--- title: Queries design examination and final text examined_at: '2026-10-23' examiner: codex source_sha: services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1 react-console: baf6dae382d6f41dce976c7f848667ccc37e076f rhythm-v2-docs: f946bdcc118035206f18109fbf69cd8e9e785aaf branch: agent/platform-queries-test-exam-2 counts: artifacts_examined: 85 artifacts_rewritten: 85 domain_objects: 6 state_models: 14 workflows: 21 service_contracts: 5 screen_contracts: 18 decision_records: 20 inference_operations: 1 states: 64 transitions: 89 workflow_hops: 96 new_findings: 7 new_open_questions: 0 coverage: http_operations: covered: 121 total: 121 contract_entries: http: 121 internal_seams: 24 total: 145 table_definition_files: covered: 54 total: 54 physical_tables: covered: 55 total: 55 screen_surfaces: covered: 18 total: 18 deployed_state_machines: covered: 2 total: 2 queues: covered: 7 total: 7 work_queues: 3 dead_letter_queues: 4 scheduled_rules: covered: 9 total: 9 inference_tasks: covered: 1 total: 1 explicit_cited_files_verified: 171 source_checks: heads_match_pins: true pinned_explicit_files_missing: [] shared_library_basis: >- services-platform:package-lock.json; installed lock-pinned macroservice-snapshots, macroservice-schedules and macroservice-http distributions design_brief: path: briefs/design/platform-queries.brief.md presence: absent additional_instructions: unknown planning_approval: unknown; artifacts remain draft and the starting registry awaits approval live_api_or_model_tests: not run service_coverage: - module: queries http: 72 internal: 14 table_files: 25 physical_tables: 26 - module: explorer http: 12 internal: 0 table_files: 3 physical_tables: 3 - module: quick-search http: 7 internal: 4 table_files: 6 physical_tables: 6 - module: snapshots http: 11 internal: 4 table_files: 6 physical_tables: 6 - module: data-exports http: 19 internal: 2 table_files: 14 physical_tables: 14 queue_workflow_coverage: - queues: query exports and dead-letter queue workflow: WF-PFM-QRY-006 - queues: report renders and dead-letter queue workflow: WF-PFM-QRY-007 - queues: schedule deliveries and dead-letter queue workflow: WF-PFM-QRY-008 - queues: revalidation invocation dead-letter queue workflow: WF-PFM-QRY-010 state_machine_coverage: - name: Quick Search rebuild workflow: WF-PFM-QRY-016 - name: Snapshot attempt workflow: WF-PFM-QRY-018 inference_task_coverage: - task: queries.generate_query artifact: IOP-PFM-QRY-001 new_findings: - FND-PFM-QRY-044 - FND-PFM-QRY-045 - FND-PFM-QRY-046 - FND-PFM-QRY-047 - FND-PFM-QRY-048 - FND-PFM-QRY-049 - FND-PFM-QRY-050 preserved_values: - permanent artifact and invariant identifiers - planning artifacts - source revision pins - approval and intent values - decision origins - capability bindings - operation identifiers and methods - 'existing inference task, model and provider selection' verification_changes: - artifact: DOM-PFM-QRY-001 field: 'frontmatter.relationships[1].cardinality' before: one-to-one after: one-to-zero-or-one - artifact: DOM-PFM-QRY-001 field: 'frontmatter.invariants[3].source' before: 'services-platform:modules/queries/db/registered-query-objects.table.ts (retired_at)' after: >- services-platform:modules/queries/services/persistence/registered-query-objects.ts:retireRegisteredQueryObjectsExcept - artifact: DOM-PFM-QRY-001 field: 'frontmatter.invariants[4].source' before: >- services-platform:modules/queries/db/query-description-stamps.table.ts (platform.bump_query_description_stamp); modules/queries/services/describe/description-cache.ts after: >- services-platform:modules/queries/services/describe/resolve-query-model.ts:withCachedReads; modules/queries/services/persistence/query-description-stamps.ts:readQueryDescriptionStamps - artifact: DOM-PFM-QRY-001 field: 'frontmatter.invariants[7].source' before: >- services-platform:modules/queries/db/custom-query-table-versions.table.ts (immutability trigger of migration 0065) after: >- services-platform:db/migrations/0065_custom_query_tables.sql:custom_query_table_versions_immutable - artifact: DOM-PFM-QRY-002 field: 'frontmatter.invariants[9].source' before: 'services-platform:modules/explorer/db/explorer-navigation-sessions.table.ts' after: >- services-platform:modules/explorer/services/persistence/explorer-navigation-sessions.ts:readNavigationSession - artifact: DOM-PFM-QRY-002 field: 'frontmatter.invariants[11].provenance' before: documented after: observed - artifact: DOM-PFM-QRY-002 field: 'frontmatter.invariants[11].source' before: >- services-platform:docs/compliance/control-coverage.md#Component: queries-generate (TC-AZ-002, TC-AI-001) after: >- services-platform:modules/queries/services/generate/generated-query-outcome.ts; modules/queries/services/generate/run-generation.ts; modules/queries/services/persistence/query-generations.ts - artifact: DOM-PFM-QRY-004 field: 'frontmatter.invariants[1].enforced_at' before: - service - database after: - service - artifact: DOM-PFM-QRY-004 field: 'frontmatter.invariants[1].source' before: >- services-platform:modules/queries/db/query-exports.table.ts (query_exports_status_check, query_exports_failure_check) after: >- services-platform:modules/queries/services/persistence/query-exports.ts:startQueryExportRun, completeQueryExport, failQueryExport - artifact: DOM-PFM-QRY-005 field: 'frontmatter.invariants[0].source' before: >- services-platform:modules/quick-search/db/quick-search-index-states.table.ts (quick_search_index_states_generation_check); services/persistence/index-states.ts:activateGeneration after: >- services-platform:modules/quick-search/services/persistence/index-states.ts:activateGeneration; modules/quick-search/services/providers/algolia/filters.ts:accessFilter; modules/quick-search/services/providers/algolia/documents.ts:objectIdOf - artifact: DOM-PFM-QRY-006 field: 'frontmatter.invariants[1].provenance' before: documented after: observed - artifact: DOM-PFM-QRY-006 field: 'frontmatter.invariants[1].source' before: 'services-platform:docs/proposals/snapshot-architecture.md#13.2 Decisions' after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-run-workflow.js:advanceSnapshotRun - artifact: SCR-PFM-QRY-008 field: 'frontmatter.actions[5].permission' before: platform.reports.use after: >- platform.query-schedules.use (console); route also requires platform.queries.read and schedule use or manage; service requires platform.reports.use - artifact: SCR-PFM-QRY-009 field: frontmatter.component before: components dashboard-lab DashboardList (lib/dashboard-lab/catalog.ts) after: components/dashboard-lab/dashboard-list.tsx (DashboardList) - artifact: SCR-PFM-QRY-010 field: 'frontmatter.actions[3].permission' before: platform.reports.use after: >- platform.query-schedules.use (console); route also requires platform.queries.read and schedule use or manage; service requires platform.reports.use - artifact: SCR-PFM-QRY-010 field: frontmatter.component before: DashboardDesigner (lib/dashboard-lab/*) after: components/dashboard-lab/dashboard-designer.tsx (DashboardDesigner) - artifact: SCR-PFM-QRY-013 field: 'frontmatter.displays[1].source' before: getDataExportManifest after: getDataExportExecution (console detail model; incompatible with the pinned service envelope) - artifact: SCR-PFM-QRY-013 field: 'frontmatter.displays[2].source' before: getDataExportCoverage after: getDataExportExecution (console detail model; no separate coverage call) - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[6].source' before: >- services-platform:modules/queries/db/custom-query-table-versions.table.ts (immutability trigger of migration 0065) after: >- services-platform:db/migrations/0065_custom_query_tables.sql:custom_query_table_versions_immutable - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[7].provenance' before: null after: observed - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[7].source' before: null after: 'services-platform:modules/queries/services/custom-tables/custom-table-library.ts:restore' - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[8].provenance' before: null after: observed - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[8].source' before: null after: 'services-platform:modules/queries/services/custom-tables/custom-table-library.ts:deprecate' - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[9].provenance' before: null after: observed - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[9].source' before: null after: 'services-platform:modules/queries/services/custom-tables/custom-table-library.ts:deprecate' - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[10].provenance' before: null after: observed - artifact: STATE-PFM-QRY-001 field: 'frontmatter.transitions[10].source' before: null after: 'services-platform:modules/queries/services/custom-tables/custom-table-library.ts:disable' - artifact: STATE-PFM-QRY-006 field: 'frontmatter.transitions[5].provenance' before: documented after: observed - artifact: STATE-PFM-QRY-006 field: 'frontmatter.transitions[5].source' before: 'services-platform:docs/migrations/query-scheduling-exports/README.md#D11' after: >- services-platform:modules/queries/services/persistence/query-exports.ts:completeQueryExport; modules/queries/services/exports/query-export-library.ts - artifact: STATE-PFM-QRY-009 field: 'frontmatter.transitions[4].source' before: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:cancelDataExportExecution' after: 'services-platform:modules/data-exports/services/persistence/executions.ts:markCancelled' - artifact: