[deku2026]

This PR keeps the documentation in step with the migration (AD-0021, Delivery state).

• AD-0021 Delivery state: AF-CTR-01 is delivered. Contracts #117 merged at 7205743; the Go module is go/v1.0.0-ci.410.1, published with the cohort 1.0.0-ci.410.1.
• New verification fact V-N07 (platform capabilities §4): Go and C# Protobuf encodings of the same message mean the same thing but are not always byte-identical.
  • protobuf-go writes oneof members last; C# writes fields in field-number order.
  • Of 2,391 samples, 2,300 are byte-identical. Every difference disappears after sorting fields by number, and decoding has 0 errors.
  • The source is Contracts #117, re-run by its independent reviewer.
  • AD-0021 §10 now cites V-N07.
• contracts/README note: names the delivered Go module and how it is published.
• contracts/errors.md, new section on center ingress transport statuses:
  • Covers refusals the ingress pipeline makes before any handler runs. They are sent trailers-only, with the same bytes as the C# Cloud IngressPipeline they are ported from in AF-CTR-02.
  • Mapping: unregistered method → 12; auth.unauthenticated → 16; perm.resource_denied → 7; malformed validation.invalid_request → 3; over-bound validation.invalid_request → 8; state.stale_generation → 9; dependency.unavailable → 14.
  • Every other ArcError is a domain refusal: status 0, with the ArcError in the reply.

Verification:

• check_design.py --require-protoc: 0 errors.
• Tool tests: OK.
• Host statuses: reported by python eng/verify.py run-and-report.

🤖 Generated with Claude Code

https://claude.ai/code/session_01H6Cf6pFe7uHMuN6zEgDLmW

[deku2026]

Independent review record

The reviewer did not author this change. They checked every claim against its source through the MCP hosts:

• Contracts #117 merge 7205743, tag go/v1.0.0-ci.410.1, proxy resolution, CI run 40677698955 and Plan main b8b7567;
• V-N07, against Contracts docs/engineering-controls.md and the #117 review reproduction;
• the ingress status table, against C# IngressPipeline.cs and GrpcWebFraming.cs at Cloud faaffea and against Cloud #112 docs/center.md.

Round 1, at e9e6490: approved. It had three non-blocking findings:

1. The Go port's status was presented as delivered when it is still target.
2. The ArcError category column needed clarifying, since clients receive no ArcError for these refusals.
3. The plain HTTP 404, 405 and 415 refusals and the binary gRPC widening were missing.

Round 2, at bb04dc3: approved.

• All three findings and the optional V-N07 version detail are resolved.
• One optional wording point remains: native gRPC's trailers-only form is a HEADERS response. It moves to the next Design documentation PR.

check_design.py --require-protoc reported 0 errors on both heads.

Host statuses at bb04dc3:

• arcforges/windows: 3 steps in 15 s
• arcforges/linux: 3 steps in 46 s

---

Generated by Claude Code