One architecture, several durable responsibilities.
The public model follows the canonical repository package boundaries.
| Capability | Authoritative owner | Durable output |
|---|---|---|
| Authorization | Kernel Core | Decision and audit evidence |
| Job execution | Job Runtime + Orchestrator | State transitions and outbox events |
| Evidence | Ledger | Append-only evidence and decisions |
| Memory | Memory Store | Typed reviewed knowledge |
| Recovery | Incident Service | Incident and recovery lifecycle |