Coverage vocabulary
COMPLETE INPUT
PARTIAL
MAPPED
MISSING
FUTURE PLAN
RUNTIME EVIDENCE REQUIRED
CONTROL-PLANE EVIDENCE REQUIRED
NOT APPLICABLE
Dimensions:
PDT Product outcome
ROL Roles/access
PRC Process/operating procedure
STA State/lifecycle
DAT Data/identity/fields
INT Query/command/error interfaces
EFF External/async effects
UIX UI/UX
OPS Admin/support procedure
WIK Wiki projection/publication
MIG Migration/rollback/caller-zero
VER Verification evidence
1. Coverage Summary
| Capability | PDT | ROL | PRC | STA | DAT | INT | EFF | UIX | OPS | WIK | MIG | VER | Primary remaining work |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Tenant execution context | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | broad page/job/integration caller inventory and strict-context parity |
| Portable tenant mapping | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | CONTROL-PLANE EVIDENCE REQUIRED | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | CONTROL-PLANE EVIDENCE REQUIRED | trusted local/global mapping owner, apply/readback and Shared/Dedicated parity |
| Operating profile | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | NOT APPLICABLE | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | profile composition/storage/assignment owner and explicit CTC/MK parity seeds |
| Module enablement | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | missing/error compatibility inventory and explicit parity seeding |
| Named process capability | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | accepted definition registry/source and caller activation |
| Package/entitlement | PARTIAL | PARTIAL | PARTIAL | PARTIAL | MAPPED | PARTIAL | NOT APPLICABLE | MAPPED | PARTIAL | MAPPED | PARTIAL | RUNTIME EVIDENCE REQUIRED | decide whether package is seed, entitlement or advisory metadata |
| Typed configuration | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | definition authority, cache/version/readback and selected caller cutover |
| Credential ownership | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | provider-specific owner/reference negative evidence and safe diagnostics |
| Current Admin applied-state management | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | PARTIAL | RUNTIME EVIDENCE REQUIRED | current role/API/readback/cache behavior and exact Dedicated enforcement |
| Versioned publish/apply/rollback | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | CONTROL-PLANE EVIDENCE REQUIRED | Control Tower release/applied-version contract and deployment agent |
| Effective-state diagnostics | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | diagnostic query implementation and redacted field acceptance |
2. Tenant Execution Context Detail
| Dimension |
Result |
Current input |
Gap |
| PDT |
COMPLETE INPUT |
single-tenant actor/subject/provenance contract |
Product acceptance owner reread |
| ROL |
PARTIAL |
user, super-admin, impersonation, system and integration principals |
full route/job/provider role matrix |
| PRC |
COMPLETE INPUT |
direct, impersonation, admin override, explicit job/integration and legacy default flows |
field/operator support review |
| STA |
COMPLETE INPUT |
MAPPED, LEGACY_LOCAL_ONLY, STRICT, COMPATIBILITY_ONLY |
deployed mapping evidence |
| DAT |
COMPLETE INPUT |
local/global IDs, request, actor/subject, credential owner and authorization ref |
global mapping source/apply version |
| INT |
COMPLETE INPUT |
current PHP typed context/adapter/strict API bridge plus target TS DTO |
broad caller adoption plan |
| EFF |
NOT APPLICABLE |
context construction is local |
none |
| UIX |
PARTIAL |
impersonation banner/admin target behavior exists |
effective-context diagnostic UI |
| OPS |
COMPLETE INPUT |
support/admin procedure packet |
target-role use review |
| WIK |
PARTIAL |
proposed platform administration/support topics |
current Wiki rows not read |
| MIG |
COMPLETE INPUT |
additive typed propagation, strict caller cutover and legacy caller-zero |
selected caller cohorts |
| VER |
RUNTIME EVIDENCE REQUIRED |
existing focused unit/static evidence |
current WEB/API/job/integration/foreign scenarios |
