feat: add production capability foundations

docs/superpowers/plans/2026-07-28-redis-production-capability-foundation.md

@@ -31,10 +31,10 @@ idempotency, lease, session, and R2/R3 evidence remain separate implementation p
 - Create: `src/application-core/src/main/java/dev/caskeleton/application/cache/AuthoritativeAbsence.java`
 - Test: `src/application-core/src/test/java/dev/caskeleton/application/cache/CacheRegionContractTest.java`
 
-- [ ] Write a failing test for hit/negative/miss/unavailable distinctions and immutable metadata.
-- [ ] Verify RED with `./gradlew :application-core:test --tests '*CacheRegionContractTest'`.
-- [ ] Implement only framework-free values and ports.
-- [ ] Verify GREEN.
+- [x] Write a failing test for hit/negative/miss/unavailable distinctions and immutable metadata.
+- [x] Verify RED with `./gradlew :application-core:test --tests '*CacheRegionContractTest'`.
+- [x] Implement only framework-free values and ports.
+- [x] Verify GREEN.
 
 ### Task 2: Add canonical Redis physical keys
 
@@ -45,12 +45,12 @@ idempotency, lease, session, and R2/R3 evidence remain separate implementation p
 - Create: `src/adapter/outbound/cache-redis/src/main/java/dev/caskeleton/adapter/outbound/cache/redis/key/RedisKeyDigest.java`
 - Test: `src/adapter/outbound/cache-redis/src/test/java/dev/caskeleton/adapter/outbound/cache/redis/key/RedisKeyBuilderTest.java`
 
-- [ ] Write a failing test proving namespace isolation, one stable hash tag, bounded key bytes, and
+- [x] Write a failing test proving namespace isolation, one stable hash tag, bounded key bytes, and
   absence of raw sensitive resource identifiers.
-- [ ] Verify RED.
-- [ ] Implement SHA-256 for opaque IDs and HMAC-SHA-256 for sensitive scopes using defensive secret
+- [x] Verify RED.
+- [x] Implement SHA-256 for opaque IDs and HMAC-SHA-256 for sensitive scopes using defensive secret
   copies and length-prefixed component encoding.
-- [ ] Verify GREEN.
+- [x] Verify GREEN.
 
 ### Task 3: Add a typed, versioned atomic-program catalog
 
@@ -66,11 +66,11 @@ idempotency, lease, session, and R2/R3 evidence remain separate implementation p
 - Test: `src/adapter/outbound/cache-redis/src/test/java/dev/caskeleton/adapter/outbound/cache/redis/program/RedisProgramCatalogTest.java`
 - Test: `src/adapter/outbound/cache-redis/src/test/java/dev/caskeleton/adapter/outbound/cache/redis/program/RedisAtomicPrimitivesTest.java`
 
-- [ ] Write failing catalog and facade tests.
-- [ ] Verify RED.
-- [ ] Implement exact resource digest, key/argument bounds, typed status mapping, and no generic
+- [x] Write failing catalog and facade tests.
+- [x] Verify RED.
+- [x] Implement exact resource digest, key/argument bounds, typed status mapping, and no generic
   application-facing execution surface.
-- [ ] Verify GREEN.
+- [x] Verify GREEN.
 
 ### Task 4: Record exact readiness and verify
 
@@ -79,9 +79,9 @@ idempotency, lease, session, and R2/R3 evidence remain separate implementation p
 - Modify: `src/adapter/outbound/cache-redis/CLAUDE.md`
 - Modify: `docs/superpowers/specs/2026-07-26-redis-production-capability-design.md`
 
-- [ ] Mark only contract/key/program foundation as implemented and all real runtime/capability
+- [x] Mark only contract/key/program foundation as implemented and all real runtime/capability
   promotion as unimplemented.
-- [ ] Run:
+- [x] Run:
 
 ```bash
 cd src
@@ -89,5 +89,5 @@ cd src
 ./gradlew verifyCleanArchitectureDependencies --console=plain
 ```
 
-- [ ] Do not claim Redis cache R1/R2 until a real standalone service lane and codec/runtime evidence
+- [x] Do not claim Redis cache R1/R2 until a real standalone service lane and codec/runtime evidence
   exist.