Finish reef-railiance first-wave handoff

README.md

@@ -29,7 +29,10 @@ Those concerns stay with `railiance-infra`, `railiance-cluster`,
 
 ## Current Status
 
-This repo is in first-wave bootstrap.
+This repo now owns the wave-1 grouped home-reef boundary for Railiance.
+
+The retained S1 compatibility path while reef localization is still in flight
+is documented in `docs/retained-s1-handoff.md`.
 
 The boundary and source material come from:
 
@@ -43,4 +46,5 @@ The boundary and source material come from:
 - `substrate/` — grouped substrate identity and topology facts
 - `bindings/` — rail and `rapp` binding surfaces for this reef
 - `docs/` — wave-1 contract and source import plan
+- `docs/retained-s1-handoff.md` — migration-window split with `railiance-infra`
 - `workplans/` — repo-local execution work

SCOPE.md

@@ -61,10 +61,10 @@ or one-host naming into the reef model.
 
 ## Current State
 
-- Status: active bootstrap
-- Implementation: declaration, initial grouped substrate files, and first
-  repo-local workplan are present
-- Stability: evolving
+- Status: bootstrapped first-wave grouped reef home
+- Implementation: declaration, grouped substrate files, and retained-S1
+  compatibility handoff are present
+- Stability: evolving, with the migration-window split now explicit
 - Usage: wave-1 home reef for the Railiance server group
 
 ---

WORK-RECORDS.md

@@ -8,8 +8,8 @@
 
 | Kind | ID | Status | Lane | Source |
 | --- | --- | --- | --- | --- |
-| workplan | REEF-RAILIANCE-WP-0001 | active | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |
+| workplan | REEF-RAILIANCE-WP-0001 | finished | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |
 | task | REEF-RAILIANCE-WP-0001-T01 | done | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |
 | task | REEF-RAILIANCE-WP-0001-T02 | done | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |
-| task | REEF-RAILIANCE-WP-0001-T03 | wait | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |
+| task | REEF-RAILIANCE-WP-0001-T03 | done | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |
 | task | REEF-RAILIANCE-WP-0001-T04 | done | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |

docs/README.md

@@ -3,3 +3,4 @@
 - `wave-1-contract.md` — current grouped home-reef contract and boundary summary
 - `source-backed-substrate-facts.md` — source-backed first-wave facts imported from S1
 - `source-import-plan.md` — source material and migration direction from existing repos
+- `retained-s1-handoff.md` — migration-window split between grouped reef ownership and retained S1 authority

docs/retained-s1-handoff.md

@@ -0,0 +1,58 @@
+# Retained S1 Handoff
+
+## Purpose
+
+Define the migration-window handoff between `reef-railiance` and
+`railiance-infra` while grouped reef localization is still in flight.
+
+Wave 1 makes `reef-railiance` the durable owner of the grouped Railiance
+home-reef identity, topology, hosted-rail statement, and future `rapp`
+bindings. `railiance-infra` remains the canonical S1 owner of raw inventory,
+provisioning, hardening, and source-backed host facts that have not yet been
+localized into the reef repo.
+
+## Canonical Reef Surface
+
+Use `reef-railiance` as the canonical home for:
+
+- `declarations/reef.yaml`
+- `substrate/identity.yaml`
+- `substrate/topology.yaml`
+- `bindings/rails.yaml`
+- `bindings/rapps.yaml`
+- repo-local grouped-boundary docs, questions, and future reef-local runbooks
+
+New grouped-reef behavior, membership interpretation, hosted-rail stance, and
+future `rapp` binding decisions should land here first.
+
+## Retained S1 Surface
+
+Still owned by `railiance-infra`:
+
+- `inventory/servers.yaml` as the raw server identity source
+- Terraform/cloud-init/Ansible provisioning and convergence logic
+- generic OS hardening and substrate verification
+- canonical S1 docs such as `docs/reef-first-wave-source-map.md`
+- source-backed host facts that are still broader than the grouped home-reef
+  boundary
+
+## Current Compatibility Path
+
+Current operators do not need a flag day:
+
+1. Continue using `railiance-infra` for server provisioning, inventory edits,
+   SSH/bootstrap mechanics, and raw host-fact maintenance.
+2. Use `reef-railiance` for grouped home-reef identity, topology, hosted-rail
+   stance, and reef-local `rapp` binding decisions.
+3. When a raw server fact changes, update `railiance-infra` first, then refresh
+   the reef-local projection only where that fact affects the grouped reef
+   boundary.
+4. Keep unresolved grouped-membership or split criteria explicit in this repo
+   rather than forcing one permanent repo per server.
+
+## Exit Condition
+
+The migration window can end once the reef-specific interpretation no longer
+depends on broader S1 docs for routine operator understanding, and the
+remaining source-backed member facts needed by the grouped reef have been
+localized cleanly.

docs/source-import-plan.md

@@ -34,6 +34,19 @@ Do not import these into `reef-railiance` as part of wave 1:
 - generic Kubernetes runtime behavior
 - workload packaging or platform governance
 
+## Current Migration-Window Compatibility
+
+During wave 1:
+
+- `reef-railiance` is the canonical home for grouped home-reef identity,
+  topology, hosted-rail stance, and future `rapp` bindings
+- `railiance-infra` remains the canonical owner of raw inventory, provisioning,
+  and broader S1 source-backed host facts
+- raw host-fact changes should be made in `railiance-infra` first and then
+  projected here when they affect the grouped reef boundary
+
+See `docs/retained-s1-handoff.md` for the active handoff contract.
+
 ## Rule
 
 Imports into this repo should preserve the grouped home-reef boundary already

docs/wave-1-contract.md

@@ -52,6 +52,9 @@ Wave 1 `reef-railiance` must not assume:
 Until the extraction is complete, `railiance-infra` remains the canonical S1
 source of truth.
 
+The active migration-window compatibility rules live in
+`docs/retained-s1-handoff.md`.
+
 `reef-railiance` should become the durable grouped substrate home first. Only
 then should additional bindings, runbooks, and substrate-local overlays move
 here in a migration-safe sequence.

workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Bootstrap reef-railiance and import the wave-1 grouped substrate surface"
 domain: financials
 repo: reef-railiance
-status: active
+status: finished
 owner: codex
 topic_slug: railiance
 created: "2026-07-26"
@@ -79,7 +79,7 @@ and the operational substrate evidence from ADR-004.
 
 ```task
 id: REEF-RAILIANCE-WP-0001-T03
-status: wait
+status: done
 priority: medium
 state_hub_task_id: "c6365200-9e2b-4299-9464-0620d94aad2a"
 ```
@@ -93,6 +93,14 @@ Acceptance:
 - current operators do not need a flag day
 - the retained S1 surface stays narrow and temporary
 
+2026-07-26: Added `docs/retained-s1-handoff.md` to define the migration-window
+split with `railiance-infra`. `reef-railiance` is now the canonical home for
+the grouped home-reef identity, topology, hosted-rail stance, and future
+`rapp` bindings, while `railiance-infra` retains raw inventory, provisioning,
+and broader S1 source-backed host facts. `README.md`, `docs/README.md`,
+`docs/wave-1-contract.md`, `docs/source-import-plan.md`, and `SCOPE.md` now
+point operators at the explicit no-flag-day handoff.
+
 ## T04 - Register `reef-railiance` in State Hub and Fabric
 
 ```task