Decisions

• Store the DAG in plain PostgreSQL tables, not a graph database
• Connect-RPC is the only door, with identity resolved by transport
• Artifacts are content-addressed: managed blobs plus external references
• Authorization by embedded OPA and Rego policy
• Align with A2A: a skift node maps to many A2A tasks, one per lease
• Provenance is not client-assertable, and the store never confers authority
• Core tech stack: Go, buf, sqlc, goose, pgx, Ginkgo
• Short enum names are the JSON wire form, through one derived codec
• The default gate policy is a notification channel, not a safety boundary
• Parking work is a hold on the graph, not a status and not orchestrator configuration