schema: spec-driven

context: |
  VerseVDI Data Plane is the private-Gitea GPLv3 boundary for the separately
  deployed pure-Go gateway and Apollo adapter. The closed Connection Server
  owns durable business, database, authorization, placement, and grant
  authority. The Protocol repository owns every wire contract.
  Phase 3C forbids direct client-to-provider routing, cgo/native sidecars,
  decode/transcode/render, insecure identity/protection fallback, unbounded
  external-input handling, and proprietary source in this repository.
  The Go toolchain is 1.26.5. Consumers pin an immutable Protocol release
  without a filesystem replace.

rules:
  proposal:
    - Map exact Planning Hub requirement IDs and repository ownership.
    - State provenance, GPL boundary, non-goals, and hard stop conditions.
  design:
    - Keep transport, framing, media, source-control, and client-decode domains separate.
    - Define bounds, failure behavior, authority loss, and redaction before success behavior.
  tasks:
    - Build deterministic Apollo fixtures and the fake-provider gate before completing the adapter.
    - Keep live Apollo/macOS interoperability explicitly deferred to owner E2E.
    - Name focused checks, evidence invalidation inputs, and the single final verification gate.