STATE-PFM-QRY-011 field: 'frontmatter.transitions[2].source' before: 'services-platform:modules/data-exports/services/persistence/delivery-attempts.ts' after: 'services-platform:modules/data-exports/services/persistence/deliveries.ts:markDelivered' - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[5].provenance' before: documented after: observed - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[5].source' before: 'services-platform:docs/proposals/snapshot-architecture.md#13.2 Decisions' after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-run-workflow.js:advanceSnapshotRun - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[9].provenance' before: null after: observed - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[9].source' before: null after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-repository.js:cancelRun - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[10].provenance' before: null after: observed - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[10].source' before: null after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-repository.js:cancelRun - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[11].provenance' before: null after: observed - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[11].source' before: null after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-repository.js:cancelRun - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[12].provenance' before: null after: observed - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[12].source' before: null after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-repository.js:startRun - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[13].provenance' before: null after: observed - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[13].source' before: null after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-repository.js:startRun - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[14].provenance' before: null after: observed - artifact: STATE-PFM-QRY-014 field: 'frontmatter.transitions[14].source' before: null after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-repository.js:failRun - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[0].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[0].source' before: null after: 'services-platform:modules/data-exports/aws/api/coverage.routes.ts:getDataExportCoverage' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[1].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[1].source' before: null after: 'services-platform:modules/data-exports/aws/api/data-exports.routes.ts:getDataExportsHealth' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[2].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[2].source' before: null after: 'services-platform:modules/data-exports/aws/api/definitions.routes.ts:getDataExportDefinition' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[3].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[3].source' before: null after: 'services-platform:modules/data-exports/aws/api/definitions.routes.ts:saveDataExportDefinition' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[4].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[4].source' before: null after: 'services-platform:modules/data-exports/aws/api/definitions.routes.ts:addDataExportDestination' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[5].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[5].source' before: null after: >- services-platform:modules/data-exports/aws/api/definitions.routes.ts:updateDataExportDestination - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[6].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[6].source' before: null after: >- services-platform:modules/data-exports/aws/api/definitions.routes.ts:removeDataExportDestination - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[7].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[7].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:requestDataExportExecution' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[8].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[8].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:listDataExportExecutions' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[9].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[9].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:getDataExportExecution' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[10].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[10].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:getDataExportManifest' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[11].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[11].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:cancelDataExportExecution' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[12].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[12].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:downloadDataExportVolume' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[13].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[13].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:deleteDataExportArtifact' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[14].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[14].source' before: null after: 'services-platform:modules/data-exports/aws/api/executions.routes.ts:retryDataExportDelivery' - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[15].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[15].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[15].source' before: null after: >- services-platform:modules/data-exports/aws/api/hq-data-exports.routes.ts:listHqDataExportExecutions - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[16].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[16].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[16].source' before: null after: >- services-platform:modules/data-exports/aws/api/hq-data-exports.routes.ts:getHqDataExportCoverage - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[17].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[17].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[17].source' before: null after: >- services-platform:modules/data-exports/aws/api/hq-data-exports.routes.ts:getHqDataExportTenantCoverage - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[18].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[18].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[18].source' before: null after: >- services-platform:modules/data-exports/aws/api/hq-data-exports.routes.ts:getHqDataExportEntitlements - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[19].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[19].source' before: null after: >- services-platform at ad3f6a6: modules/data-exports/aws/api/*.routes.ts (imported), aws/logic/data-exports-api.lambda.ts, services/**, db/*.table.ts, data-exports.settings.ts; docs/data-exports.md; docs/proposals/tenant-data-export/ (decisions of 2026-10-18) - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[20].provenance' before: null after: observed - artifact: SVC-PFM-QRY-data-exports field: 'frontmatter.operations[20].source' before: null after: >- services-platform at ad3f6a6: modules/data-exports/aws/api/*.routes.ts (imported), aws/logic/data-exports-api.lambda.ts, services/**, db/*.table.ts, data-exports.settings.ts; docs/data-exports.md; docs/proposals/tenant-data-export/ (decisions of 2026-10-18) - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[0].permission' before: >- platform.explorer-views.use; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[0].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[0].source' before: null after: >- services-platform:modules/explorer/aws/api/explorer-navigation.routes.ts:startExplorerNavigation - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[1].permission' before: >- platform.explorer-views.use; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[1].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[1].source' before: null after: >- services-platform:modules/explorer/aws/api/explorer-navigation.routes.ts:selectExplorerRecordIds - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[2].permission' before: >- platform.explorer-views.use; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[2].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[2].source' before: null after: >- services-platform:modules/explorer/aws/api/explorer-navigation.routes.ts:readExplorerNavigation - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[3].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[3].source' before: null after: >- services-platform:modules/explorer/aws/api/explorer-preferences.routes.ts:getExplorerViewPreferences - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[4].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[4].source' before: null after: >- services-platform:modules/explorer/aws/api/explorer-preferences.routes.ts:putExplorerViewPreferences - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[5].permission' before: >- platform.explorer-views.use; decided in the service from platform.explorer-views.share, platform.explorer-views.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[5].