ข้ามไปยังเนื้อหา

Cephalon conformance matrix

เนื้อหานี้ยังไม่ได้แปลเป็นภาษาไทย แสดงเป็นภาษาอังกฤษแทน

This document is the per-package adoption-truth matrix for every shipped Cephalon.* package. Operators, platform teams, and AI agents can read this page to compare packages along the same dimensions without having to cross-reference the maturity audit, the component catalog, and the runtime contract index by hand.

Cross-references: engine-surface-maturity-audit.md, runtime-contract-index.md, components/README.md, architecture.md, architecture-review-2026-05.md, engineering-standards.md, compatibility.md, project-memory.md.

Each row describes one shipped Cephalon package along these dimensions:

  • Package — the published Cephalon.* package name
  • Family — the shipping family this package belongs to (12 families total, see below)
  • MaturityM0/M1/M2/M3/M4 per engine-surface-maturity-audit.md
  • Ownership modetaxonomy-only / application-managed / cephalon-managed / provider-managed (or a mixed combination)
  • Engine routes/engine/* HTTP routes the package contributes when active
  • Snapshot keyssnapshot.* keys the package contributes to RuntimeIntrospectionSnapshot
  • Catalog interfacesI*Catalog / I*RuntimeCatalog interfaces the package owns
  • Notes — one-line summary; “(audit pending)” flags rows where the maturity audit is currently silent or where component docs and audit doc disagree, while “(family-covered by maturity audit)” flags rows where the audit declares maturity through a consolidated family-level entry rather than per-package detail

Maturity recap (full definitions in the maturity audit):

  • M0 — taxonomy or descriptor surface only; no runtime claim
  • M1 — runtime catalog or descriptor truth wired in; no managed execution
  • M2 — narrow managed execution proof (single vertical slice or dispatch loop)
  • M3 — broader managed execution; multiple vertical paths working together
  • M4 — adoption-ready surface; consumers can rely on it across project shapes

Ownership recap:

  • taxonomy-only — surface exists as a name and shape, no behavior claim
  • application-managed — runtime ownership belongs to the consuming app
  • cephalon-managed — runtime ownership belongs to the engine itself
  • provider-managed — runtime ownership belongs to a specific provider companion pack

Family recap (12 families, in order below):

core-runtime, host-adapter, transport-adapter, behaviors, eventing, agentics, data-and-cdc, event-sourcing, multi-tenancy, audit-and-identity, edge, observability, scaffolding-and-tooling.

When this matrix conflicts with the maturity audit or a component doc, the audit is the authoritative truth for maturity and the component docs are the authoritative truth for ownership detail. This page is the consolidated read; it should not become a third source of truth.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.AbstractionsM4cephalon-managedmany (IModule, IAppBehavior, IBehaviorContext, IAgentToolDispatcher, IKnowledgeIndexCatalog, IEventPublicationDispatcher, ITenantResolver, …)host-agnostic contract layer; stable across every domain
Cephalon.EngineM4cephalon-managed/manifest, /snapshot, /app-model, /capabilities, /modules, /packages, /technologies, /patternsManifest, Status, OperationalStory, DiagnosticsConventions plus composition for every snapshot keyICellBoundaryCatalog, ICellRouteCatalog, ICellHealthIsolationCatalog, ICellTrafficAutomationRuntimeCatalog, ITechnologyRuntimeCatalog, IFeatureFlagRuntimeCatalogcomposition center, manifest, runtime introspection, policy evaluation

The core-runtime family is adoption-ready and stable. Priorities are compatibility hygiene, docs alignment, and absorbing new companion packs without core surgery.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.AspNetCoreM4cephalon-managedevery base /engine/* plus /health, /health/live, /health/ready; projects every optional /engine/* route when its companion is activeprojects every snapshot.* key over HTTPevery shipped catalog interface via projectionHTTP-first host adapter; the /engine/* projection layer
Cephalon.WorkerM4cephalon-managedgeneric-host worker without HTTP; split-configuration support