3. Operating Profile Detail
| Dimension |
Result |
Current input |
Gap |
| PDT |
COMPLETE INPUT |
documented ctc-execution and mk-order operating models |
profile composition decision |
| ROL |
PARTIAL |
Product/profile owner and tenant/config owners mapped |
assignment approval and admin role matrix |
| PRC |
COMPLETE INPUT |
define, assign, resolve, review and migrate |
accepted assignment lifecycle |
| STA |
COMPLETE INPUT |
Draft/Reviewed/Active/Deprecated definition plus valid/missing/invalid resolution |
persistence representation |
| DAT |
PARTIAL |
proposed definition/assignment DTO and source/provenance |
owner table/snapshot/control-plane schema decision |
| INT |
COMPLETE INPUT |
GetOperatingProfile and safe resolution contract |
route/application activation |
| EFF |
NOT APPLICABLE |
profile resolution local |
none |
| UIX |
COMPLETE INPUT |
target Profile section and compatibility warnings |
current admin UI integration |
| OPS |
COMPLETE INPUT |
admin/support readback procedure |
field review |
| WIK |
PARTIAL |
proposed platform-tenants / platform-modules-config sections |
current content and slug decision |
| MIG |
COMPLETE INPUT |
explicit parity assignments before numeric branch retirement |
CTC/MK cohort acceptance |
| VER |
RUNTIME EVIDENCE REQUIRED |
source/process evidence only |
actual profile-resolution parity |
4. Module And Capability Detail
| Dimension |
Result |
Current input |
Gap |
| PDT |
COMPLETE INPUT |
module and named capability concerns separated |
accepted initial capability registry |
| ROL |
PARTIAL |
module/capability/access owners mapped |
exact action-role-owner matrix |
| PRC |
COMPLETE INPUT |
resolve prerequisites, value validity and deny/unavailable reasons |
caller-specific policy acceptance |
| STA |
COMPLETE INPUT |
explicit enabled/disabled, missing compatibility, invalid/error/unavailable |
applied version and drift |
| DAT |
COMPLETE INPUT |
catalog/module row and target capability definition |
capability applied-state owner |
| INT |
COMPLETE INPUT |
existing CapabilityResolution and resolver plus target queries |
active caller set and diagnostics |
| EFF |
PARTIAL |
provider capability may require credential/effect |
provider cohorts later |
| UIX |
COMPLETE INPUT |
module/capability distinction and reason labels |
current Admin integration |
| OPS |
COMPLETE INPUT |
no global fail-closed and exact before/after/readback |
target-role review |
| WIK |
PARTIAL |
admin/support projection |
current Wiki not read |
| MIG |
COMPLETE INPUT |
explicit parity seed, one caller cohort, rollback, caller-zero |
selected module/capability waves |
| VER |
RUNTIME EVIDENCE REQUIRED |
static contract/unit inputs exist |
missing/error/current-caller runtime matrix |
5. Typed Config And Credential Detail
| Dimension |
Result |
Current input |
Gap |
| PDT |
COMPLETE INPUT |
typed value/provenance/validity and credential-owner separation |
Product-approved definition registry ownership |
| ROL |
PARTIAL |
config release/provider/support owners mapped |
per-key editor/viewer/rotator roles |
| PRC |
COMPLETE INPUT |
resolve, publish/apply, reread, cache invalidation, rotate reference, rollback |
first bounded config family selection |
| STA |
COMPLETE INPUT |
VALUE/MISSING/INVALID/ERROR/STALE and credential available/unavailable/mismatch |
applied version implementation |
| DAT |
COMPLETE INPUT |
current rows, provider definitions, encrypted secret envelope and target definitions |
publish metadata and external secret refs |
| INT |
COMPLETE INPUT |
typed queries/commands/errors |
current admin/write DTO reconciliation |
| EFF |
PARTIAL |
provider calls remain separate |
provider-specific evidence |
| UIX |
COMPLETE INPUT |
redacted diagnostics and draft/release states |
current screen adaptation |
| OPS |
COMPLETE INPUT |
safe inspection and no-secret escalation |
role review |
| WIK |
PARTIAL |
proposed admin/support pages |
current content not read |
| MIG |
COMPLETE INPUT |
heuristic-to-definition, direct-write-to-release, caller-zero |
selected keys/callers |
| VER |
RUNTIME EVIDENCE REQUIRED |
prior local metadata evidence only |
