Spec Spine

Frozen, hash-verifiable specs as the unit of governance. 222 markdown specs compile deterministically into per-spec JSON shards under .derived/spec-registry/by-spec/, read only through typed spec-spine registry subcommands.

Spec/code coupling gate

Every code path a spec claims (via typed establishes / extends / co_authority edges, projected to implements:) must change together with its owning spec, or CI fails before merge (spec 127). The corpus is collapse-proof under agentic editing.

The OPC cockpit

A local Tauri v2 plus React desktop where humans and agents share one governed surface: git context, semantic and structural analysis, snapshots, approval gates, and Factory pipeline visualization. It hosts the governed axiomregent MCP server with safety tiers and distributed worktree locks.

Governance certificate plus verifier

Every factory run emits a self-authenticating governance-certificate.json binding requirements hash, frozen Build Spec hash, and per-stage artifact hashes; make verify-certificate exits non-zero on tamper with a specific artifact-hash diagnostic. The verifier does not trust the producer.

The platform control plane

Rauthy OIDC identity (GitHub federated through Rauthy), deployd-api-rs scope-gated deployment orchestration over Helm, and the Encore.ts stagecraft SaaS for auth, projects, knowledge extraction, audit, and the Factory lifecycle API.

The two-phase Factory engine

Turns business documents into a frozen Build Spec through six sequential agent-driven stages (s0 through s5, with checkpoints), then fans out scaffolding (s6a through s6g) against a pluggable adapter, with verify-and-retry per step.