Both host adapters are adoption-ready. Web hosts go through Cephalon.AspNetCore; pure background or worker hosts go through Cephalon.Worker. Adapter responsibilities stay thin: the host adapter does not own runtime truth, only its projection.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.AspNetCore.GraphQLM2cephalon-managed— (hooks into Cephalon.AspNetCore)GraphQL transport route mapping companion
Cephalon.AspNetCore.JsonRpcM2cephalon-managed— (hooks into Cephalon.AspNetCore)JSON-RPC transport route mapping companion
Cephalon.AspNetCore.GrpcM2cephalon-managed— (hooks into Cephalon.AspNetCore)gRPC transport route mapping companion

Transport adapters are narrow execution proofs. REST is base in Cephalon.AspNetCore; GraphQL, JSON-RPC, and gRPC ship as optional alternative media types over the same route ownership.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.BehaviorsM4cephalon-managedExecutionGraphs, HostedExecutions, BehaviorResiliencePolicies, DurableExecutions, DurableExecutionStates, SagaChoreographies, SagaChoreographyPublicationStatesIBehaviorCatalog, IBehaviorRegistry, ISagaChoreographyRuntimeCatalog, ISagaChoreographyPublicationRuntimeStateCatalog, IBehaviorResilienceRuntimeCatalog, IDurableExecutionRuntimeCatalog, IDurableExecutionRuntimeStateCatalogadaptive behavior topology (ABT) dispatch, topology resolution, compatibility validation
Cephalon.Behaviors.HttpM2mixed: application-managed profile/publication activation + cephalon-managed materialization, governance, and runtime catalogs— (publishes through Cephalon.AspNetCore)REST profile metadata plus explicit module-owned public REST activation; Cephalon-managed materialization, governance, and runtime catalogs
Cephalon.Behaviors.MessagingM1application-managedmessaging transport bindings, descriptors only
Cephalon.Behaviors.PatternsM1application-managedpattern composition helpers (saga publisher contracts, durable execution helpers)
Cephalon.Behaviors.SourceGenM1cephalon-managedsource generator for behavior registration and topology helpers

The behaviors family is the engine’s core execution backbone. Cephalon.Behaviors is adoption-ready; HTTP and messaging companions own their narrower transport seams. Pattern and source-generator companions are catalog/utility surfaces.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.EventingM3mixed: application-managed + cephalon-managed/event-subscription-readiness, POST /engine/event-publications, /engine/event-publications/runtime*, /engine/event-dispatches/terminal-failuresEventDispatchRuntimes, EventDispatchStates, EventPublicationStates, EventSubscriptionExecutionReadinessIEventSubscriptionExecutionBindingCatalog, IEventSubscriptionExecutionReadinessCatalog, IEventPublicationRuntimeCatalog, IEventDispatchRuntimeCatalogchannel/subscription descriptors, in-process execution baseline, bounded retry/idempotency, publication/dispatch state truth
Cephalon.Eventing.WolverineM3provider-managed(projected through parent eventing)EventDispatchStates, EventPublicationStatesoptional Wolverine-managed dispatch lane with terminal dispatch/subscription retry
Cephalon.Eventing.BehaviorsM1application-managedbehavior-native eventing bridge; saga choreography handoff into outbox-backed eventing

Eventing’s core baseline owns the in-process execution lane and operator state surfaces. Wolverine is the first provider-managed dispatch follow-through. The behaviors-native bridge is the explicit phase-12 seam between saga choreography authoring and outbox-backed publication.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.AgenticsM3mixed: application-managed + cephalon-managed/engine/agent-tools, POST /engine/agent-tools/{toolId}/runs, /engine/agent-tool-runs, /engine/agent-tool-runs/retry-pending, /engine/agent-tool-runs/idempotency-duplicates, /engine/agent-tool-runs/approval-required, /engine/agent-tool-runs/terminal-failuresAgentToolRunsIAgentToolRunCatalog, IAgentToolDispatcher, IAgentToolExecutor, IAgentToolExecutionPolicy, IAgentToolExecutionObservertool descriptors, managed dispatch loop, bounded retry/idempotency, operator action seams
Cephalon.RetrievalM3mixed: application-managed + cephalon-managed/engine/knowledge-indexes, POST /engine/knowledge-indexes/{collectionId}/queries, POST /engine/knowledge-indexes/{collectionId}/reindexKnowledgeIndexesIKnowledgeIndexCataloglexical indexing, query execution, freshness state, background reindex scheduler