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[5].source' before: null after: 'services-platform:modules/explorer/aws/api/explorer-views.routes.ts:createExplorerView' - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[6].permission' before: >- platform.explorer-views.use; decided in the service from platform.explorer-views.share, platform.explorer-views.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[6].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[6].source' before: null after: 'services-platform:modules/explorer/aws/api/explorer-views.routes.ts:listExplorerViews' - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[7].permission' before: >- platform.explorer-views.use; decided in the service from platform.explorer-views.share, platform.explorer-views.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[7].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[7].source' before: null after: 'services-platform:modules/explorer/aws/api/explorer-views.routes.ts:getExplorerView' - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[8].permission' before: >- platform.explorer-views.use; decided in the service from platform.explorer-views.share, platform.explorer-views.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[8].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[8].source' before: null after: 'services-platform:modules/explorer/aws/api/explorer-views.routes.ts:updateExplorerView' - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[9].permission' before: >- platform.explorer-views.use; decided in the service from platform.explorer-views.share, platform.explorer-views.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[9].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[9].source' before: null after: 'services-platform:modules/explorer/aws/api/explorer-views.routes.ts:patchExplorerView' - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[10].permission' before: >- platform.explorer-views.use; decided in the service from platform.explorer-views.share, platform.explorer-views.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.explorer-views.use - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[10].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[10].source' before: null after: 'services-platform:modules/explorer/aws/api/explorer-views.routes.ts:deleteExplorerView' - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[11].provenance' before: null after: observed - artifact: SVC-PFM-QRY-explorer field: 'frontmatter.operations[11].source' before: null after: 'services-platform:modules/explorer/aws/api/explorer.routes.ts:healthRoute' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[0].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[0].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[0].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:createCustomQueryTable' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[1].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[1].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[1].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:listCustomQueryTables' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[2].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[2].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[2].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:revalidateCustomQueryTables' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[3].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[3].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[3].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:getCustomQueryTable' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[4].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[4].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[4].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:updateCustomQueryTable' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[5].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[5].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[5].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:saveCustomQueryTableDraft' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[6].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[6].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[6].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:analyzeCustomQueryTableDraft' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[7].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[7].permission' before: >- hq.custom-query-tables.author; plus submissions.submissions.query, submissions.stage-runs.query, submissions.review-assignments.query, submissions.review-responses.query, submissions.submission-decisions.query, submissions.workflow-action-runs.query, submissions.workflow-timers.query, submissions.contribution-requests.query, submissions.contribution-responses.query checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: hq.custom-query-tables.author - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[7].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[7].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:previewCustomQueryTable' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[8].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[8].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[8].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:publishCustomQueryTable' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[9].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[9].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[9].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:listCustomQueryTableVersions' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[10].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[10].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[10].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:getCustomQueryTableVersion' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[11].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[11].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[11].source' before: null after: >- services-platform:modules/queries/aws/api/custom-tables.routes.ts:listCustomQueryTableAssignments - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[12].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[12].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[12].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:assignCustomQueryTable' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[13].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[13].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[13].source' before: null after: >- services-platform:modules/queries/aws/api/custom-tables.routes.ts:pinCustomQueryTableAssignment - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[14].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[14].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[14].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:unassignCustomQueryTable' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[15].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[15].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[15].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:getCustomQueryTableUsage' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[16].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[16].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[16].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:listCustomQueryTableEvents' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[17].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[17].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[17].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:lifecycleRoutes' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[18].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[18].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[18].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:lifecycleRoutes' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[19].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[19].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[19].source' before: null after: 'services-platform:modules/queries/aws/api/custom-tables.routes.ts:lifecycleRoutes' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[20].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[20].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:healthRoute' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[21].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[21].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[21].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:listQueryDatasets' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[22].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[22].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[22].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:describeQueryDataset' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[23].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[23].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[23].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:runDatasetQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[24].permission' before: >- platform.queries.generate; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.generate - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[24].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[24].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:generateDatasetQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[25].permission' before: >- platform.queries.generate; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.generate - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[25].