Skip to content

15. Traceability and release scope

Commit
5ca6b8a
Version
0.4.27
Status
draft
Rendered
2026-10-17T19:30:18Z
Source
SPEC.md, last changed in 5ca6b8a

Every story maps to at least one requirement, invariant or error. Work that traces to nothing here is invalid. This specification MUST NOT contain a requirement that serves no story.

Epic Stories Principal requirements Key invariants
A — Identity and accounts US-A1, US-A2, US-A4–US-A9 REQ-ID-*, REQ-LA-*, REQ-AU-5, REQ-AU-6, REQ-AU-8, REQ-AU-9, REQ-AU-11–REQ-AU-20, REQ-AU-22, REQ-SN-1 INV-9, INV-16, INV-17, INV-20
B — Internal transfers US-B1–US-B3 REQ-KER-1, REQ-KER-10, REQ-BA-4, REQ-SL-5, REQ-CS-10 INV-1, INV-3, INV-25
C — Reservations US-C1–US-C6 REQ-BA-1–REQ-BA-4, REQ-OP-2, REQ-OP-5, REQ-OP-9, REQ-QR-7, REQ-EV-8 INV-14, INV-15, INV-21
D — Inbound US-D1–US-D3 REQ-IN-1–REQ-IN-7, REQ-SA-7, REQ-SI-* INV-10, INV-11, INV-12
E — Outbound US-E1, US-E3, US-E4 REQ-SO-1–REQ-SO-8, REQ-SA-1–REQ-SA-9, REQ-SL-2–REQ-SL-4, REQ-SL-6–REQ-SL-10, REQ-SN-2 INV-10, INV-13, INV-23
F — Multi-asset US-F1–US-F5 REQ-AS-1–REQ-AS-9, REQ-AU-10, REQ-KER-2 INV-4, INV-5, INV-7, INV-24
G — Agents US-G1–US-G4 REQ-AG-1–REQ-AG-4, REQ-AU-1–REQ-AU-4, REQ-AU-7, REQ-AU-21, REQ-EV-7 INV-22
H — Querying US-H1–US-H5 REQ-QR-1–REQ-QR-7, REQ-BA-5, REQ-PO-1–REQ-PO-5 INV-6, INV-20
I — Privacy and disclosure US-I1–US-I4 REQ-PV-1–REQ-PV-7, REQ-DS-1–REQ-DS-5 INV-16, INV-17
J — Provability US-J1–US-J3 REQ-PR-1–REQ-PR-11, REQ-AR-5, REQ-SL-1, REQ-SL-5 INV-5, INV-19
K — Operations and recovery US-K1–US-K7 REQ-RC-1–REQ-RC-5, REQ-AT-1–REQ-AT-3, REQ-OS-1–REQ-OS-4, REQ-RT-15–REQ-RT-21, NFR-22 INV-2, INV-15, INV-18
M — Integration US-M2–US-M8 REQ-EV-1–REQ-EV-9, REQ-CS-1–REQ-CS-10, REQ-PO-5 INV-8
N — Migration US-N1, US-N2 REQ-MG-7, REQ-MG-8, REQ-RC-4, REQ-RC-6, REQ-RC-7 INV-17, INV-18, INV-20, INV-22

Cross-cutting requirements serve every epic, not just one: REQ-AR-1–REQ-AR-7, REQ-PN-1, REQ-OP-1, REQ-OP-3, REQ-OP-4, REQ-OP-6–REQ-OP-8, REQ-OP-10–REQ-OP-12, REQ-ER-1, REQ-ER-2, and the runtime and kernel capability contracts REQ-RT-* and REQ-KER-*. Every story depends on these, and no story names them individually. Epic L is withdrawn. Its identifier is not reused.

V0 is the first release. It is a deployment with one operator, one settlement layer, both custody modes and the switch between them, and every surface of §7. It is not the release that delivers every property in this document.

Epic V0 Beyond V0
A — Identity and accounts US-A1, US-A2, US-A4–US-A9 —
B — Internal transfers US-B1–US-B3 —
C — Reservations US-C1–US-C4, US-C6 US-C5 (encumbrance — DEF-11)
D — Inbound US-D1–US-D3 —
E — Outbound US-E1, US-E3, US-E4 —
F — Multi-asset US-F1, US-F3–US-F5 —
G — Agents US-G1–US-G3 US-G4 (window allowances)
H — Querying US-H1–US-H5 —
I — Privacy and disclosure US-I1, US-I4 US-I2, US-I3 (disclosures — DEF-3)
J — Provability US-J1, US-J3 US-J2 (third-party detection of revision)
K — Operations and recovery US-K1–US-K7 —
M — Integration US-M2–US-M8 —
N — Migration US-N1, US-N2 —

A requirement, invariant or error that serves only a beyond-V0 story does not bind V0. Three exceptions bind V0 even though their stories do not:

  • REQ-PR-1 and REQ-PR-7, so that anchoring starts from the first entry, not from the first disclosure;
  • REQ-RC-3, so that an upgrade path exists before it is needed;
  • REQ-AR-5, so that no claim goes beyond what V0 enforces.

V0’s exit criteria are NFR-9’s three reconciliation axes at exactly zero divergence, sustained, and REQ-RC-4’s zero-divergence rule for any initial state. Nothing else in this document may be traded against them.