feat: publish backend operation and supervision contracts

contracts/README.md

@@ -1,5 +1,11 @@
 # Contracts
 
+The optional [backend operation and supervision family](../specs/formal/runtime-contracts/backend-operation-supervision.md)
+publishes bounded requests, capability/willingness checks, correlated progress,
+cancellation dispositions and effect evidence. The
+[backend integration and migration guide](../docs/explain/reference/backend-operation-supervision.md)
+explains the `operation-supervision` profile and its evidence limits.
+
 `contracts/` contains the machine-readable contract side of the repository.
 
 The goal of this bucket is organizational clarity:

contracts/fixtures/control-plane/backend-operation-capabilities-v1/valid/provider.json

@@ -0,0 +1,14 @@
+{
+  "schema_version": "backend-operation-capabilities/v1",
+  "backend_id": "backend-1",
+  "revision": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "supported_operation_kinds": [
+    "provisioning"
+  ],
+  "guarantees": [
+    "cessation-evidence",
+    "cancellation",
+    "effect-observation",
+    "partial-effects"
+  ]
+}

contracts/fixtures/control-plane/backend-operation-control-v1/valid/cancel-race-01.json

@@ -0,0 +1,43 @@
+{
+  "schema_version": "backend-operation-control/v1",
+  "binding": {
+    "operation_id": "operation-1",
+    "invocation_id": "invocation-1",
+    "attempt_id": "attempt-1",
+    "worker_id": "worker-1",
+    "deployment_id": "deployment-1",
+    "owner_generation": 1,
+    "execution_generation": 1,
+    "backend_id": "backend-1",
+    "baseline_revision": "revision-1",
+    "context": {
+      "actor_id": "author-1",
+      "authorization_scope": [
+        "role:operator"
+      ],
+      "target_scope": "target-1",
+      "run_scope": "run-1",
+      "operation_kind": "provisioning",
+      "request_commitment": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "parent_operation_id": null
+    },
+    "effect_scope": {
+      "kind": "target-run",
+      "addresses": [],
+      "independence": null
+    }
+  },
+  "request_digest": "sha256:3182586fa3572b311637fe36d00e2bfb0ba5e1ba680dcd05aed5784bd8c79d5b",
+  "control_id": "control-1",
+  "actor_id": "supervisor-1",
+  "authorization_scope": [
+    "role:operator"
+  ],
+  "action": "cancel",
+  "budget": {
+    "origin_id": "budget-1",
+    "started_at": "2026-09-24T00:00:00Z",
+    "limit_ms": 1000,
+    "remaining_ms": 900
+  }
+}

contracts/fixtures/control-plane/backend-operation-control-v1/valid/partial-cancel-01.json

@@ -0,0 +1,43 @@
+{
+  "schema_version": "backend-operation-control/v1",
+  "binding": {
+    "operation_id": "operation-1",
+    "invocation_id": "invocation-1",
+    "attempt_id": "attempt-1",
+    "worker_id": "worker-1",
+    "deployment_id": "deployment-1",
+    "owner_generation": 1,
+    "execution_generation": 1,
+    "backend_id": "backend-1",
+    "baseline_revision": "revision-1",
+    "context": {
+      "actor_id": "author-1",
+      "authorization_scope": [
+        "role:operator"
+      ],
+      "target_scope": "target-1",
+      "run_scope": "run-1",
+      "operation_kind": "provisioning",
+      "request_commitment": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "parent_operation_id": null
+    },
+    "effect_scope": {
+      "kind": "target-run",
+      "addresses": [],
+      "independence": null
+    }
+  },
+  "request_digest": "sha256:3182586fa3572b311637fe36d00e2bfb0ba5e1ba680dcd05aed5784bd8c79d5b",
+  "control_id": "control-1",
+  "actor_id": "supervisor-1",
+  "authorization_scope": [
+    "role:operator"
+  ],
+  "action": "cancel",
+  "budget": {
+    "origin_id": "budget-1",
+    "started_at": "2026-09-24T00:00:00Z",
+    "limit_ms": 1000,
+    "remaining_ms": 900
+  }
+}

contracts/fixtures/control-plane/backend-operation-control-v1/valid/uncertain-01.json

@@ -0,0 +1,43 @@
+{
+  "schema_version": "backend-operation-control/v1",
+  "binding": {
+    "operation_id": "operation-1",
+    "invocation_id": "invocation-1",
+    "attempt_id": "attempt-1",
+    "worker_id": "worker-1",
+    "deployment_id": "deployment-1",
+    "owner_generation": 1,
+    "execution_generation": 1,
+    "backend_id": "backend-1",
+    "baseline_revision": "revision-1",
+    "context": {
+      "actor_id": "author-1",
+      "authorization_scope": [
+        "role:operator"
+      ],
+      "target_scope": "target-1",
+      "run_scope": "run-1",
+      "operation_kind": "provisioning",
+      "request_commitment": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "parent_operation_id": null
+    },
+    "effect_scope": {
+      "kind": "target-run",
+      "addresses": [],
+      "independence": null
+    }
+  },
+  "request_digest": "sha256:3182586fa3572b311637fe36d00e2bfb0ba5e1ba680dcd05aed5784bd8c79d5b",
+  "control_id": "control-1",
+  "actor_id": "supervisor-1",
+  "authorization_scope": [
+    "role:operator"
+  ],
+  "action": "reconcile",
+  "budget": {
+    "origin_id": "budget-1",
+    "started_at": "2026-09-24T00:00:00Z",
+    "limit_ms": 1000,
+    "remaining_ms": 900
+  }
+}