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[25].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:getQueryGeneration' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[26].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[26].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[26].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:validateDatasetQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[27].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[27].source' before: null after: 'services-platform:modules/queries/aws/api/queries.routes.ts:resolveDateExpressions' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[28].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[28].permission' before: >- hq.queries.read; plus hq.customers.read, hq.tenants.read, hq.jobs.read, hq.staff.read, hq.llm-usage.read checked in the service after: hq.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[28].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[28].source' before: null after: 'services-platform:modules/queries/aws/api/system-queries.routes.ts:listSystemQueryDatasets' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[29].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[29].permission' before: >- hq.queries.read; plus hq.customers.read, hq.tenants.read, hq.jobs.read, hq.staff.read, hq.llm-usage.read checked in the service after: hq.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[29].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[29].source' before: null after: 'services-platform:modules/queries/aws/api/system-queries.routes.ts:describeSystemQueryDataset' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[30].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[30].permission' before: >- hq.queries.read; plus hq.customers.read, hq.tenants.read, hq.jobs.read, hq.staff.read, hq.llm-usage.read checked in the service after: hq.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[30].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[30].source' before: null after: 'services-platform:modules/queries/aws/api/system-queries.routes.ts:runSystemDatasetQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[31].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[31].permission' before: >- hq.queries.read; plus hq.customers.read, hq.tenants.read, hq.jobs.read, hq.staff.read, hq.llm-usage.read checked in the service after: hq.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[31].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[31].source' before: null after: 'services-platform:modules/queries/aws/api/system-queries.routes.ts:validateSystemDatasetQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[32].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[32].permission' before: >- hq.queries.read; plus hq.customers.read, hq.tenants.read, hq.jobs.read, hq.staff.read, hq.llm-usage.read checked in the service after: hq.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[32].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[32].source' before: null after: 'services-platform:modules/queries/aws/api/system-queries.routes.ts:listSystemQueryRecipes' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[33].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[33].permission' before: >- hq.queries.read; plus hq.customers.read, hq.tenants.read, hq.jobs.read, hq.staff.read, hq.llm-usage.read checked in the service after: hq.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[33].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[33].source' before: null after: 'services-platform:modules/queries/aws/api/system-queries.routes.ts:getSystemQueryRecipe' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[34].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[34].permission' before: >- hq.queries.read; plus hq.customers.read, hq.tenants.read, hq.jobs.read, hq.staff.read, hq.llm-usage.read checked in the service after: hq.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[34].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[34].source' before: null after: >- services-platform:modules/queries/aws/api/system-queries.routes.ts:createSystemQueryRecipeDraft - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[35].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[35].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[35].source' before: null after: 'services-platform:modules/queries/aws/api/query-recipes.routes.ts:listQueryRecipes' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[36].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[36].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[36].source' before: null after: 'services-platform:modules/queries/aws/api/query-recipes.routes.ts:getQueryRecipe' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[37].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[37].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[37].source' before: null after: 'services-platform:modules/queries/aws/api/query-recipes.routes.ts:createQueryRecipeDraft' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[38].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[38].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[38].source' before: null after: 'services-platform:modules/queries/aws/api/query-recipes.routes.ts:runQueryRecipe' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[39].permission' before: >- platform.saved-queries.use; decided in the service from platform.saved-queries.share, platform.saved-queries.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.saved-queries.use - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[39].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[39].source' before: null after: 'services-platform:modules/queries/aws/api/saved-queries.routes.ts:createSavedQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[40].permission' before: >- platform.saved-queries.read; decided in the service from platform.saved-queries.share, platform.saved-queries.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.saved-queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[40].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[40].source' before: null after: 'services-platform:modules/queries/aws/api/saved-queries.routes.ts:listSavedQueries' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[41].permission' before: >- platform.saved-queries.read; decided in the service from platform.saved-queries.share, platform.saved-queries.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.saved-queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[41].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[41].source' before: null after: 'services-platform:modules/queries/aws/api/saved-queries.routes.ts:getSavedQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[42].permission' before: >- platform.saved-queries.use; decided in the service from platform.saved-queries.share, platform.saved-queries.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.saved-queries.use - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[42].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[42].source' before: null after: 'services-platform:modules/queries/aws/api/saved-queries.routes.ts:updateSavedQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[43].permission' before: >- platform.saved-queries.use; decided in the service from platform.saved-queries.share, platform.saved-queries.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.saved-queries.use - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[43].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[43].source' before: null after: 'services-platform:modules/queries/aws/api/saved-queries.routes.ts:deleteSavedQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[44].permission' before: >- platform.saved-queries.read; decided in the service from platform.saved-queries.share, platform.saved-queries.manage; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.saved-queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[44].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[44].source' before: null after: 'services-platform:modules/queries/aws/api/saved-queries.routes.ts:runSavedQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[45].permission' before: >- platform.reports.use; decided in the service from platform.reports.share, platform.reports.manage; plus platform.saved-queries.use, platform.saved-queries.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.reports.use - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[45].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[45].source' before: null after: 'services-platform:modules/queries/aws/api/reports.routes.ts:createReport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[46].permission' before: >- platform.reports.read; decided in the service from platform.reports.use, platform.reports.share, platform.reports.manage; plus platform.saved-queries.read, platform.saved-queries.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.reports.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[46].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[46].source' before: null after: 'services-platform:modules/queries/aws/api/reports.routes.ts:listReports' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[47].permission' before: >- platform.reports.read; decided in the service from platform.reports.use, platform.reports.share, platform.reports.manage; plus platform.saved-queries.read, platform.saved-queries.