","cites":5,"supersedes":[],"superseded_by":[],"layers":["L1"],"tags":["memory","autodesc","moat","split"],"room":false},{"id":"ADR-078","title":"MemoryRecall &self satellite contract + &mut self orchestrator pool (Option D)","file":"adr-078-memoryrecall-self-shape.md","status":"proposed","date":"2026-05-12","cites":13,"supersedes":[],"superseded_by":[],"layers":["L0.5","L1","L2"],"tags":["kernel","memory","trait-shape","send-sync"],"room":false},{"id":"ADR-079","title":"Capabilities<E: EffectSet> phantom-type kernel · compile-time effect refusal (Option C hybrid)","file":"adr-079-capabilities-phantom-type.md","status":"proposed","date":"2026-05-12","cites":10,"supersedes":[],"superseded_by":[],"layers":["L0.5","L1","L2","L4"],"tags":["kernel","capabilities","type-state","phantom-type"],"room":false},{"id":"ADR-080","title":"MCP STDIO transport vulnerability-class sandbox canon · 5-layer mitigation (post phantom-CVE audit)","file":"adr-080-mcp-stdio-cve-sandbox.md","status":"proposed","date":"2026-05-12","cites":9,"supersedes":[],"superseded_by":[],"layers":["L0.5","L2","L3","L4"],"tags":["security","mcp","stdio","sandbox"],"room":false},{"id":"ADR-081","title":"L1 effect-crate guard contract · 7 security guards as forever crate-admission criteria","file":"adr-081-l1-effect-crate-guard-contract.md","status":"proposed","date":"2026-05-14","cites":10,"supersedes":[],"superseded_by":[],"layers":["L1"],"tags":["l1","security","computer-use","admission"],"room":false},{"id":"ADR-082","title":"Workflow envelope: single version marker `nika: v1` (supersedes K8s apiVersion form)","file":"adr-082-envelope-nika-v1-single-version-marker.md","status":"superseded","date":"2026-05-25","cites":9,"supersedes":["ADR-021"],"superseded_by":["ADR-113"],"layers":["L0","L0.5"],"tags":["schema","yaml","envelope","version-marker"],"room":true},{"id":"ADR-083","title":"L1 computer-use effect crates · cross-platform doctrine (macOS + Linux prio · Windows + all)","file":"adr-083-l1-computer-use-cross-platform-doctrine.md","status":"accepted","date":"2026-05-26","cites":4,"supersedes":[],"superseded_by":[],"layers":["L1"],"tags":["l1","computer-use","cross-platform","macos"],"room":true},{"id":"ADR-084","title":"nika-catalog builtin set · reconciliation to spec 26 (42→26 stdlib collapse + json_merge cut)","file":"adr-084-nika-catalog-spec-26-reconciliation.md","status":"accepted","date":"2026-05-27","cites":7,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["nika-catalog","nika-schema","builtins","stdlib"],"room":true},{"id":"ADR-085","title":"spec/workflow.schema.json invoke.tool oneOf · interim hand-derived bridge to engine schemars codegen","file":"adr-085-spec-schema-oneof-bridge-to-schemars-codegen.md","status":"accepted","date":"2026-05-27","cites":7,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["nika-schema","nika-catalog","spec","json-schema"],"room":true},{"id":"ADR-086","title":"builtin Rams sweep · nika:csv_to_json → nika:convert universal multi-format · less but better","file":"adr-086-builtin-rams-sweep-convert-universal-multi-format.md","status":"accepted","date":"2026-05-27","cites":7,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["nika-catalog","nika-schema","stdlib","builtins"],"room":true},{"id":"ADR-087","title":"nika:sleep + nika:wait_until → nika:wait · temporal-control Rams collapse","file":"adr-087-nika-wait-temporal-collapse.md","status":"accepted","date":"2026-05-27","cites":8,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["nika-catalog","nika-schema","stdlib","builtins"],"room":true},{"id":"ADR-088","title":"nika:cost + records + dag_info + threads → nika:inspect · introspection Rams collapse","file":"adr-088-nika-inspect-introspection-collapse.md","status":"accepted","date":"2026-05-27","cites":9,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["nika-catalog","nika-schema","stdlib","builtins"],"room":true},{"id":"ADR-089","title":"nika:json_diff jq-subsume feasibility · REJECTED · keep RFC-6902 Patch as canonical output format","file":"adr-089-json-diff-jq-subsume-rejected.md","status":"rejected","date":"2026-05-27","cites":5,"supersedes":[],"superseded_by":[],"layers":[],"tags":["nika-catalog","stdlib","builtins","rams"],"room":true},{"id":"ADR-090","title":"Structural doctrine enforcement — gates project the SSOT","file":"adr-090-structural-doctrine-enforcement.md","status":"accepted","date":"2026-06-10","cites":6,"supersedes":[],"superseded_by":[],"layers":["L0","L0.5","L1","L2","L3","L4","L5"],"tags":["process","quality","gates","security"],"room":true},{"id":"ADR-091","title":"Sovereign