feat: add object storage production capability

2026-07-31 23:50:03 +09:00
parent b3add0162d
commit f0a6d1c8c8
427 changed files with 39930 additions and 699 deletions
@@ -0,0 +1,114 @@
+schema_version: 1
+claims:
+  - card_id: object-storage-managed-upload-single
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-managed-integrity
+    claimed_level: R1
+    evidence_revision: batch-b-local-r1
+    evidence_expires_on: ""
+    required_tasks:
+      - ":adapter:outbound:objectstorage:check"
+    limitations:
+      - single-process control CAS only; no multi-node linearizability
+      - fsync and atomic move tests do not prove power-loss durability
+      - local development provider is forbidden in production profiles
+
+  - card_id: object-storage-managed-upload-multipart
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-unimplemented
+    claimed_level: R0
+    evidence_revision: batch-b-contract-r0
+    evidence_expires_on: ""
+    required_tasks:
+      - ":application-core:check"
+    limitations:
+      - multipart publication protocol is not implemented
+
+  - card_id: object-storage-managed-download
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-managed-integrity
+    claimed_level: R1
+    evidence_revision: batch-b-local-r1
+    evidence_expires_on: ""
+    required_tasks:
+      - ":adapter:outbound:objectstorage:check"
+    limitations:
+      - local functional full and range reads are not production-provider qualification
+      - no multi-node or power-loss durability claim
+
+  - card_id: object-storage-direct-upload-single
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-unimplemented
+    claimed_level: R0
+    evidence_revision: batch-b-contract-r0
+    evidence_expires_on: ""
+    required_tasks:
+      - ":application-core:check"
+    limitations:
+      - direct grant provider and public inbound endpoint are not implemented
+
+  - card_id: object-storage-direct-upload-multipart
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-unimplemented
+    claimed_level: R0
+    evidence_revision: batch-b-contract-r0
+    evidence_expires_on: ""
+    required_tasks:
+      - ":application-core:check"
+    limitations:
+      - direct multipart session and public inbound endpoint are not implemented
+
+  - card_id: object-storage-direct-download
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-unimplemented
+    claimed_level: R0
+    evidence_revision: batch-b-contract-r0
+    evidence_expires_on: ""
+    required_tasks:
+      - ":application-core:check"
+    limitations:
+      - direct download grant and public inbound endpoint are not implemented
+
+  - card_id: object-storage-quarantine-publication
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-unimplemented
+    claimed_level: R0
+    evidence_revision: batch-b-contract-r0
+    evidence_expires_on: ""
+    required_tasks:
+      - ":application-core:check"
+    limitations:
+      - scanner handoff and verdict fencing are not implemented
+
+  - card_id: object-storage-retention
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-unimplemented
+    claimed_level: R0
+    evidence_revision: batch-b-contract-r0
+    evidence_expires_on: ""
+    required_tasks:
+      - ":application-core:check"
+    limitations:
+      - retention and legal-hold provider enforcement are not implemented
+      - privileged purge composition remains intentionally empty
+
+  - card_id: object-storage-reconciliation
+    provider_type: filesystem-local-dev
+    provider_version: jdk-21
+    destination_profile: local-unimplemented
+    claimed_level: R0
+    evidence_revision: batch-b-contract-r0
+    evidence_expires_on: ""
+    required_tasks:
+      - ":application-core:check"
+    limitations:
+      - local create resolution is single-process functional evidence only
+      - production response-loss and multi-node reconciliation are not implemented