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.reports.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[47].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[47].source' before: null after: 'services-platform:modules/queries/aws/api/reports.routes.ts:getReport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[48].permission' before: >- platform.reports.use; decided in the service from platform.reports.share, platform.reports.manage; plus platform.saved-queries.use, platform.saved-queries.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.reports.use - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[48].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[48].source' before: null after: 'services-platform:modules/queries/aws/api/reports.routes.ts:updateReport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[49].permission' before: >- platform.reports.use; decided in the service from platform.reports.share, platform.reports.manage; plus platform.saved-queries.use, platform.saved-queries.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.reports.use - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[49].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[49].source' before: null after: 'services-platform:modules/queries/aws/api/reports.routes.ts:deleteReport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[50].permission' before: >- platform.reports.use; decided in the service from platform.reports.share, platform.reports.manage; plus platform.saved-queries.use, platform.saved-queries.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.reports.use - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[50].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[50].source' before: null after: 'services-platform:modules/queries/aws/api/reports.routes.ts:startReportExport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[51].permission' before: >- platform.queries.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[51].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[51].source' before: null after: 'services-platform:modules/queries/aws/api/query-exports.routes.ts:startQueryExport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[52].permission' before: >- platform.queries.read; plus platform.query-schedules.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[52].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[52].source' before: null after: 'services-platform:modules/queries/aws/api/query-exports.routes.ts:getQueryExport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[53].permission' before: >- platform.queries.read; plus platform.query-schedules.manage checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[53].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[53].source' before: null after: 'services-platform:modules/queries/aws/api/query-exports.routes.ts:downloadQueryExport' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[54].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[54].source' before: null after: 'services-platform:modules/queries/aws/api/query-exports.routes.ts:downloadQueryExportByLink' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[55].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[55].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[55].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:listQuerySchedules' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[56].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[56].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[56].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:createQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[57].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[57].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[57].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:getQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[58].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[58].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[58].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:replaceQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[59].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[59].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[59].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:deleteQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[60].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[60].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[60].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:duplicateQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[61].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[61].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[61].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:pauseQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[62].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[62].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[62].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:resumeQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[63].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[63].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[63].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:runQueryScheduleNow' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[64].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[64].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[64].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:takeQueryScheduleOwnership' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[65].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[65].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[65].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:useLatestScheduleQuery' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[66].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[66].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[66].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:getScheduleQueryChanges' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[67].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[67].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[67].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:listQueryScheduleRuns' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[68].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[68].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[68].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:previewQuerySchedule' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[69].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[69].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[69].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:listDeliveryTemplates' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[70].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[70].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[70].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:getDeliveryTemplateStarter' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[71].permission' before: >- platform.queries.read; plus platform.query-schedules.use, platform.query-schedules.manage, platform.query-schedules.external-recipients, platform.reports.use, platform.reports.share, platform.reports.manage, platform.saved-queries.use checked in the service; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.queries.read AND (platform.query-schedules.use OR platform.query-schedules.manage) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[71].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[71].source' before: null after: 'services-platform:modules/queries/aws/api/query-schedules.routes.ts:findRecipientUsers' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[72].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[72].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[73].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[73].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[74].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[74].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[75].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[75].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[76].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[76].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[77].permission' before: 'none: queue consumer; the requester''s grants are rebuilt' after: 'none: queue consumer' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[77].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[77].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[78].permission' before: 'none: queue consumer; the requester''s grants are rebuilt per request' after: 'none: queue consumer' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[78].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[78].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[79].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[79].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[80].permission' before: 'none: queue consumer; the owner''s (or Run Now caller''s) grants are rebuilt' after: 'none: queue consumer' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[80].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[80].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[81].