local inference · nika-infer-local · pure-Rust candle sidecar, OpenAI-compat reuse, no rig / no mistral.rs","file":"adr-091-nika-infer-local-candle-sidecar.md","status":"accepted","date":"2026-06-11","cites":6,"supersedes":[],"superseded_by":[],"layers":["L1.5"],"tags":["inference","local","sovereign","candle"],"room":true},{"id":"ADR-092","title":"Make nika check a verifier, not a linter — the static-analysis ladder on a unified flow IR","file":"adr-092-nika-check-program-analysis-ladder.md","status":"proposed","date":"2026-06-11","cites":5,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["nika-check","static-analysis","ifc","security"],"room":false},{"id":"ADR-093","title":"nika-infer-local HTTP server · tiny_http for the v1 sidecar endpoint","file":"adr-093-infer-local-http-server-tiny-http.md","status":"accepted","date":"2026-06-11","cites":5,"supersedes":[],"superseded_by":[],"layers":["L1.5"],"tags":["inference","local","sidecar","http"],"room":true},{"id":"ADR-094","title":"nika-pck · content-addressed sharing — identity decentralized, discovery a forkable index, trust in the artifact","file":"adr-094-nika-pck-registry-architecture.md","status":"accepted","date":"2026-06-11","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0","L1","L2","L4"],"tags":["pck","registry","packages","cas"],"room":true},{"id":"ADR-095","title":"exec verb security architecture · layered defense-in-depth (permits = declaration, 3 layers enforce)","file":"adr-095-exec-security-architecture.md","status":"accepted","date":"2026-06-12","cites":7,"supersedes":[],"superseded_by":[],"layers":["L0.5","L1","L2","L3"],"tags":["security","exec","injection","sandbox"],"room":true},{"id":"ADR-096","title":"The agent-loop intelligence layer — routing, stall guard, compose, telemetry","file":"adr-096-agent-loop-intelligence.md","status":"accepted","date":"2026-06-12","cites":3,"supersedes":[],"superseded_by":[],"layers":["L2","L0"],"tags":["nika-verb-agent","agent-loop","react","stall-guard"],"room":true},{"id":"ADR-097","title":"Parallel intra-turn tool dispatch — concurrent resolve, request-order fold","file":"adr-097-parallel-intra-turn-dispatch.md","status":"accepted","date":"2026-06-12","cites":1,"supersedes":[],"superseded_by":[],"layers":["L2"],"tags":["nika-verb-agent","agent-loop","parallel-function-calling","determinism"],"room":true},{"id":"ADR-098","title":"Underspecified schemas fall back to native JSON mode + local validation","file":"adr-098-underspecified-schema-json-mode-fallback.md","status":"proposed","date":"2026-07-05","cites":1,"supersedes":[],"superseded_by":[],"layers":["L1.5","L2"],"tags":["nika-verb-infer","nika-providers","structured-output","json-mode"],"room":false},{"id":"ADR-099","title":"Durable-lite run resume — the trace IS the checkpoint","file":"adr-099-durable-lite-run-resume.md","status":"accepted","date":"2026-07-05","cites":3,"supersedes":[],"superseded_by":[],"layers":["L2","L4"],"tags":["resume","durability","trace","cache-hit"],"room":true},{"id":"ADR-100","title":"Trace retention — bounded by default, never silently, never a pending gate","file":"adr-100-trace-retention.md","status":"accepted","date":"2026-07-05","cites":2,"supersedes":[],"superseded_by":[],"layers":["L2","L4"],"tags":["trace","retention","gc","resume"],"room":true},{"id":"ADR-105","title":"nika:image_generate — the Media builtin rides a dedicated image plane","file":"adr-105-image-generate-builtin.md","status":"accepted","date":"2026-07-05","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0","L1.5","L4"],"tags":["nika-builtin","media","image-generation","local"],"room":true},{"id":"ADR-106","title":"nika add — the registry client verb (resolve · verify · install)","file":"adr-106-nika-add-registry-client.md","status":"proposed","date":"2026-07-06","cites":3,"supersedes":[],"superseded_by":[],"layers":["L1","L4"],"tags":["nika-cli","registry","supply-chain","content-addressed"],"room":false},{"id":"ADR-107","title":"Admit nika-check-wasm — the static half of nika check, compiled to the browser","file":"adr-107-nika-check-wasm-admission.md","status":"accepted","date":"2026-07-28","cites":5,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["wasm","check","L4","conformance"],"room":true},{"id":"ADR-108","title":"Split the spec-15 proof primitives out of nika-runtime into nika-proof (L0)","file":"adr-108-nika-proof-split.md","status":"accepted","date":"2026-07-29","cites":3,"supersedes":[],"superseded_by":[],"layers":["L0","L3"],"tags":["proof","receipt","L0","crate-size"],"room":true},{"id":"ADR-109","title":"Publish the composition proof receipt — what this engine may claim on spec 14","file":"adr-109-composition-proof-receipt.md","status":"accepted","date":"2026-07-30","cites":2,"supersedes":[],"superseded_by":[],"layers":["L0","L3","L4"],"tags":["composition","receipt","proof","conformance"],"room":true},{"id":"ADR-110","title":"nika-cli size-cap member split: the host plane descends to nika-cli-host","file":"adr-110-nika-cli-host-member-split.md","status":"accepted","date":"2026-07-31","cites":4,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","crates","split","size-cap"],"room":true},{"id":"ADR-111","title":"Deliver the pause event outward — operator-configured CloudEvents webhook","file":"adr-111-outbound-pause-delivery.md","status":"accepted","date":"2026-08-06","cites":0,"supersedes":[],"superseded_by":[],"layers":["L0","L4"],"tags":["notify","pause","human-gate","webhook"],"room":true},{"id":"ADR-112","title":"Trace-as-dataset — OTel GenAI semconv now, input-capture before the SFT export","file":"adr-112-trace-as-dataset.md","status":"proposed","date":"2026-08-06","cites":0,"supersedes":[],"superseded_by":[],"layers":["L3","L4"],"tags":["trace","otel","semconv","dataset"],"room":false},{"id":"ADR-113","title":"The envelope's identity moves onto `nika:` — the version slot dies, losslessly","file":"adr-113-envelope-identity-on-nika.md","status":"accepted","date":"2026-08-13","cites":4,"supersedes":["ADR-082"],"superseded_by":[],"layers":["L0","L4"],"tags":["envelope","grammar","parser","flag-day"],"room":true},{"id":"ADR-114","title":"`nika-cadence` — the pure arming domain, at L0","file":"adr-114-nika-cadence-admission.md","status":"accepted","date":"2026-08-15","cites":2,"supersedes":[],"superseded_by":[],"layers":["L0","L4"],"tags":["crate-admission","cadence","arm","grammar"],"room":true},{"id":"ADR-115","title":"nika-check size-cap member split: the analysis substrate descends to nika-check-analyzer","file":"adr-115-nika-check-analyzer-member-split.md","status":"accepted","date":"2026-08-18","cites":4,"supersedes":[],"superseded_by":[],"layers":["L0"],"tags":["architecture","crates","split","size-cap"],"room":true},{"id":"ADR-116","title":"nika serve v0 was a local-only resident firer","file":"adr-116-nika-serve-resident-firer.md","status":"superseded","date":"2026-08-19","cites":2,"supersedes":[],"superseded_by":["ADR-117"],"layers":["L0","L4"],"tags":["architecture","cadence","arm","serve"],"room":true},{"id":"ADR-117","title":"admit nika serve network access behind explicit authority","file":"adr-117-nika-serve-network-boundary.md","status":"accepted","date":"2026-08-21","cites":2,"supersedes":["ADR-116"],"superseded_by":[],"layers":["L3","L4"],"tags":["architecture","serve","http","authentication"],"room":true},{"id":"ADR-118","title":"admit nika-arm as the shared ARM custody library","file":"adr-118-nika-arm-custody-library.md","status":"accepted","date":"2026-08-21","cites":1,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","crate-admission","arm","filesystem"],"room":true},{"id":"ADR-119","title":"make remote job admission durable before transport","file":"adr-119-durable-remote-job-state.md","status":"accepted","date":"2026-08-22","cites":1,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","serve","durability","idempotency"],"room":true},{"id":"ADR-120","title":"descend the shared service execution driver out of nika-runtime","file":"adr-120-service-execution-driver-split.md","status":"accepted","date":"2026-08-23","cites":0,"supersedes":[],"superseded_by":[],"layers":["L3","L4"],"tags":["architecture","runtime","execution","crate-size"],"room":true},{"id":"ADR-121","title":"nika-runtime size-cap member split: the run's dataflow descends to nika-dataflow","file":"adr-121-nika-dataflow-member-split.md","status":"accepted","date":"2026-08-25","cites":5,"supersedes":[],"superseded_by":[],"layers":["L0","L3"],"tags":["architecture","crates","split","size-cap"],"room":true},{"id":"ADR-122","title":"One access plan is the execution authority: resolved once, executed as resolved","file":"adr-122-execution-access-plan-authority.md","status":"accepted","date":"2026-09-03","cites":4,"supersedes":[],"superseded_by":[],"layers":["L1.5","L2","L3","L4"],"tags":["architecture","access","harness","providers"],"room":true},{"id":"ADR-123","title":"check answers four questions: VALID · ACCESS READY · CAPACITY FIT · RUN