{
  "version": "v1alpha1",
  "publishedAt": "2026-04-24",
  "stability": "alpha",
  "layers": {
    "shared": [
      {
        "kind": "KubernetesMetadata",
        "file": "shared/KubernetesMetadata.json",
        "stability": "alpha",
        "description": "Standard Kubernetes object metadata schema used as a reusable $ref target.",
        "dependsOn": []
      },
      {
        "kind": "SealedCausalChain",
        "file": "shared/SealedCausalChain.json",
        "stability": "alpha",
        "description": "Immutable causal chain record linking a derived object back to its root declaration.",
        "dependsOn": []
      },
      {
        "kind": "BindingStability",
        "file": "shared/BindingStability.json",
        "stability": "alpha",
        "description": "Reusable binding stability descriptor for cross-operator relationship wiring.",
        "dependsOn": []
      },
      {
        "kind": "PhaseModel",
        "file": "shared/PhaseModel.json",
        "stability": "alpha",
        "description": "Reusable lifecycle phase model declaring the eight canonical AppProfile phases.",
        "dependsOn": []
      },
      {
        "kind": "RationaleField",
        "file": "shared/RationaleField.json",
        "stability": "alpha",
        "description": "Reusable rationale descriptor for governance events and decision records.",
        "dependsOn": []
      },
      {
        "kind": "GovernanceEvent",
        "file": "shared/GovernanceEvent.json",
        "stability": "alpha",
        "description": "Reusable type representing a Layer One or Layer Two change event in the ONT governance plane.",
        "dependsOn": [
          {"group": "shared", "kind": "RationaleField", "version": "v1alpha1"}
        ]
      }
    ],
    "domain-core": [
      {
        "kind": "DomainIdentity",
        "file": "domain-core/DomainIdentity.json",
        "stability": "alpha",
        "description": "Named principal that acts within the domain; anchors all downstream derivation trees.",
        "dependsOn": []
      },
      {
        "kind": "DomainBoundary",
        "file": "domain-core/DomainBoundary.json",
        "stability": "alpha",
        "description": "Organizational and infrastructure boundary within which a domain identity operates.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DomainPolicy",
        "file": "domain-core/DomainPolicy.json",
        "stability": "alpha",
        "description": "Governing rule set with ceilings for retry, circuit breaker, rate limit, and cardinality.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DomainRelationship",
        "file": "domain-core/DomainRelationship.json",
        "stability": "alpha",
        "description": "Typed directional association between two domain identities using a controlled relationship vocabulary.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"},
          {"group": "shared", "kind": "BindingStability", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DomainEvent",
        "file": "domain-core/DomainEvent.json",
        "stability": "alpha",
        "description": "Immutable record of a domain state transition with retention policy and consumer eligibility rules.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DomainWorkflow",
        "file": "domain-core/DomainWorkflow.json",
        "stability": "alpha",
        "description": "Lifecycle workflow declaration defining phases, entry conditions, and terminal states.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DomainResource",
        "file": "domain-core/DomainResource.json",
        "stability": "alpha",
        "description": "Governed infrastructure artifact declaring compute, storage, and cardinality ceilings.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DomainAudit",
        "file": "domain-core/DomainAudit.json",
        "stability": "alpha",
        "description": "Audit requirements declaration with granularity floor, retention, and mandatory event types.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DomainSemanticNameService",
        "file": "domain-core/DomainSemanticNameService.json",
        "stability": "alpha",
        "description": "Semantic name service declaration for a domain identity covering zone, record types, and resolution tiers.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      }
    ],
    "seam-core": [
      {
        "kind": "InfrastructureLineageIndex",
        "file": "seam-core/InfrastructureLineageIndex.json",
        "stability": "alpha",
        "description": "Sealed causal chain index for a root declaration in the Seam infrastructure domain; controller-authored exclusively.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "SeamMembership",
        "file": "seam-core/SeamMembership.json",
        "stability": "alpha",
        "description": "Formal join declaration for an operator to become a member of the Seam infrastructure family.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "DSNSZone",
        "file": "seam-core/DSNSZone.json",
        "stability": "alpha",
        "description": "Domain Semantic Name Service zone owning a DNS zone and its controller-authored records.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainSemanticNameService", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "PackOperationResult",
        "file": "seam-core/PackOperationResult.json",
        "stability": "alpha",