Both agentic surfaces are managed vertical proofs. Cephalon-managed dispatch and indexing already work; broader durable agent queues, memory persistence, and provider-specific orchestration remain future work.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.DataM3mixed: cephalon-managed + provider-managed/engine/cdc-captures, /engine/cdc-captures/runtime*, /engine/cdc-capture-runtimes, POST /engine/cdc-capture-runtimes/{executionRuntimeId}/reports, /engine/data-products, /engine/outboxes, /engine/inboxes, /engine/projections, /engine/databases, /engine/database-topology, /engine/database-roles, /engine/database-migrations, /engine/database-migration-playbookCdcCaptures, CdcCaptureStates, CdcCaptureExecutionRuntimes, DataProducts, Outboxes, Inboxes, Projections, DatabaseRoles, DatabaseMigrations, DatabaseMigrationPlaybook, DatabaseTopologyICdcCaptureCatalog, ICdcCaptureExecutionRuntimeCatalog, IOutboxCatalog, IInboxCatalog, IDataProductCatalog, IProjectionCatalog, IDatabaseRoleCatalog, IDatabaseMigrationCatalogCDC runtime state, shared execution substrate, outbox/inbox descriptors, data product descriptors, database topology
Cephalon.Data.EntityFrameworkM2cephalon-managedIDataProductCatalog, IOutboxCatalog, IInboxCatalogDbContext-backed read/write stores, outbox/inbox, entity event sourcing baseline
Cephalon.Data.SqlServerM2provider-managed— (CDC projects via Cephalon.Data)DatabaseRoles, DatabaseMigrations, DatabaseTopologyIDatabaseRoleCatalog, IDatabaseMigrationCatalogSQL Server data + CDC capture provider
Cephalon.Data.PostgresM2provider-managedDatabaseRoles, DatabaseMigrations, DatabaseTopologyIDatabaseRoleCatalog, IDatabaseMigrationCatalogPostgreSQL data + logical-replication CDC provider
Cephalon.Data.MySqlM2provider-managedDatabaseRoles, DatabaseMigrations, DatabaseTopologyIDatabaseRoleCatalog, IDatabaseMigrationCatalogMySQL data pack
Cephalon.Data.OracleM2provider-managedDatabaseRoles, DatabaseMigrations, DatabaseTopologyIDatabaseRoleCatalog, IDatabaseMigrationCatalogOracle Database data pack
Cephalon.Data.MongoDBM2provider-managedIDataProductCatalogMongoDB data + change-stream CDC provider
Cephalon.Data.RedisM1provider-managedRedis cache and data structures pack (audit pending)
Cephalon.Data.Neo4jM1provider-managedNeo4j graph database pack (audit pending)
Cephalon.Data.CassandraM1provider-managedApache Cassandra pack (audit pending)
Cephalon.Data.ClickHouseM1provider-managedClickHouse OLAP pack (audit pending)
Cephalon.Data.ElasticsearchM1provider-managedElasticsearch pack (audit pending)
Cephalon.Data.OpenSearchM1provider-managedOpenSearch pack (audit pending)
Cephalon.Data.QdrantM1provider-managedQdrant vector database pack (audit pending)
Cephalon.Data.NatsM1provider-managedNATS messaging pack (audit pending)
Cephalon.Data.DebeziumM1provider-managedICdcCaptureCatalogDebezium-managed CDC sourcing pack (audit pending)