READY, and run refuses what check refuses","file":"adr-123-layered-check-verdicts.md","status":"accepted","date":"2026-09-03","cites":3,"supersedes":[],"superseded_by":[],"layers":["L0","L3","L4"],"tags":["architecture","check","access","capacity"],"room":true},{"id":"ADR-124","title":"one typed oracle facade: the CLI verb, the MCP tool and the session read the same audit","file":"adr-124-one-oracle-facade.md","status":"accepted","date":"2026-09-03","cites":4,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","oracle","mcp","check"],"room":true},{"id":"ADR-125","title":"the native session is a grounded host runtime over the installed engine, never a workflow","file":"adr-125-native-session-runtime.md","status":"accepted","date":"2026-09-03","cites":8,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","session","grounding","intelligence"],"room":true},{"id":"ADR-126","title":"project changes from the session: one typed change set, preview == apply, consent outside the model","file":"adr-126-project-changes-from-the-session.md","status":"accepted","date":"2026-09-03","cites":5,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","session","authoring","consent"],"room":true},{"id":"ADR-127","title":"nika-runtime size-cap member split: the run's laws descend to nika-runtime-laws","file":"adr-127-nika-runtime-laws-member-split.md","status":"accepted","date":"2026-09-03","cites":8,"supersedes":[],"superseded_by":[],"layers":["L3"],"tags":["architecture","crates","split","size-cap"],"room":true},{"id":"ADR-128","title":"The run's settlement is built once by the runtime and projected by every door","file":"adr-128-one-run-settlement.md","status":"accepted","date":"2026-09-04","cites":9,"supersedes":[],"superseded_by":[],"layers":["L0","L3","L4"],"tags":["architecture","runtime","events","one-door"],"room":true},{"id":"ADR-129","title":"Run state and evidence state are distinct: the writer's lease, the INCOMPLETE exit, the resident's interrupted","file":"adr-129-run-state-is-not-evidence-state.md","status":"accepted","date":"2026-09-04","cites":6,"supersedes":[],"superseded_by":[],"layers":["L3","L4"],"tags":["architecture","trace","evidence","one-door"],"room":true},{"id":"ADR-130","title":"One vocabulary, one owner: the task-record twin dies, the resident's status projects the settlement, copied spellings are pinned","file":"adr-130-one-vocabulary-one-owner.md","status":"accepted","date":"2026-09-04","cites":5,"supersedes":[],"superseded_by":[],"layers":["L2","L3","L4"],"tags":["architecture","events","one-door","vocabulary"],"room":true},{"id":"ADR-131","title":"The resident's job door is public: admission by served name, digests as optional integrity assertions, the engine as the one producer","file":"adr-131-the-residents-job-door-is-public.md","status":"accepted","date":"2026-09-04","cites":4,"supersedes":[],"superseded_by":[],"layers":["L2","L4"],"tags":["architecture","serve","one-door","snapshot"],"room":true},{"id":"ADR-132","title":"Identity, idempotency and protocol: what a duplicate human action yields, and the resident's writer stamp","file":"adr-132-identity-idempotency-protocol.md","status":"accepted","date":"2026-09-04","cites":7,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","one-door","idempotency","protocol"],"room":true},{"id":"ADR-133","title":"The session machine is portable: typed outcomes, proposal and gate identities, hosts that judge by identity","file":"adr-133-the-session-machine-is-portable.md","status":"accepted","date":"2026-09-04","cites":0,"supersedes":[],"superseded_by":[],"layers":["L4"],"tags":["architecture","session","one-door","idempotency"],"room":true},{"id":"ADR-134","title":"Trust is a rung, never a word: declared · discovered · observed on every access lane","file":"adr-134-trust-is-a-rung-never-a-word.md","status":"accepted","date":"2026-09-04","cites":0,"supersedes":[],"superseded_by":[],"layers":["L0","L2","L3","L4"],"tags":["architecture","access","trust","one-door"],"room":true},{"id":"ADR-135","title":"The public executable is born nika: one bin target with the public name, no packaging rename, no second executable","file":"adr-135-the-public-executable-is-born-nika.md","status":"accepted","date":"2026-09-04","cites":2,"supersedes":[],"superseded_by":[],"layers":["L4","L5"],"tags":["architecture","build","release","one-door"],"room":true}],"pin":{"release_tag":"v0.118.7","commit":"f3a31a6ee00766e4b010379c535bca994631d637"},"counts":{"accepted":79,"superseded":3,"proposed":13,"rejected":1}}