contracts/fixtures/control-plane/backend-operation-request-v1/valid/accepted.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": "backend-operation-request/v1",
+  "binding": {
+    "operation_id": "operation-1",
+    "invocation_id": "invocation-1",
+    "attempt_id": "attempt-1",
+    "worker_id": "worker-1",
+    "deployment_id": "deployment-1",
+    "owner_generation": 1,
+    "execution_generation": 1,
+    "backend_id": "backend-1",
+    "baseline_revision": "revision-1",
+    "context": {
+      "actor_id": "author-1",
+      "authorization_scope": [
+        "role:operator"
+      ],
+      "target_scope": "target-1",
+      "run_scope": "run-1",
+      "operation_kind": "provisioning",
+      "request_commitment": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "parent_operation_id": null
+    },
+    "effect_scope": {
+      "kind": "target-run",
+      "addresses": [],
+      "independence": null
+    }
+  },
+  "command": {
+    "contract_id": "provisioning-plan-v1",
+    "artifact_id": "artifact-1",
+    "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "requirement_refs": [
+    {
+      "contract_id": "artifact-requirement-v1",
+      "artifact_id": "artifact-1",
+      "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    }
+  ],
+  "required_guarantees": [
+    "cessation-evidence"
+  ],
+  "budget": {
+    "origin_id": "budget-1",
+    "started_at": "2026-09-24T00:00:00Z",
+    "limit_ms": 1000,
+    "remaining_ms": 900
+  }
+}

contracts/fixtures/control-plane/backend-operation-request-v1/valid/cancel-race.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": "backend-operation-request/v1",
+  "binding": {
+    "operation_id": "operation-1",
+    "invocation_id": "invocation-1",
+    "attempt_id": "attempt-1",
+    "worker_id": "worker-1",
+    "deployment_id": "deployment-1",
+    "owner_generation": 1,
+    "execution_generation": 1,
+    "backend_id": "backend-1",
+    "baseline_revision": "revision-1",
+    "context": {
+      "actor_id": "author-1",
+      "authorization_scope": [
+        "role:operator"
+      ],
+      "target_scope": "target-1",
+      "run_scope": "run-1",
+      "operation_kind": "provisioning",
+      "request_commitment": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "parent_operation_id": null
+    },
+    "effect_scope": {
+      "kind": "target-run",
+      "addresses": [],
+      "independence": null
+    }
+  },
+  "command": {
+    "contract_id": "provisioning-plan-v1",
+    "artifact_id": "artifact-1",
+    "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "requirement_refs": [
+    {
+      "contract_id": "artifact-requirement-v1",
+      "artifact_id": "artifact-1",
+      "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    }
+  ],
+  "required_guarantees": [
+    "cessation-evidence"
+  ],
+  "budget": {
+    "origin_id": "budget-1",
+    "started_at": "2026-09-24T00:00:00Z",
+    "limit_ms": 1000,
+    "remaining_ms": 900
+  }
+}

contracts/fixtures/control-plane/backend-operation-request-v1/valid/duplicate.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": "backend-operation-request/v1",
+  "binding": {
+    "operation_id": "operation-1",
+    "invocation_id": "invocation-1",
+    "attempt_id": "attempt-1",
+    "worker_id": "worker-1",
+    "deployment_id": "deployment-1",
+    "owner_generation": 1,
+    "execution_generation": 1,
+    "backend_id": "backend-1",
+    "baseline_revision": "revision-1",
+    "context": {
+      "actor_id": "author-1",
+      "authorization_scope": [
+        "role:operator"
+      ],
+      "target_scope": "target-1",
+      "run_scope": "run-1",
+      "operation_kind": "provisioning",
+      "request_commitment": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "parent_operation_id": null
+    },
+    "effect_scope": {
+      "kind": "target-run",
+      "addresses": [],
+      "independence": null
+    }
+  },
+  "command": {
+    "contract_id": "provisioning-plan-v1",
+    "artifact_id": "artifact-1",
+    "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "requirement_refs": [
+    {
+      "contract_id": "artifact-requirement-v1",
+      "artifact_id": "artifact-1",
+      "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    }
+  ],
+  "required_guarantees": [
+    "cessation-evidence"
+  ],
+  "budget": {
+    "origin_id": "budget-1",
+    "started_at": "2026-09-24T00:00:00Z",
+    "limit_ms": 1000,
+    "remaining_ms": 900
+  }
+}

contracts/fixtures/control-plane/backend-operation-request-v1/valid/partial-cancel.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": "backend-operation-request/v1",
+  "binding": {
+    "operation_id": "operation-1",
+    "invocation_id": "invocation-1",
+    "attempt_id": "attempt-1",
+    "worker_id": "worker-1",
+    "deployment_id": "deployment-1",
+    "owner_generation": 1,
+    "execution_generation": 1,
+    "backend_id": "backend-1",
+    "baseline_revision": "revision-1",
+    "context": {
+      "actor_id": "author-1",
+      "authorization_scope": [
+        "role:operator"
+      ],
+      "target_scope": "target-1",
+      "run_scope": "run-1",
+      "operation_kind": "provisioning",
+      "request_commitment": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "parent_operation_id": null
+    },
+    "effect_scope": {
+      "kind": "target-run",
+      "addresses": [],
+      "independence": null
+    }
+  },
+  "command": {
+    "contract_id": "provisioning-plan-v1",
+    "artifact_id": "artifact-1",
+    "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  },
+  "requirement_refs": [
+    {
+      "contract_id": "artifact-requirement-v1",
+      "artifact_id": "artifact-1",
+      "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    }
+  ],
+  "required_guarantees": [
+    "cessation-evidence"
+  ],
+  "budget": {
+    "origin_id": "budget-1",
+    "started_at": "2026-09-24T00:00:00Z",
+    "limit_ms": 1000,
+    "remaining_ms": 900
+  }
+}