Cephalon.Data core ships as M3 with truthful cross-provider CDC truth. Relational providers (SqlServer, Postgres, MySql, Oracle) own schema/role/migration truth at M2 and contribute provider-native CDC where applicable. Non-relational providers stay at M1 catalog/descriptor maturity until their managed-execution proof lands.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.EventSourcingM1application-managedevent-sourced aggregate contracts and descriptors (family-covered by maturity audit)
Cephalon.EventSourcing.EntityFrameworkM1provider-managedEntity Framework event store (family-covered by maturity audit)
Cephalon.EventSourcing.MongoDBM1provider-managedMongoDB event store (family-covered by maturity audit)
Cephalon.EventSourcing.RedisM1provider-managedRedis event store (family-covered by maturity audit)
Cephalon.EventSourcing.Neo4jM1provider-managedNeo4j event store (family-covered by maturity audit)
Cephalon.EventSourcing.CassandraM1provider-managedCassandra event store (family-covered by maturity audit)
Cephalon.EventSourcing.ClickHouseM1provider-managedClickHouse event store (family-covered by maturity audit)
Cephalon.EventSourcing.ElasticsearchM1provider-managedElasticsearch event store (family-covered by maturity audit)
Cephalon.EventSourcing.OpenSearchM1provider-managedOpenSearch event store (family-covered by maturity audit)
Cephalon.EventSourcing.QdrantM1provider-managedQdrant event store (family-covered by maturity audit)
Cephalon.EventSourcing.NatsM1provider-managedNATS event store (family-covered by maturity audit)

The event-sourcing family is currently catalog-only. The maturity audit does not yet enumerate each pack individually; broad managed-execution proof remains future work.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.MultiTenancyM2cephalon-managedTenantMemberships, TenantInvitations, TenantDomainOwnership, TenantGovernanceActions, TenantAdministrationITenantResolver, ITenantContextAccessortenant resolution, ambient context, governance boundaries
Cephalon.MultiTenancy.GovernanceM2mixed: cephalon-managed + provider-managed/engine/tenant-memberships, /engine/tenant-invitations, /engine/tenant-domain-ownership, /engine/tenant-governance-actions, /engine/tenant-administrationTenantMemberships, TenantInvitations, TenantInvitationDeliveryRuns, TenantDomainOwnership, TenantGovernanceActions, TenantAdministrationITenantMembershipCatalog, ITenantInvitationCatalog, ITenantDomainOwnershipCatalog, ITenantGovernanceActionCatalog, ITenantAdministrationWorkflow, plus 20+ governance interfacesgovernance descriptors, stores, validators, delivery dispatch, workflow transitions
Cephalon.MultiTenancy.Governance.AspNetCoreM2cephalon-managedPOST /engine/tenant-administration/commandsTenantInvitationDeliveryRuns, TenantAdministrationASP.NET Core tenant-admin commands, delivery callbacks, observation reads
Cephalon.MultiTenancy.Governance.HttpDeliveryM2cephalon-managedITenantInvitationDeliverySenderHTTP webhook invitation sender
Cephalon.MultiTenancy.Governance.SmtpDeliveryM2cephalon-managedITenantInvitationDeliverySenderSMTP relay invitation sender
Cephalon.MultiTenancy.Governance.SendGridDeliveryM2cephalon-managedITenantInvitationDeliverySenderSendGrid Mail API invitation sender
Cephalon.MultiTenancy.Governance.SendGridDelivery.AspNetCoreM2cephalon-managed— (callback receiver)SendGrid Event Webhook translation and verification
Cephalon.MultiTenancy.Governance.MailgunDeliveryM2cephalon-managedITenantInvitationDeliverySenderMailgun Messages API invitation sender
Cephalon.MultiTenancy.Governance.MailgunDelivery.AspNetCoreM2cephalon-managed— (callback receiver)Mailgun webhook translation, HMAC verification, idempotency
Cephalon.MultiTenancy.Governance.AmazonSesDeliveryM2cephalon-managedITenantInvitationDeliverySenderAmazon SES v2 invitation sender
Cephalon.MultiTenancy.Governance.AmazonSesDelivery.AspNetCoreM2cephalon-managed— (callback receiver)Amazon SES SNS callback translation, verification, idempotency
Cephalon.MultiTenancy.Governance.MicrosoftGraphDeliveryM2cephalon-managedITenantInvitationDeliverySenderMicrosoft Graph sendMail invitation sender
Cephalon.MultiTenancy.Governance.MicrosoftGraphDelivery.AzureIdentityM2cephalon-managedAzure.Identity token provider for Microsoft Graph