the decisions

Why the engine is built this way.

Every architectural choice in the engine is written down before it is built, kept in the repo beside the code it binds, and never quietly rewritten: a decision that stops holding is superseded by a named successor, and both stay. This is that record, read at the release pin, 96 decisions deep.

96decisionsat v0.118.7
79acceptedthe engine is built this way
91cite anotherthe record is a graph
3supersededreplaced, never deleted

accepted

79 decisions

the decision holds · the engine is built this way

ADR-001Diamond orphan branch rewrite instead of iterative refactor
2026-04-13 · L0 L0.5 L1 L2 L3 L4 L5 · cites 9 others
ADR-002Forever v0.x -- no v1.0 target
2026-04-13 · cites 6 others
ADR-00312-gate crate admission protocol
2026-04-13 · L0 L0.5 L1 L2 L3 L4 L5 · cites 20 others
ADR-004Context-window-sized crate architecture
2026-04-13 · L0 L0.5 L1 L2 L3 L4 L5 · cites 13 others
ADR-005Trait-based error hierarchy with NikaErrorCode and Box<dyn>
2026-04-13 · L0 · cites 8 others
ADR-006Layered architecture with kernel ISP atomic traits and trait_variant
2026-04-13 · L0 L0.5 L1 L2 L3 L4 L5 · cites 25 others
ADR-007Forward-compat invariants with non_exhaustive, new(), and pre-planted hooks
2026-04-13 · L0 L0.5 · cites 19 others
ADR-008TOML-driven catalog with build-time codegen and perfect-hash lookup
2026-04-14 · L0 L4 · cites 3 others
ADR-009ADR process and hook discipline (meta)
2026-04-14 · cites 3 others
ADR-010miette as the L4 diagnostic presentation layer
2026-04-14 · L0 L4 · cites 5 others
ADR-011cargo xtask as canonical automation surface
2026-04-14 · cites 4 others
ADR-012Typestate for nika-runtime workflow lifecycle
2026-04-14 · L0.5 L2 · cites 6 others
ADR-013Loom-based concurrency verification for L0.5 and L3
2026-04-14 · L0.5 L3 · cites 3 others
ADR-014Sealed kernel traits with explicit adapter registration
2026-04-14 · L0.5 · cites 14 others
ADR-015expect-test for inline snapshot assertions on rendered output
2026-04-15 · L0 · cites 5 others
ADR-016Cancellation model: future-drop primary, CancelCtx cooperative module
2026-04-16 · L0.5 · cites 14 others
ADR-017Streaming policy: bounded mpsc(32), ReceiverStream at kernel boundary
2026-04-16 · L0.5 · cites 4 others
ADR-018Runtime + sync primitives: single Tokio rt, parking_lot default
2026-04-16 · L0.5 L1 L2 L3 · cites 6 others
ADR-019Retry + timeout ownership: stratified by layer
2026-04-16 · L0.5 L1 L2 · cites 4 others
ADR-020WASM plugin boundary + Sandbox: trait stubs now, dual timeout later
2026-04-16 · L0.5 · cites 12 others
ADR-022Foundation crate layout v0.81: 14 crates, publish = false, 5 renames + extracts
2026-04-16 · L0 L0.5 L4 · cites 11 others
ADR-023File modularity discipline: 800 LOC warn / 1500 fail / 3000 fail-with-LOC-EXEMPT-allowlist
2026-04-16 · L0 L0.5 L1 L2 L3 L4 L5 · cites 6 others
ADR-024Adopt SOTA Rust patterns: bon Builder, Arc<str>, camino, sealed module, strum, public-api
2026-04-16 · L0 L0.5 · cites 5 others
ADR-025Per-crate semver via release-plz (publishable crates only)
2026-04-16 · L5 · cites 3 others
ADR-026workspace.toml single source of truth + auto-generated crate.md
2026-04-16 · L0 L0.5 L1 L2 L3 L4 L5 · cites 4 others
ADR-027Strict L0 sublayer tiers + max 3 sibling deps + cargo timings per-crate budget
