Semantic Boundary Workflow

This page describes the current enforcement path from private truth to public verification.

flowchart LR
    RG[RepoGraph] -->|shared semantics| PM[PlatformManifest]
    PRM[private-truth layer] -->|private truth + export| BA[Boundary artifact]
    PM -->|public-safe projection| BA
    BA --> CU[Custodian]
    CU --> OC[OperationsCenter]
    CU --> OPS[OperatorConsole]
    CU --> SB[SwitchBoard]

Core flow

1. RepoGraph defines the shared graph language.
2. private-truth layer owns private truth and exports the boundary artifact.
3. PlatformManifest publishes the public-safe projection surface.
4. Custodian validates the boundary artifact before scanning public repos.
5. OperationsCenter, OperatorConsole, and SwitchBoard consume verified public-safe context without owning graph semantics.

Important rule

Custodian fails closed when REPOGRAPH_BOUNDARY_ARTIFACT_FILE is missing. Automation belongs before Custodian runs, not inside Custodian's semantic core.