| Event log | Events are the sole write path for governed project, version, workflow, role, and prelabel state. Derived records can be rebuilt by replay. | No complete operator surface is published. |
| Decision and Ledger | Authorization writes allow and deny Decisions; attributable events link back through Ledger records. | Transport authentication remains a separate limitation. |
| Checkpoints and commits | Commits derive from checkpointed event history and carry both a commit identity and a content root. The two identities are intentionally distinct. | The content root now combines asset, instruction, label, project-metadata, review, taxonomy, and workflow roots; mask annotations enter it through the label root. |
| Branches | A branch points at history without copying the underlying source volume. | A branch name grants no permission. |
| Typed merge | Three-way merge reports typed conflicts for existence, class, position, review state, note, or asset identity and can route unresolved conflicts to adjudication. | Merge has no public client coverage today. |
| Router and workflow | One routing primitive handles assignment, review, consensus reading, gold checks, and adjudication eligibility. | The backend contract is not a published workflow editor. |
| Task and Job | A Task is routed work for a person or runner. A Job is a bounded machine-compute request with model and provenance fields. | These are contracts, not a queue-monitoring product. |
| Prelabel refusal | Risk-controlling calibration can end in a typed refusal before model invocation when the acceptable threshold set is empty. | The current inference path is a deterministic stub, not real model inference. |