2026-04-16 · L0 L0.5 · cites 6 others
ADR-028Forward-compat API-type reservation (amended — feature scheduling dropped)
2026-04-16 · L0 L0.5 · cites 14 others
ADR-029EmbeddingSpec value-type reservation (Cortex seed)
2026-04-17 · L0 L0.5 · cites 4 others
ADR-030MemoryFrameRef.trust reservation (Shield gate seed)
2026-04-17 · L0 L0.5 · cites 8 others
ADR-031RecallQuery.tenant reservation (multi-tenant keyspace seed)
2026-04-17 · L0 L0.5 · cites 6 others
ADR-032WasmPluginError OutOfFuel + Trap + PluginCallContext reservation
2026-04-17 · L0.5 · cites 7 others
ADR-033L0 foundational types: Cost, UUIDv7, TrustLevel, TokenUsage evolution
2026-04-16 · L0 L0.5 · cites 11 others
ADR-034L0.5 kernel traits expansion: 6 new traits scoped to v0.81+ additions
2026-04-16 · L0.5 · cites 14 others
ADR-035Telemetry seams: SpanGuard parent_span_id + SpanRef (OTel-ready)
2026-04-17 · L0.5 · cites 5 others
ADR-037Bottom-up diamond progression (no feature-milestone defer)
2026-04-17 · L0 L0.5 L1 L2 L3 L4 L5 · cites 6 others
ADR-038Admit nika-bm25 as the first L1 memory satellite (CRAFT-from-scratch BM25 scorer)
2026-05-12 · L1 · cites 10 others
ADR-083L1 computer-use effect crates · cross-platform doctrine (macOS + Linux prio · Windows + all)
2026-05-26 · L1 · cites 4 others
ADR-084nika-catalog builtin set · reconciliation to spec 26 (42→26 stdlib collapse + json_merge cut)
2026-05-27 · L0 · cites 7 others
ADR-085spec/workflow.schema.json invoke.tool oneOf · interim hand-derived bridge to engine schemars codegen
2026-05-27 · L0 · cites 7 others
ADR-086builtin Rams sweep · nika:csv_to_json → nika:convert universal multi-format · less but better
2026-05-27 · L0 · cites 7 others
ADR-087nika:sleep + nika:wait_until → nika:wait · temporal-control Rams collapse
2026-05-27 · L0 · cites 8 others
ADR-088nika:cost + records + dag_info + threads → nika:inspect · introspection Rams collapse
2026-05-27 · L0 · cites 9 others
ADR-090Structural doctrine enforcement — gates project the SSOT
2026-06-10 · L0 L0.5 L1 L2 L3 L4 L5 · cites 6 others
ADR-091Sovereign local inference · nika-infer-local · pure-Rust candle sidecar, OpenAI-compat reuse, no rig / no mistral.rs
2026-06-11 · L1.5 · cites 6 others
ADR-093nika-infer-local HTTP server · tiny_http for the v1 sidecar endpoint
2026-06-11 · L1.5 · cites 5 others
ADR-094nika-pck · content-addressed sharing — identity decentralized, discovery a forkable index, trust in the artifact
2026-06-11 · L0 L1 L2 L4 · cites 4 others
ADR-095exec verb security architecture · layered defense-in-depth (permits = declaration, 3 layers enforce)
2026-06-12 · L0.5 L1 L2 L3 · cites 7 others
ADR-096The agent-loop intelligence layer — routing, stall guard, compose, telemetry
2026-06-12 · L2 L0 · cites 3 others
ADR-097Parallel intra-turn tool dispatch — concurrent resolve, request-order fold
2026-06-12 · L2 · cites 1 other
ADR-099Durable-lite run resume — the trace IS the checkpoint
2026-07-05 · L2 L4 · cites 3 others
ADR-100Trace retention — bounded by default, never silently, never a pending gate
2026-07-05 · L2 L4 · cites 2 others
ADR-105nika:image_generate — the Media builtin rides a dedicated image plane
2026-07-05 · L0 L1.5 L4 · cites 4 others
ADR-107Admit nika-check-wasm — the static half of nika check, compiled to the browser
2026-07-28 · L4 · cites 5 others