Multi-tenancy is one of the deepest companion proofs in the repo: 21 governance proofs landed between ENG-235 and ENG-256, plus six independent invitation-delivery integrations. Distributed governance storage, identity-provider sync, and additional sender families remain future work.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.AuditM1mixed: cephalon-managed in-memory writer baseline, catalog projection, ambient actor resolution + application-managed consumer actor accessors and durable storage/engine/audit-stores, /engine/audit-history, /engine/audit-history/exportAuditStoresIAuditStoreCataloghost-agnostic audit-recording baseline; /engine/audit-* routes are M1 catalog projections of IAuditStoreCatalog/IAuditHistoryReader/IAuditHistoryExporter truth
Cephalon.Audit.EntityFrameworkM1provider-managedEntity Framework audit history: queryable IAuditHistoryReader plus bounded NDJSON IAuditHistoryExporter over Engine:Audit:History configuration
Cephalon.IdentityM1mixed: cephalon-managed default metadata-driven evaluator, runtime surface, catalog projection, diagnostics + application-managed identity scheme and principal flow/engine/authorization-policiesAuthorizationPoliciesIAuthorizationPolicyCataloghost-agnostic identity and authorization baseline; /engine/authorization-policies is the M1 catalog projection of IAuthorizationPolicyCatalog truth, and identity-authorization is the runtime surface
Cephalon.Identity.AspNetCoreM1application-managedASP.NET Core integration: minimal-API and controller policy mapping over the host-agnostic evaluator, optional ClaimsPrincipal projection into the ambient IAuditActorAccessor contract
Cephalon.Ids.SfidM2cephalon-managedSnowflake ID (Sfid) generator with canonical sorting

Audit and identity ship as host-agnostic baselines at M1: each pack contributes truthful catalog projections (/engine/audit-*, /engine/authorization-policies) plus narrow Cephalon-managed defaults (in-memory audit writer, metadata-driven authorization evaluator, identity runtime surface) without forcing one durable storage opinion or one identity scheme onto consumers. The Entity Framework audit pack is the first durable provider follow-through. Sfid stands alone at M2 as a fully managed identifier-generator surface. Distributed audit ledgers, broader authorization-decision proof, durable policy stores, and provider-specific identity-provider sync remain future work.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.EdgeM2cephalon-managed/engine/cells, /engine/cell-routes, /engine/cell-health-isolations, /engine/cell-traffic-automationsCellBoundaries, CellRoutes, CellHealthIsolations, CellTrafficAutomationsICellTrafficAutomationRuntimeCatalog (contributor)edge node descriptors, cell traffic automation materialization seam
Cephalon.Edge.KubernetesGatewayM3provider-managed— (projects via Cephalon.Edge)CellTrafficAutomationsICellTrafficAutomationProviderMaterializerKubernetes Gateway API materialization with apply-and-reconcile + cleanup sweep
Cephalon.Edge.TraefikM3provider-managed— (projects via Cephalon.Edge)CellTrafficAutomationsICellTrafficAutomationProviderMaterializerTraefik IngressRoute materialization with apply-and-reconcile + cleanup sweep

