Implemented and verified.
21 implemented capabilitiesResponsive vision-review desk · Public OpenAPI and marketing boundary separation · Synchronous provider contract separated from application workflow · No image body, media URL, credential, face, plate, or internal path input · Opaque asset references and SHA-256 identity · Purpose, lawful-basis, capture-time, and retention gates · Entitled model-discovery fixture · Immutable model fingerprint lock · Idempotent inference attempts · Normalized rectangle, polygon, and polyline validation · Confidence and sensitive-class review policy · Independent reviewer separation of duties · Attributable acceptance and rejection · Derived-output redaction with minimum audit retention · Secret-safe provider failures · Idempotent commands · Optimistic concurrency · Append-only audit events · Transactional outbox · Atomic restart recovery · Credential-free fixture mode
Browser application
A responsive operations console backed by the included JSON API.
Durable domain
Aggregate snapshots, audit events, idempotency records, evidence, and outbox entries are committed together.
Fixture adapter
A credential-safe provider boundary aligned to named Mappls endpoint contracts.
Executable tests
10 tests covering lifecycle, HTTP, replay, conflicts, domain recovery, and restart behavior.
Architecture notes
Trust boundaries, aggregate invariants, adapter ownership, evidence lineage, and recovery design.
Deployment guide
Database, identity, secrets, outbox, privacy, observability, migration, and rollback work.