ADR-108Split the spec-15 proof primitives out of nika-runtime into nika-proof (L0)
2026-07-29 · L0 L3 · cites 3 others
ADR-109Publish the composition proof receipt — what this engine may claim on spec 14
2026-07-30 · L0 L3 L4 · cites 2 others
ADR-110nika-cli size-cap member split: the host plane descends to nika-cli-host
2026-07-31 · L4 · cites 4 others
ADR-111Deliver the pause event outward — operator-configured CloudEvents webhook
2026-08-06 · L0 L4
ADR-113The envelope's identity moves onto `nika:` — the version slot dies, losslessly
2026-08-13 · L0 L4 · cites 4 others · supersedes ADR-082
ADR-114`nika-cadence` — the pure arming domain, at L0
2026-08-15 · L0 L4 · cites 2 others
ADR-115nika-check size-cap member split: the analysis substrate descends to nika-check-analyzer
2026-08-18 · L0 · cites 4 others
ADR-117admit nika serve network access behind explicit authority
2026-08-21 · L3 L4 · cites 2 others · supersedes ADR-116
ADR-118admit nika-arm as the shared ARM custody library
2026-08-21 · L4 · cites 1 other
ADR-119make remote job admission durable before transport
2026-08-22 · L4 · cites 1 other
ADR-120descend the shared service execution driver out of nika-runtime
2026-08-23 · L3 L4
ADR-121nika-runtime size-cap member split: the run's dataflow descends to nika-dataflow
2026-08-25 · L0 L3 · cites 5 others
ADR-122One access plan is the execution authority: resolved once, executed as resolved
2026-09-03 · L1.5 L2 L3 L4 · cites 4 others
ADR-123check answers four questions: VALID · ACCESS READY · CAPACITY FIT · RUN READY, and run refuses what check refuses
2026-09-03 · L0 L3 L4 · cites 3 others
ADR-124one typed oracle facade: the CLI verb, the MCP tool and the session read the same audit
2026-09-03 · L4 · cites 4 others
ADR-125the native session is a grounded host runtime over the installed engine, never a workflow
2026-09-03 · L4 · cites 8 others
ADR-126project changes from the session: one typed change set, preview == apply, consent outside the model
2026-09-03 · L4 · cites 5 others
ADR-127nika-runtime size-cap member split: the run's laws descend to nika-runtime-laws
2026-09-03 · L3 · cites 8 others
ADR-128The run's settlement is built once by the runtime and projected by every door
2026-09-04 · L0 L3 L4 · cites 9 others
ADR-129Run state and evidence state are distinct: the writer's lease, the INCOMPLETE exit, the resident's interrupted
2026-09-04 · L3 L4 · cites 6 others
ADR-130One vocabulary, one owner: the task-record twin dies, the resident's status projects the settlement, copied spellings are pinned
2026-09-04 · L2 L3 L4 · cites 5 others
ADR-131The resident's job door is public: admission by served name, digests as optional integrity assertions, the engine as the one producer
2026-09-04 · L2 L4 · cites 4 others
ADR-132Identity, idempotency and protocol: what a duplicate human action yields, and the resident's writer stamp
2026-09-04 · L4 · cites 7 others
ADR-133The session machine is portable: typed outcomes, proposal and gate identities, hosts that judge by identity
2026-09-04 · L4
ADR-134Trust is a rung, never a word: declared · discovered · observed on every access lane
2026-09-04 · L0 L2 L3 L4
ADR-135The public executable is born nika: one bin target with the public name, no packaging rename, no second executable
2026-09-04 · L4 L5 · cites 2 others