        "description": "Immutable result record written by Conductor execute-mode Job after pack-deploy capability completes. Replaces ConfigMap output channel. Single-active-revision pattern: exactly one active result per operation sequence. Decision E.",
        "dependsOn": [
          {"group": "infra.ontai.dev", "kind": "PackExecution", "version": "v1alpha1"},
          {"group": "infra.ontai.dev", "kind": "ClusterPack", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "PackReceipt",
        "file": "seam-core/PackReceipt.json",
        "stability": "alpha",
        "description": "Immutable acknowledgement written by the target cluster Conductor confirming delivery of a ClusterPack. Carries OCI digest anchors and Helm chart provenance for helm category packs. conductor-schema.md §10.",
        "dependsOn": [
          {"group": "infra.ontai.dev", "kind": "ClusterPack", "version": "v1alpha1"},
          {"group": "infra.ontai.dev", "kind": "PackInstance", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "InfrastructureClusterPack",
        "file": "seam-core/InfrastructureClusterPack.json",
        "stability": "alpha",
        "description": "Management cluster record of an immutable compiled OCI artifact. seam-core owner; wrapper creates instances, conductor signing loop updates status. Scope: seam-system. Migrated from infra/ClusterPack.",
        "dependsOn": []
      },
      {
        "kind": "InfrastructurePackExecution",
        "file": "seam-core/InfrastructurePackExecution.json",
        "stability": "alpha",
        "description": "Runtime request to apply an InfrastructureClusterPack to a target cluster. seam-core owner; wrapper reconciler performs 4-gate check and submits pack-deploy Job via Kueue. Migrated from infra/PackExecution.",
        "dependsOn": [
          {"group": "infrastructure.ontai.dev", "kind": "InfrastructureClusterPack", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "InfrastructurePackInstance",
        "file": "seam-core/InfrastructurePackInstance.json",
        "stability": "alpha",
        "description": "Records the delivered state of an InfrastructureClusterPack on a target cluster. seam-core owner; present on both management and tenant clusters. Migrated from infra/PackInstance.",
        "dependsOn": [
          {"group": "infrastructure.ontai.dev", "kind": "InfrastructureClusterPack", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "InfrastructurePackReceipt",
        "file": "seam-core/InfrastructurePackReceipt.json",
        "stability": "alpha",
        "description": "Immutable delivery acknowledgement written by the target cluster Conductor. seam-core owner; spec sealed on first write per INV-026. Carries OCI digest anchors and Helm chart provenance. Succeeds seam-core/PackReceipt.",
        "dependsOn": [
          {"group": "infrastructure.ontai.dev", "kind": "InfrastructureClusterPack", "version": "v1alpha1"},
          {"group": "infrastructure.ontai.dev", "kind": "InfrastructurePackInstance", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "InfrastructureRunnerConfig",
        "file": "seam-core/InfrastructureRunnerConfig.json",
        "stability": "alpha",
        "description": "Runtime configuration generated by the platform operator for a Conductor agent deployment. seam-core owner; operator-generated exclusively per INV-009. Conductor agent reads this to discover phases, steps, and operational parameters.",
        "dependsOn": []
      },
      {
        "kind": "InfrastructurePackBuild",
        "file": "seam-core/InfrastructurePackBuild.json",
        "stability": "alpha",
        "description": "Compiler input specification declaring pack category (helm, kustomize, raw) and source fields. seam-core owner; read by the Compiler at compile time, never applied as a cluster CR. Migrated from infra/PackBuild.",
        "dependsOn": []
      },
      {
        "kind": "InfrastructureTalosCluster",
        "file": "seam-core/InfrastructureTalosCluster.json",
        "stability": "alpha",
        "description": "Root declaration CRD for a Talos cluster under Seam governance. seam-core owner; platform operator reconciles instances. Carries mode (bootstrap/import), role (management/tenant), and sealed causal chain lineage. Migrated from platform/TalosCluster.",
        "dependsOn": []
      }
    ],
    "app-core": [
      {
        "kind": "AppBoundary",
        "file": "app-core/AppBoundary.json",
        "stability": "alpha",
        "description": "Namespace and cluster scope declaration that must reach Ready before AppIdentity may be created.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainBoundary", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppIdentity",
        "file": "app-core/AppIdentity.json",
        "stability": "alpha",
        "description": "Root anchor for all sibling app-core CRDs; issues a SPIFFE ID for the application.",
        "dependsOn": [
          {"group": "core.ontai.dev", "kind": "DomainIdentity", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppBoundary", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppPolicy",
        "file": "app-core/AppPolicy.json",
        "stability": "alpha",
        "description": "Application policy instantiating a DomainPolicy ceiling; Guardian enforces ceiling compliance.",
        "dependsOn": [
          {"group": "app.ontai.dev", "kind": "AppIdentity", "version": "v1alpha1"},