fresh rows/cache/provider/negative tests |
6. Current Admin And Target Control Plane
| Dimension |
Current Admin applied state |
Target release control plane |
| Identity |
local CLIENT_ID target |
local + portable tenant mapping |
| Write |
direct module/config/tenant API |
draft/review/approve/publish/apply |
| Version |
row timestamps/compatibility evidence |
release ID + expected applied version |
| Validation |
current helper/UI/provider definitions |
accepted typed definition registry |
| Impact preview |
limited |
pages/APIs/processes/roles/caches/deployments |
| Readback |
local API/rows |
local rows + effective resolutions + target deployment result |
| Rollback |
manual/direct compatibility |
predecessor/superseding reviewed release |
| Audit |
current admin/super-admin mechanisms |
immutable release/apply/rollback correlation |
| Multi-deployment |
not established |
per-target apply result and drift |
| Runtime dependency |
local DB |
local applied state; no request-time Control Tower lookup |
7. Current High-Risk Compatibility Register
| ID |
Compatibility |
Required disposition |
TPC-GAP-010 |
operating profile inferred rather than bound |
define/assign/read explicit profile before branch retirement |
TPC-GAP-020 |
typed resolver foundation without broad callers |
read-shadow then cohort activation |
TPC-GAP-030 |
missing/error module can allow |
preserve until caller inventory/parity seed; no global flip |
TPC-GAP-050 |
config helper collapses provenance/validity |
typed definition and diagnostics per caller |
TPC-GAP-060 |
name-based type heuristic |
registered definition outranks heuristic |
TPC-GAP-070 |
numeric tenant defaults/branches |
explicit profile/capability/config replacement |
TPC-GAP-080 |
strict context opt-in only |
page/API/job/integration cohort rollout |
TPC-GAP-090 |
direct applied-state admin writes |
target versioned release lifecycle |
TPC-GAP-100 |
cache/read-after-write not universal |
version/invalidation/effective reread |
TPC-GAP-110 |
package/tier semantics unclear |
Product/entitlement decision before enforcement |
TPC-GAP-120 |
portable mapping/Shared-Dedicated parity unknown |
Control Tower/deployment evidence |
TPC-GAP-130 |
module/config confused with authorization |
separate menu/page/API/action/record decision |
TPC-GAP-140 |
no universal diagnostics |
target safe effective-state read model |
8. Delivered Reconstruction Artifacts
docs/reconstruction/PLATFORM_TENANT_PROFILE_CAPABILITY_CONFIGURATION_SOURCE_AUTHORITY.md
docs/reconstruction/PLATFORM_TENANT_PROFILE_CAPABILITY_CONFIGURATION_REBUILD_PACKET.md
docs/reconstruction/SYSTEM_RECONSTRUCTION_COVERAGE_MATRIX_PLATFORM_TENANT_CONFIG_WAVE.md
docs/processes/PLATFORM_TENANT_PROFILE_CAPABILITY_CONFIGURATION_RECONCILIATION.md
docs/processes/PLATFORM_TENANT_PROFILE_CAPABILITY_CONFIGURATION_POLICY_DECISION_MATRIX.md
docs/processes/PLATFORM_TENANT_PROFILE_CAPABILITY_CONFIGURATION_SEQUENCE_DIAGRAMS.md
docs/processes/PLATFORM_TENANT_PROFILE_CAPABILITY_CONFIGURATION_PARITY_AND_CUTOVER_MATRIX.md
docs/runbooks/PLATFORM_TENANT_CONFIGURATION_ADMIN_SUPPORT_RUNBOOK.md
docs/wiki/internal/PLATFORM_TENANT_CONFIGURATION_WIKI_PROJECTION_PACKET.md
9. Current Readiness
Source authority: RECONCILED
Tenant context specification: COMPLETE INPUT
Operating profile Runtime binding: MISSING
Module/capability/config specification: COMPLETE INPUT
Current Admin applied-state procedure: MAPPED / RUNTIME EVIDENCE REQUIRED
Target publish/apply lifecycle: FUTURE PLAN / CONTROL-PLANE EVIDENCE REQUIRED
Role/page/API/action/record matrix: PARTIAL
Current Wiki: NOT READ
P4-003: NOT ACTIVATED
M4: NOT ESTABLISHED
10. Next Foundation Wave
Identity / Authentication / Session / Impersonation
+ Menu / Page / API / Action / Record Authorization
The next wave must build on this concern separation and must not conflate identity with authorization or reactivate broad fail-closed rollout.
---
Source: docs/reconstruction/SYSTEM_RECONSTRUCTION_COVERAGE_MATRIX_PLATFORM_TENANT_CONFIG_WAVE.md — ctc repository · This page is an English translation of the source document. Identifiers, file paths and code symbols are unchanged.