proposed

13 decisions

written, not settled · cite it as a proposal, never as canon

ADR-036MSRV policy: rust-toolchain.toml SSOT + N-2 stable cadence (stub)
2026-04-17 · L0 L0.5 L1 L2 L3 L4 L5 · cites 4 others
ADR-039Streaming MemoryRecall for lazy fusion · recall_stream()
2026-05-12 · L0.5 L1 L2 · cites 10 others
ADR-040Cargo feature matrix for nika-memory · zero-cost modularity
2026-05-12 · L1 L2 · cites 15 others
ADR-041Type-state lifecycle for nika-memory orchestrator
2026-05-12 · L2 · cites 7 others
ADR-042Autodesc MINIMAL/FULL split · forcing-function moat at W4
2026-05-12 · L1 · cites 5 others
ADR-078MemoryRecall &self satellite contract + &mut self orchestrator pool (Option D)
2026-05-12 · L0.5 L1 L2 · cites 13 others
ADR-079Capabilities<E: EffectSet> phantom-type kernel · compile-time effect refusal (Option C hybrid)
2026-05-12 · L0.5 L1 L2 L4 · cites 10 others
ADR-080MCP STDIO transport vulnerability-class sandbox canon · 5-layer mitigation (post phantom-CVE audit)
2026-05-12 · L0.5 L2 L3 L4 · cites 9 others
ADR-081L1 effect-crate guard contract · 7 security guards as forever crate-admission criteria
2026-05-14 · L1 · cites 10 others
ADR-092Make nika check a verifier, not a linter — the static-analysis ladder on a unified flow IR
2026-06-11 · L0 · cites 5 others
ADR-098Underspecified schemas fall back to native JSON mode + local validation
2026-07-05 · L1.5 L2 · cites 1 other
ADR-106nika add — the registry client verb (resolve · verify · install)
2026-07-06 · L1 L4 · cites 3 others
ADR-112Trace-as-dataset — OTel GenAI semconv now, input-capture before the SFT export
2026-08-06 · L3 L4

superseded

3 decisions

another decision replaced it · the chain is named on the row

ADR-021YAML envelope convention: apiVersion + kind + metadata + spec, multi-doc, 9 doc kinds
2026-04-16 · L0 L0.5 · cites 6 others · superseded by ADR-082
ADR-082Workflow envelope: single version marker `nika: v1` (supersedes K8s apiVersion form)
2026-05-25 · L0 L0.5 · cites 9 others · superseded by ADR-113 · supersedes ADR-021
ADR-116nika serve v0 was a local-only resident firer
2026-08-19 · L0 L4 · cites 2 others · superseded by ADR-117

rejected

1 decision

considered and refused · the record keeps the reason

ADR-089nika:json_diff jq-subsume feasibility · REJECTED · keep RFC-6902 Patch as canonical output format
2026-05-27 · cites 5 others

read them whole

The bodies live in the engine repo

The 13 proposals above have no room of their own on purpose: a proposal published as an indexed page invites citation as though it were settled. They live in the repo until they are decided. The machine surfaces are served beside this one: index.json carries every cross-reference edge, verbatim at the pin, and bodies.json carries the settled decisions whole, lexed at the pin with each one's sha256 beside it.

The decision record, in the repo Where every piece lives What shipped, and when