Edge already has two real provider-native control-plane materializers running on a shared lifecycle vocabulary (ownership, dependency, drift, lifecycle action, condition). Additional edge providers (Istio, Envoy, AWS App Mesh, etc.) remain future work.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.ObservabilityM2cephalon-managed(startup summary projects via /manifest)Manifest (startup summary)observability options, startup summaries, shared telemetry contract
Cephalon.Observability.OpenTelemetryM1cephalon-managedOTLP exporter configuration (family-covered by maturity audit)
Cephalon.Observability.KubernetesM1cephalon-managedKubernetes collector configuration (family-covered by maturity audit)
Cephalon.Observability.AwsM1cephalon-managedAWS X-Ray and CloudWatch configuration (family-covered by maturity audit)
Cephalon.Observability.GcpM1cephalon-managedGCP Cloud Trace and Monitoring configuration (family-covered by maturity audit)
Cephalon.Observability.AzureMonitorM1cephalon-managedAzure Monitor configuration (family-covered by maturity audit)
Cephalon.Observability.NewRelicM1cephalon-managedNew Relic OTLP configuration (family-covered by maturity audit)
Cephalon.Observability.GrafanaCloudM1cephalon-managedGrafana Cloud configuration (family-covered by maturity audit)
Cephalon.Observability.AlibabaCloudM1cephalon-managedAlibaba Cloud configuration (family-covered by maturity audit)
Cephalon.Observability.OracleCloudM1cephalon-managedOracle Cloud APM configuration (family-covered by maturity audit)
Cephalon.Observability.DigitalOceanM1cephalon-managedDigitalOcean App Platform configuration (family-covered by maturity audit)
Cephalon.Observability.HuaweiCloudM1cephalon-managedHuawei Cloud APM configuration (family-covered by maturity audit)
Cephalon.Observability.OpenShiftM1cephalon-managedOpenShift in-cluster collector configuration (family-covered by maturity audit)
Cephalon.Observability.TanzuM1cephalon-managedVMware Tanzu configuration (family-covered by maturity audit)
Cephalon.Observability.SerilogM1cephalon-managedSerilog provider integration (family-covered by maturity audit)
Cephalon.Observability.DependencyHealth.CoreM1cephalon-manageddependency-health probe infrastructure (family-covered by maturity audit)
Cephalon.Observability.*Dependencies (Cassandra / ClickHouse / Consul / Elasticsearch / Http / Kafka / Memcached / MongoDB / MQTT / MySQL / NATS / Neo4j / OpenSearch / Oracle / PostgreSQL / RabbitMQ / Redis / SqlServer)M0taxonomy-onlyprovider-specific dependency-health probe catalogs

The observability family is broad but shallow on purpose: configuration packs bind options, dependency health probes ship as taxonomy. Genuine telemetry collection happens in the host runtime’s OpenTelemetry stack.

PackageMaturityOwnershipEngine routesSnapshot keysCatalog interfacesNotes
Cephalon.ScaffoldingM4cephalon-managedscaffold generation, package version catalog, deployment asset rendering
Cephalon.CliM4cephalon-managedblueprint-driven app generation, package staging, doctor checks, docs publishing
Cephalon.ReferenceDocsM2cephalon-managedXML-doc reference publishing, hosted docs configuration

The tooling family ships adoption-ready CLI plus scaffolding and an XML-doc reference publisher. Reference-doc generation runs against the live engine surface and is wired into release validation.

  • Adoption-ready (M4): core runtime, host adapters, behaviors core, scaffolding, CLI
  • Broad managed execution (M3): eventing core, eventing Wolverine bridge, agentics, retrieval, data core, edge providers (Kubernetes Gateway, Traefik)
  • Narrow managed execution (M2): transport adapters, behaviors HTTP, EntityFramework data, relational data providers (SqlServer, Postgres, MySql, Oracle, MongoDB), multi-tenancy core + governance + delivery senders, edge core, observability core, Sfid, ReferenceDocs
  • Catalog-only (M1): behaviors messaging/patterns/sourcegen, eventing behaviors bridge, non-relational data providers (Redis, Neo4j, Cassandra, ClickHouse, Elasticsearch, OpenSearch, Qdrant, Nats, Debezium), event-sourcing family, audit, identity, observability provider configuration packs
  • Taxonomy-only (M0): observability dependency-health provider packs

Inconsistencies observed (potential next ENG-* cards)

Section titled “Inconsistencies observed (potential next ENG-* cards)”

No open inconsistencies remain at this snapshot. The list below records the alignment items resolved in May 2026 so the durable history stays visible.

