Reframed the execution model end to end: ADR 0007 lands as accepted, and the old per-vertical Engine becomes a Bundle running on a universal trust spine with stages declared as data. The deploy gate moved from a state-machine edge to a capability invariant on mintCapability, which is the part I actually trust. Along the way the second real bundle (wedding coordination) shipped on the same spine, the per-item bundle discriminator replaced the per-process switch, the engine was renamed to Coder to kill a name collision, runtime became infra, and the data layer was inverted behind a Store port so prisma only shows up at the composition root. 38 commits, six new or rewritten ADRs, and a noticeable amount of OPEN-QUESTIONS getting crossed off.

38 commits across 1 repo (belo-works: 38). 90 files changed. Diff was truncated for summarization.