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[81].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[82].permission' before: 'none: IAM invoke grant to the accounting role; the named person''s grants are rebuilt' after: 'none: IAM invoke grant to the accounting role' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[82].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[82].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[83].permission' before: 'none: IAM invoke grant to the marketing role; the named person''s grants are rebuilt' after: 'none: IAM invoke grant to the marketing role' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[83].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[83].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[84].permission' before: 'none: system execution only; a user caller is refused' after: 'none: system execution only' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[84].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[84].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[85].permission' before: 'none: the execution context''s own grants decide; system executions hold every power' after: 'none: the execution context''s own grants decide' - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[85].provenance' before: null after: observed - artifact: SVC-PFM-QRY-queries field: 'frontmatter.operations[85].source' before: null after: >- services-platform at ad3f6a6: modules/queries/aws/api/*.routes.ts (route declarations, extracted by importing the route arrays), aws/logic/*.lambda.ts, aws/resources/*.ts, services/**, db/*.table.ts; aws/platform.service.ts (permission groups) - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[0].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[0].source' before: null after: 'services-platform:modules/quick-search/aws/api/quick-search.routes.ts:getQuickSearchHealth' - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[1].permission' before: >- platform.quick-search.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.quick-search.read - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[1].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[1].source' before: null after: 'services-platform:modules/quick-search/aws/api/quick-search.routes.ts:issueQuickSearchAccess' - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[2].permission' before: >- platform.quick-search-settings.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.quick-search-settings.read - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[2].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[2].source' before: null after: >- services-platform:modules/quick-search/aws/api/quick-search.routes.ts:listQuickSearchConfigurations - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[3].permission' before: >- platform.quick-search-settings.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.quick-search-settings.read - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[3].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[3].source' before: null after: >- services-platform:modules/quick-search/aws/api/quick-search.routes.ts:getQuickSearchConfiguration - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[4].permission' before: >- platform.quick-search-settings.read; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.quick-search-settings.read - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[4].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[4].source' before: null after: 'services-platform:modules/quick-search/aws/api/quick-search.routes.ts:listQuickSearchFields' - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[5].permission' before: >- platform.quick-search-settings.update; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.quick-search-settings.update - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[5].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[5].source' before: null after: >- services-platform:modules/quick-search/aws/api/quick-search.routes.ts:replaceQuickSearchConfiguration - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[6].permission' before: >- platform.quick-search-settings.rebuild; plus each dataset's own query key (scoped custom-record query for custom objects), checked in the service after: platform.quick-search-settings.rebuild - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[6].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[6].source' before: null after: 'services-platform:modules/quick-search/aws/api/quick-search.routes.ts:rebuildQuickSearchIndex' - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[7].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[7].source' before: null after: >- services-platform at ad3f6a6: modules/quick-search/aws/api/quick-search.routes.ts (imported), aws/logic/*.ts, services/**, registry/record-types.ts, db/*.table.ts; docs/quick-search.md; docs/proposals/quick-search.md (approved 2026-10-09) - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[8].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[8].source' before: null after: >- services-platform at ad3f6a6: modules/quick-search/aws/api/quick-search.routes.ts (imported), aws/logic/*.ts, services/**, registry/record-types.ts, db/*.table.ts; docs/quick-search.md; docs/proposals/quick-search.md (approved 2026-10-09) - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[9].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[9].source' before: null after: >- services-platform at ad3f6a6: modules/quick-search/aws/api/quick-search.routes.ts (imported), aws/logic/*.ts, services/**, registry/record-types.ts, db/*.table.ts; docs/quick-search.md; docs/proposals/quick-search.md (approved 2026-10-09) - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[10].provenance' before: null after: observed - artifact: SVC-PFM-QRY-quick-search field: 'frontmatter.operations[10].source' before: null after: >- services-platform at ad3f6a6: modules/quick-search/aws/api/quick-search.routes.ts (imported), aws/logic/*.ts, services/**, registry/record-types.ts, db/*.table.ts; docs/quick-search.md; docs/proposals/quick-search.md (approved 2026-10-09) - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[0].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[0].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:healthRoute' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[1].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[1].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[1].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:listSnapshotRunsInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[2].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[2].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[2].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:getSnapshotRunInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[3].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[3].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[3].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:getSnapshotPeriodStatusInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[4].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[4].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[4].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:listOverdueSnapshotRunsInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[5].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[5].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[5].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:requestSnapshotRunInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[6].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[6].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[6].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:requestSnapshotBackfillInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[7].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[7].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[7].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:listSnapshotPoliciesInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[8].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[8].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[8].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:putSnapshotPolicyInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[9].access' before: console (Rhythm HQ system route) after: system - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[9].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[9].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:deleteSnapshotPolicyInHq' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[10].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[10].source' before: null after: 'services-platform:modules/snapshots/aws/api/snapshots.routes.ts:listSnapshotPeriods' - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[11].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[11].source' before: null after: >- services-platform at ad3f6a6: modules/snapshots/aws/api/snapshots.routes.ts (imported), aws/logic/*.ts, aws/snapshots.configuration.ts, services/**, db/*.table.ts; @rhythmsoftware/macroservice-snapshots; docs/snapshots/README.md; docs/proposals/snapshot-architecture.md (approved 2026-10-15) - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[12].