          {"group": "core.ontai.dev", "kind": "DomainPolicy", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppTopology",
        "file": "app-core/AppTopology.json",
        "stability": "alpha",
        "description": "Application topology with typed wirings that must each reference a DomainRelationship.",
        "dependsOn": [
          {"group": "app.ontai.dev", "kind": "AppIdentity", "version": "v1alpha1"},
          {"group": "core.ontai.dev", "kind": "DomainRelationship", "version": "v1alpha1"},
          {"group": "shared", "kind": "BindingStability", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppEventSchema",
        "file": "app-core/AppEventSchema.json",
        "stability": "alpha",
        "description": "Application event schema registration declaring producer, consumer, or both roles for a DomainEvent.",
        "dependsOn": [
          {"group": "app.ontai.dev", "kind": "AppIdentity", "version": "v1alpha1"},
          {"group": "core.ontai.dev", "kind": "DomainEvent", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppWorkflow",
        "file": "app-core/AppWorkflow.json",
        "stability": "alpha",
        "description": "Application workflow instantiating a DomainWorkflow with Kueue Job bindings per phase.",
        "dependsOn": [
          {"group": "app.ontai.dev", "kind": "AppIdentity", "version": "v1alpha1"},
          {"group": "core.ontai.dev", "kind": "DomainWorkflow", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppResourceProfile",
        "file": "app-core/AppResourceProfile.json",
        "stability": "alpha",
        "description": "Application resource claim against DomainResource ceilings; immutable after Running state.",
        "dependsOn": [
          {"group": "app.ontai.dev", "kind": "AppIdentity", "version": "v1alpha1"},
          {"group": "core.ontai.dev", "kind": "DomainResource", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppAuditPolicy",
        "file": "app-core/AppAuditPolicy.json",
        "stability": "alpha",
        "description": "Application audit policy; granularity must not be below DomainAudit floor, enforced by Guardian.",
        "dependsOn": [
          {"group": "app.ontai.dev", "kind": "AppIdentity", "version": "v1alpha1"},
          {"group": "core.ontai.dev", "kind": "DomainAudit", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "AppProfile",
        "file": "app-core/AppProfile.json",
        "stability": "alpha",
        "description": "Aggregate root composing all app-core CRDs; reaches Ready only after all eight phase gates complete.",
        "dependsOn": [
          {"group": "app.ontai.dev", "kind": "AppBoundary", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppIdentity", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppPolicy", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppTopology", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppEventSchema", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppWorkflow", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppResourceProfile", "version": "v1alpha1"},
          {"group": "app.ontai.dev", "kind": "AppAuditPolicy", "version": "v1alpha1"},
          {"group": "shared", "kind": "PhaseModel", "version": "v1alpha1"}
        ]
      }
    ],
    "infra": [
      {
        "kind": "ClusterPack",
        "file": "infra/ClusterPack.json",
        "stability": "alpha",
        "description": "Management cluster record of an immutable compiled OCI artifact. Carries rbacDigest, workloadDigest, and helm chart provenance for helm category packs. wrapper-schema.md §4.",
        "dependsOn": []
      },
      {
        "kind": "PackExecution",
        "file": "infra/PackExecution.json",
        "stability": "alpha",
        "description": "Runtime request to apply a ClusterPack to a target cluster. The 4-gate reconciler submits a pack-deploy Job via Kueue after all gates clear. wrapper-schema.md §3.",
        "dependsOn": [
          {"group": "infra.ontai.dev", "kind": "ClusterPack", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "PackInstance",
        "file": "infra/PackInstance.json",
        "stability": "alpha",
        "description": "Records the delivered state of a ClusterPack on a target cluster. Created by the PackExecutionReconciler after successful pack-deploy Job. wrapper-schema.md §3.",
        "dependsOn": [
          {"group": "infra.ontai.dev", "kind": "ClusterPack", "version": "v1alpha1"}
        ]
      },
      {
        "kind": "PackBuild",
        "file": "infra/PackBuild.json",
        "stability": "alpha",
        "description": "Compiler input specification declaring the pack category (helm, kustomize, raw) and category-specific source fields. Read by the Compiler at compile time. T-05.",
        "dependsOn": []
      }
    ],
    "platform": [
      {
        "kind": "TalosCluster",
        "file": "platform/TalosCluster.json",
        "stability": "alpha",
        "description": "Root declaration CRD for a Talos cluster under Seam governance. Mode=bootstrap provisions; mode=import records an existing cluster. On mode=import, role (management or tenant) is mandatory -- enforced by CEL admission validation. T-04a.",
        "dependsOn": []
      }
    ],
    "guardian": [
      {
        "kind": "AuditEvent",
        "file": "guardian/AuditEvent.json",
        "stability": "alpha",
        "description": "Structured audit event emitted by Guardian for every admission decision.",
        "dependsOn": []
      }
    ]
  }
}