Implemented and verified.
18 implemented capabilitiesResponsive aviation control desk · Complete sixteen-event exception-aware journey · Exact role-scoped operational commands · Immutable stand and zone revisions · Stale plan and assignment invalidation · Eligible vehicle and assigned-lead enforcement · Four independently evidenced service milestones · Independent airside exception investigation · Abort without invented readiness · Airline, airport, and safety authority separation · Map, route, task, and telemetry evidence separated from authority · Passenger, location, clearance, and credential rejection · Idempotent commands · Optimistic concurrency · Append-only audit events · Transactional outbox · Atomic restart recovery · Credential-free zero-network fixture mode
Browser application
A responsive operations console backed by the included JSON API.
Durable domain
Aggregate snapshots, audit events, idempotency records, evidence, and outbox entries are committed together.
Fixture adapter
A credential-safe provider boundary aligned to named Mappls endpoint contracts.
Executable tests
22 tests covering lifecycle, HTTP, replay, conflicts, domain recovery, and restart behavior.
Architecture notes
Trust boundaries, aggregate invariants, adapter ownership, evidence lineage, and recovery design.
Deployment guide
Database, identity, secrets, outbox, privacy, observability, migration, and rollback work.