fluid-core/workplans/FLUID-WP-0004-publication-and-control-apis.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	planning_priority	planning_order	depends_on
FLUID-WP-0004	workplan	Revision publication pipeline and control APIs	infotech	fluid-core	active	worsch	fluid-core	2026-09-04	2026-09-04	high	3	FLUID-WP-0003

FLUID-WP-0004 - Publication and control APIs

Nothing reaches the router unsigned. The deterministic policy gate is built now, before anything can generate candidates, so a future Daimon has nowhere to bypass.

T01 - Publication pipeline

id: FLUID-WP-0004-T01
status: todo
priority: high

Blueprint §35: SOURCE, BUILD, CONTRACT CHECK, TEST, SECURITY CHECK, POLICY CHECK, SIGN, PUBLISH, ROUTE. Each stage emits an audit event.

T02 - Descriptor signing and verification

id: FLUID-WP-0004-T02
status: todo
priority: high

The router accepts only signed or otherwise authenticated published revision descriptors (§35). An unsigned descriptor must be refused, and that refusal tested.

T03 - Revision API

id: FLUID-WP-0004-T03
status: todo
priority: high

Blueprint §44.1: create, verify, publish, set state, query lineage.

T04 - Intent API

id: FLUID-WP-0004-T04
status: todo
priority: medium

Blueprint §44.5: read active intent, read historical intent, validate a candidate against intent, propose an amendment. Amendment stays separately governed — the API records a proposal, it does not enact one.

T05 - Deterministic policy gate

id: FLUID-WP-0004-T05
status: todo
priority: high

Blueprint §28.2. Allowed adaptation class, permitted operational mode, complexity threshold, security status, test status, compatibility status, traffic-allocation maximum, budget, approval requirement. This gate is the architectural boundary that stops agentic reasoning from becoming security policy.

T06 - Trust model in the type system

id: FLUID-WP-0004-T06
status: todo
priority: medium

Blueprint §47 made mechanical: generated artifacts are an untrusted candidate type until verification produces a signed revision. The compiler should make the unsafe path awkward to write.