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[12].source' before: null after: >- services-platform at ad3f6a6: modules/snapshots/aws/api/snapshots.routes.ts (imported), aws/logic/*.ts, aws/snapshots.configuration.ts, services/**, db/*.table.ts; @rhythmsoftware/macroservice-snapshots; docs/snapshots/README.md; docs/proposals/snapshot-architecture.md (approved 2026-10-15) - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[13].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[13].source' before: null after: >- services-platform at ad3f6a6: modules/snapshots/aws/api/snapshots.routes.ts (imported), aws/logic/*.ts, aws/snapshots.configuration.ts, services/**, db/*.table.ts; @rhythmsoftware/macroservice-snapshots; docs/snapshots/README.md; docs/proposals/snapshot-architecture.md (approved 2026-10-15) - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[14].provenance' before: null after: observed - artifact: SVC-PFM-QRY-snapshots field: 'frontmatter.operations[14].source' before: null after: >- services-platform at ad3f6a6: modules/snapshots/aws/api/snapshots.routes.ts (imported), aws/logic/*.ts, aws/snapshots.configuration.ts, services/**, db/*.table.ts; @rhythmsoftware/macroservice-snapshots; docs/snapshots/README.md; docs/proposals/snapshot-architecture.md (approved 2026-10-15) - artifact: WF-PFM-QRY-001 field: 'frontmatter.hops[4].anchor' before: null after: >- services-platform:modules/queries/services/registration/register-query-application.ts:registerQueryApplication - artifact: WF-PFM-QRY-001 field: 'frontmatter.hops[4].provenance' before: null after: observed - artifact: WF-PFM-QRY-001 field: 'frontmatter.hops[4].source' before: null after: >- services-platform:modules/quick-search/services/configuration/degrade-fields.ts:degradeRetiredFields - artifact: WF-PFM-QRY-018 field: 'frontmatter.hops[3].source' before: 'services-platform:modules/snapshots/services/runs/snapshot-run-workflow.ts' after: >- services-platform:node_modules/@rhythmsoftware/macroservice-snapshots/dist/snapshot-run-workflow.js:advanceSnapshotRun evidence: - >- rhythm-v2-docs:AGENTS.md; specs/CONVENTIONS.md; specs/templates; specs/platform/queries/MODULE.md; specs/platform/queries/planning; specs/platform/queries/FINDINGS.md - >- services-platform:modules/queries; modules/explorer; modules/quick-search; modules/snapshots; modules/data-exports; aws/platform.service.ts - >- services-platform:docs/migrations/query-scheduling-exports/README.md; docs/proposals/snapshot-architecture.md; docs/proposals/quick-search.md; docs/milestones/plans/RPT-M1-plan.md; docs/standards/record-write-contracts.md; docs/llm/llm-foundation-and-generate-query.md - >- react-console:components/queries; components/reporting; components/dashboard-lab; components/custom-query-tables; components/data-management/data-exports; components/console/quick-search; lib/api/data-exports; lib/auth/api.ts; lib/layout/page-width.ts validation: dependency_install: npm ci passed corpus_check: npm run check passed with zero errors corpus_tests: 'npm test passed: four tests, zero failures' source_runtime_tests: not run; examination and source-contract comparison were static --- # Queries design examination ## Examination scope The examination covers all eighty-five design artifacts and the Queries responsibility row. Source heads match their pinned revisions; explicit cited files exist at those revisions, with shared-library behavior checked from the lock-pinned distributions. Product records establish individual decisions, but the planning layer remains a draft baseline awaiting Andrew’s approval and the requested design brief is absent. Verification corrections were committed before the separate artifact wording commits. Every prose section and descriptive row was rewritten by OpenAI; the final audit found no unchanged prose sentences in the artifact bodies or retained descriptive fields. Identifiers, intent, approval values and planning content were preserved, with corrected technical metadata listed above. ## Coverage | Surface | Covered | Total | Qualification | |---|---:|---:|---| | HTTP operations | 121 | 121 | Includes generated health reads and custom-table availability setters | | Internal contract entries | 24 | 24 | Service invocation, worker and in-process seams; not additional HTTP routes | | Table definition files | 54 | 54 | The registered-object file also declares the application table | | Scoped physical tables | 55 | 55 | Includes shared ledger and job tables; excludes read-only Metadata and provider storage | | Screen surfaces | 18 | 18 | Includes header lookup, print rendering and two staff authoring screens | | Deployed state machines | 2 | 2 | Search rebuild and snapshot attempt; workspace export generation remains undeployed | | Queues | 7 | 7 | Three processing queues and four dead-letter queues | | Scheduled rules | 9 | 9 | Dispatch, reconciliation, maintenance and planning | | Model tasks | 1 | 1 | One existing inference operation; no additional model task was found | The lifecycle review checks sixty-four state descriptions and eighty-nine transition rows. Workflow review checks ninety-six anchored hops, including alternative entries and unfinished boundaries. Contract coverage describes static declarations and does not certify successful deployed journeys or passing source-repository integration tests. ## Changes by artifact Every row includes a final-text rewrite in a dedicated commit. The result column distinguishes corrected guarantees from verified retained boundaries. | Artifact | Examination result | |---|---| | `ADR-PFM-QRY-001` | Retained the recorded five-service concept boundary and the proposed package concept split. | | `ADR-PFM-QRY-002` | Narrowed the common-query-interface claim to permit owner-specific snapshot generation. | | `ADR-PFM-QRY-003` | Distinguished person-requested work from service maintenance and staff validation. | | `ADR-PFM-QRY-004` | Removed the blanket prohibition on specialized database execution. | | `ADR-PFM-QRY-005` | Distinguished deployed jobs and queue work from registered-only workspace generation. | | `ADR-PFM-QRY-006` | Checked pinned query and current-report delivery against the existing decision origin. | | `ADR-PFM-QRY-007` | Checked refusal settlement, configured retries and retained external effects. | | `ADR-PFM-QRY-008` | Checked locked-source audience enforcement against the existing approved decision. | | `ADR-PFM-QRY-009` | Retained the planning finding about audiences rather than introducing lifecycle approval. | | `ADR-PFM-QRY-010` | Removed the claim that a failed rebuild cannot degrade live lookup. | | `ADR-PFM-QRY-011` | Preserved the existing organization gate dispute without answering its open question. | | `ADR-PFM-QRY-012` | Qualified final publication with earlier chunk staging. | | `ADR-PFM-QRY-013` | Described queued blockage without treating deployed admission as product approval. | | `ADR-PFM-QRY-014` | Preserved the existing production validation configuration decision. | | `ADR-PFM-QRY-015` | Corrected bounded test execution and stored explanatory model outcomes. | | `ADR-PFM-QRY-016` | Checked write-version requirements while preserving their recorded origin. | | `ADR-PFM-QRY-017` | Qualified stamp-key caching with the unresolved read-isolation gap. | | `ADR-PFM-QRY-018` | Qualified ordering to the bounded stored identity window. | | `ADR-PFM-QRY-019` | Checked absent module custom-field declarations and source capability filtering. | | `ADR-PFM-QRY-020` | Retained unpublished status for all operations and their explicit intake rationale. | | `DOM-PFM-QRY-001` | Corrected optional index cardinality, description-read isolation and retirement and immutability evidence. | | `DOM-PFM-QRY-002` | Corrected generation content retention and navigation-read evidence; retained the Explorer facet boundary. | | `DOM-PFM-QRY-003` | Checked presentation kinds, source ownership, audience locking and version checks. | | `DOM-PFM-QRY-004` | Corrected completion-based file expiry, service-enforced transitions and unfinished package side effects. | | `DOM-PFM-QRY-005` | Separated ledger activation from provider document visibility and retained write-claim ordering. | | `DOM-PFM-QRY-006` | Qualified publication atomicity for committed chunks and preserved owner-restricted ledger access. | | `IOP-PFM-QRY-001` | Rewrote responsibilities, bounded context, output and failure contracts; distinguished semantic expectations from executable smoke assertions. | | `SCR-PFM-QRY-001` | Checked library actions, write powers, filters and schedule entry. | | `SCR-PFM-QRY-002` | Checked recurrence row actions and the editor dialog entry. | | `SCR-PFM-QRY-003` | Checked query execution and assisted-drafting calls, metadata and error states. | | `SCR-PFM-QRY-004` | Checked saved-query execution, refinement, sharing and version conflict behavior. | | `SCR-PFM-QRY-005` | Checked recurrence preview, recipient lookup and dialog behavior; retained the combined service gate. | | `SCR-PFM-QRY-006` | Checked schedule history, query refresh, ownership and legacy resume states. | | `SCR-PFM-QRY-007` | Corrected full-width layout, removed nonexistent copy action and pagination pattern, and added the actual dashboard creation action. | | `SCR-PFM-QRY-008` | Corrected schedule-use console gating and retained independent source-data access. | | `SCR-PFM-QRY-009` | Corrected component and full-width card patterns; removed nonexistent list deletion. | | `SCR-PFM-QRY-010` | Corrected component, default full width and schedule-use console gate. | | `SCR-PFM-QRY-011` | Removed the invented