Resolved alignment items (kept as durable history)

Section titled “Resolved alignment items (kept as durable history)”
  • Cephalon.Behaviors.Http REST publication ownership (resolved May 2026): the matrix row now records the explicit application-managed profile/publication activation plus cephalon-managed materialization/runtime-catalog split, mirroring the maturity audit row. The shared component doc remains the per-package detail source.
  • Event-sourcing family audit coverage (resolved May 2026): the maturity audit now records the catalog-only stance for the event-sourcing family and confirms no provider pack has shipped managed-execution proof yet. See the audit’s “Event sourcing” group entry.
  • Observability provider audit closure (resolved May 2026): the maturity audit now records the cloud-platform configuration-pack baseline plus the dependency-health pack family stance. Each cloud pack stays M1 cephalon-managed configuration binding; deeper telemetry collection remains in the host runtime’s OpenTelemetry stack.
  • Cephalon.Audit and Cephalon.Identity route projection (resolved May 2026): the maturity audit now records explicit Audit, Audit.EntityFramework, Identity, Identity.AspNetCore, and Ids.Sfid rows, and the matrix Notes field for each row reflects whether /engine/* routes are M1 catalog projections or runtime-surface projections.
  • Multi-tenancy delivery sender maturity granularity (resolved May 2026): the maturity audit now records a consolidated invitation-delivery sender family row that captures the deliberate shared-M2 stance across HttpDelivery, SmtpDelivery, SendGridDelivery, MailgunDelivery, AmazonSesDelivery, and MicrosoftGraphDelivery (plus their AspNetCore and AzureIdentity companions). The family floor stays M2 because each sender owns the same managed dispatch, callback handling shape, replay protection, and idempotency hygiene over a different upstream API. Per-sender promotion above the floor requires sender-specific adoption proof plus matching matrix/component-doc/planning updates in one slice.
  • EventSourcing and Observability “(audit pending)” Notes-field accuracy (resolved May 2026): the audit’s family-level rows already enumerate every shipped Cephalon.EventSourcing pack (core plus 10 provider packs at M1 family-level) and every shipped Cephalon.Observability configuration / dependency-health-core pack (cloud/exporter family at M1 cephalon-managed). The Notes-field tag on those 26 matrix rows now reads “(family-covered by maturity audit)” instead of “(audit pending)” so the matrix reflects that the audit is no longer silent on those packs. The “(audit pending)” tag remains on Notes only when the audit is genuinely silent — currently the 9 non-relational Cephalon.Data.* rows whose individual audit lines are still pending.

When a row in this matrix becomes inaccurate, update both this page and the engine-surface-maturity-audit.md entry in the same slice. Do not let one page drift while the other is updated.

This document is the consolidated read across maturity audit + component catalog + runtime contract index. It is meant to evolve continuously rather than freeze. The standing rules for when to update this matrix vs. when to leave it alone live in planning-governance.md under the “Conformance matrix maintenance” section; this paragraph is the local reminder, not the durable rule.

  • update this matrix in the same slice as the source of truth: when a package changes maturity or ownership, update both engine-surface-maturity-audit.md and the matching row here
  • add a new row when a new shipped Cephalon.* package enters the repository
  • delete rows when a shipped package is intentionally retired and its retirement is documented in compatibility.md
  • when a row’s Notes field reaches more than one line of detail, move that detail to the matching component doc and link to it instead
  • review the matrix at the end of each architecture-review cycle to confirm it still matches reality

This page does not assign new policies or new requirements. It only consolidates what other docs already declare.