export-start UI action; retained Excel as renderer protocol. | | `SCR-PFM-QRY-012` | Corrected layout and documented the incompatible history and settings envelopes. | | `SCR-PFM-QRY-013` | Corrected display sources and layout; documented incompatible detail shape and unfinished actions. | | `SCR-PFM-QRY-014` | Corrected layout and documented missing version and undeclared schedule and picker integration. | | `SCR-PFM-QRY-015` | Preserved the demonstration-data defect and corrected direct full-width page description. | | `SCR-PFM-QRY-016` | Removed the false credential-operation mapping for the inactive toggle. | | `SCR-PFM-QRY-017` | Checked staff gate, creation and default full-width layout. | | `SCR-PFM-QRY-018` | Checked authoring tabs, guards, acknowledgements and absent validation configuration. | | `STATE-PFM-QRY-001` | Added availability setters from all starting statuses, including repeated setters; corrected immutable-version evidence. | | `STATE-PFM-QRY-002` | Checked retained retirement and reactivation after complete manifest validation. | | `STATE-PFM-QRY-003` | Corrected successful outcome variants, coded abandonment and explanatory model content. | | `STATE-PFM-QRY-004` | Checked recipe retirement and version-change validation without altering independent drafts. | | `STATE-PFM-QRY-005` | Qualified window stability and corrected the retained-window side-effect text. | | `STATE-PFM-QRY-006` | Corrected expiry and avoided equating failed status with complete physical cleanup. | | `STATE-PFM-QRY-007` | Qualified already-queued work and the legacy-disable acknowledgement. | | `STATE-PFM-QRY-008` | Allowed failed runs to retain partial recipient delivery. | | `STATE-PFM-QRY-009` | Distinguished locked persistence transitions from undeployed dispatcher and package creation. | | `STATE-PFM-QRY-010` | Removed claims that the status helper checks the deadline or deletes bytes and deliveries. | | `STATE-PFM-QRY-011` | Separated delivery status, attempt insertion and replacement creation. | | `STATE-PFM-QRY-012` | Distinguished omitted datasets property from an explicit empty declaration list. | | `STATE-PFM-QRY-013` | Corrected initial and rebuilding visibility and retained the compare-and-set ledger guard. | | `STATE-PFM-QRY-014` | Added resume and cancellation edges and corrected final-validation rollback for staged chunks. | | `SVC-PFM-QRY-data-exports` | Annotated routes, unfinished responses, temporary binding rollback limits and undeployed orchestration. | | `SVC-PFM-QRY-explorer` | Annotated exact routes and separated temporary windows from immutable full results. | | `SVC-PFM-QRY-queries` | Annotated route sources and provenance, corrected system access and all schedule helper gates, and qualified cache isolation. | | `SVC-PFM-QRY-quick-search` | Annotated routes and corrected generation visibility and eventual permission withdrawal. | | `SVC-PFM-QRY-snapshots` | Annotated hosted routes, generated health identity and final-transaction versus chunk guarantees. | | `WF-PFM-QRY-001` | Corrected custom-field warnings and the post-commit search degradation boundary. | | `WF-PFM-QRY-002` | Checked validation, version checks and transactional recipe release. | | `WF-PFM-QRY-003` | Removed the unsupported common-snapshot guarantee across stamp and metadata reads. | | `WF-PFM-QRY-004` | Corrected dictionary pruning, defaulting order, outcome storage and bounded test execution. | | `WF-PFM-QRY-005` | Qualified bounded reconciliation rather than promising every row is handled in one pass. | | `WF-PFM-QRY-006` | Qualified redelivery and upload cleanup; retained original-key restart and completion expiry. | | `WF-PFM-QRY-007` | Checked intercepted requester access, readiness, format bounds and asynchronous settlement. | | `WF-PFM-QRY-008` | Retained partial deliveries and late renderer completion after run failure. | | `WF-PFM-QRY-009` | Checked SQL analysis, dependency acknowledgements, release transaction and separate assignments. | | `WF-PFM-QRY-010` | Retained the absent production validation workspace and bounded scheduled pass. | | `WF-PFM-QRY-011` | Checked report-removal transaction, schedule pause and retained completed files. | | `WF-PFM-QRY-012` | Removed the promise that cursor retry returns unchanged records. | | `WF-PFM-QRY-013` | Corrected edge-read mutation and optional recipe input; retained independent bulk-action ownership. | | `WF-PFM-QRY-014` | Recorded provisioning that can commit before credential issue fails. | | `WF-PFM-QRY-015` | Corrected projection into one target-generation document rather than parallel generation copies. | | `WF-PFM-QRY-016` | Removed invisible-partial-generation and automatic old-document restoration claims. | | `WF-PFM-QRY-017` | Checked maintenance schedules, repair bounds and provider-first tombstone cleanup. | | `WF-PFM-QRY-018` | Corrected chunk staging, final validation and attempt retry boundaries. | | `WF-PFM-QRY-019` | Retained indefinite queued admission and the absent generation dispatcher. | | `WF-PFM-QRY-020` | Corrected absent-versus-empty declarations and nonblocking coverage conflict handling. | | `WF-PFM-QRY-021` | Retained external file retention after row purge and separate lifecycle operation branches. | The responsibility row now exposes the same operation names as the service contracts and distinguishes produced messages from consumed signals. Its prose separates requester access from system execution and retains the service owners for Explorer and complete workspace packages. The registry records design examination without approving the planning baseline. ## Open disagreements and proof gaps Search rebuild publication does not isolate old provider documents: replacements become visible before ledger activation. Andrew must decide whether gradual convergence is acceptable or whether the planned old-generation visibility promise requires implementation work. The earlier organization-lookup access dispute also remains unanswered. Snapshot final validation preserves the previous published version, but chunked runs can retain committed unpublished rows. The planning promise that failed runs leave no rows needs reconciliation with staged generation and owner cleanup responsibilities. Workspace package admission still occupies the only active slot indefinitely. The runner and customer cancellation are absent, destination bindings remain process-local, and the console adapter differs from the service in response structure, pagination, version handling and declared routes. Existing interim-admission and concept-split questions remain open; the observed implementation is not their answer. Description cache stamps do not prove a common read snapshot under concurrent metadata updates. The race’s practical effect is untested. Generation smoke scripts prove executable outputs and metering, while the requested filter, default-column, relationship and absence semantics need stronger assertions; no new live model evaluation was performed here. Production custom-table authoring remains constrained by the recorded missing validation workspace. Planning approval and the absent brief are explicit limits on preparation. None of these findings silently changes a planning rule or supplies Andrew’s approval. ## Validation Dependency installation completed successfully. Corpus conformance passed with zero errors, and all four repository tests passed without failures. Source services and console code were unchanged, and no deployment, external write or live model request was made. ## Verdict for Andrew The examined design is a faithful static account of the pinned implementation, with planned and unavailable behavior separated from deployed processing. Workspace exports are the weakest area because generation and recovery are absent, bindings are not durable and the built console does not match the live service contract. Before implementation preparation, Andrew should approve the planning baseline, choose the interim export and organization-access policies, and reconcile the search visibility and snapshot staging promises with the implementation. ## Continuation (pass 2) The testing continuation audits twenty capability test specifications, eight feature suites and 475 executable records. It rewrites three feature suites and their executable records, corrects the delivery prerequisite to report access loss and activates all three pending feature bindings. The required testing back-fill report replaces the earlier partial examination report; current checker compatibility resolves the two pending findings. The eighty-five design artifacts examined earlier retain their verified OpenAI final text. This continuation changes no domain object, lifecycle, workflow, screen, contract, inference operation, decision or planning rule. Existing design disagreements and testing proof gaps remain recorded findings, and application suites remain unrun. ### Continuation verdict for Andrew The testing corpus is complete for this back-fill scope: every capability has a categorized specification, every feature has an acceptance suite and all registered executable files exist at the pinned revisions. Its weakest areas remain the recorded publication, concurrency, permission and workspace-export proof gaps, and most feature chains have no complete executable binding. Andrew should resolve the existing product questions and prioritize the recorded proofs before treating this static examination as delivery qualification.