Service-API completion: ingestion, retrieval, transformations, workflows, actor/delegation context, bounded agent operations, context packages, and dry-run/review-gate contracts

docs/service-api-boundary.md

@@ -35,6 +35,84 @@ Implemented in `KONT-WP-0009-T002`:
 - `GET /api/v1/audit/events`
 - `POST /api/v1/policy/evaluate`
 
+Implemented in `KONT-WP-0009-T003`:
+
+- `GET /api/v1/ingestion/capabilities`
+- `POST /api/v1/ingestion/jobs`
+- `GET /api/v1/ingestion/jobs`
+- `GET /api/v1/ingestion/jobs/{job_id}`
+- `POST /api/v1/retrieval/index/refresh`
+- `POST /api/v1/retrieval/assets`
+- `POST /api/v1/retrieval/context-entities`
+- `POST /api/v1/retrieval/relationships`
+- `POST /api/v1/retrieval/feedback`
+- `GET /api/v1/retrieval/feedback`
+- `GET /api/v1/retrieval/quality`
+- `GET /api/v1/transformations/operations`
+- `POST /api/v1/transformations/runs`
+- `GET /api/v1/transformations/runs`
+- `GET /api/v1/transformations/runs/{run_id}`
+- `POST /api/v1/transformations/runs/{run_id}/retry`
+- `POST /api/v1/transformations/runs/{run_id}/cancel`
+- `POST /api/v1/workflows/templates`
+- `GET /api/v1/workflows/templates`
+- `GET /api/v1/workflows/templates/{template_id}`
+- `POST /api/v1/workflows/runs`
+- `POST /api/v1/workflows/runs/queue`
+- `GET /api/v1/workflows/runs`
+- `GET /api/v1/workflows/runs/{run_id}`
+- `POST /api/v1/workflows/runs/{run_id}/resume`
+- `POST /api/v1/workflows/runs/{run_id}/retry`
+- `POST /api/v1/workflows/runs/{run_id}/cancel`
+- `GET /api/v1/workflows/runs/{run_id}/reconstruction`
+- `GET /api/v1/workflows/reviews`
+- `GET /api/v1/workflows/exceptions`
+- `POST /api/v1/workflows/runs/{run_id}/reviews/{review_id}/decision`
+
+Implemented in `KONT-WP-0009-T004`:
+
+- `GET /api/v1/context`
+- Actor headers: `X-Actor-Id`, `X-Actor-Type`, `X-Actor-Display-Name`,
+  `X-Actor-External-Ref`, `X-Actor-Groups`.
+- Delegation headers: `X-Delegated-Actor-Id`, `X-Delegated-Actor-Type`,
+  `X-Delegated-Actor-Display-Name`, `X-Delegated-Actor-External-Ref`,
+  `X-Delegated-Actor-Groups`.
+- Agent headers: `X-Agent-Id`, `X-Agent-Name`, `X-Agent-Run-Id`,
+  `X-Agent-Tool`.
+- Scope headers: `X-Request-Scope` and `X-Policy-Scope` as JSON objects.
+- Redacted HTTP authorization error payloads.
+
+Implemented in `KONT-WP-0009-T005`:
+
+- `GET /api/v1/agents/operations`
+- `GET /api/v1/agents/operations/{operation_id}`
+- `POST /api/v1/agents/operations/{operation_id}`
+- Catalog entries declare input/output shape notes, permissions, audit
+  operation, failure modes, and dry-run support.
+- Execution is limited to documented operation IDs and emits separate
+  `agent.operation.*` audit events before dispatching through existing service
+  contracts.
+
+Implemented in `KONT-WP-0009-T006`:
+
+- `GET /api/v1/context-packages/schema`
+- `POST /api/v1/context-packages`
+- Context packages are assembled from governed retrieval results.
+- Payloads carry source refs, snippets, metadata, relationships, policy
+  constraints, opaque external memory refs, and audit/policy references.
+- The `markitect` format emits a Markitect-compatible envelope while keeping
+  markdown rendering and selector semantics delegated to `markitect-tool`.
+
+Implemented in `KONT-WP-0009-T007`:
+
+- Agent operation policies can return `require_review` and receive structured
+  `review_required` envelopes with review obligations.
+- Agent operation policies can return `dry_run_only` and receive
+  `dry_run_required` envelopes unless the request is already a dry run.
+- Review and dry-run outcomes are audited with explicit `review_required` and
+  `dry_run` audit outcomes.
+- Partial-failure job envelopes are covered by contract tests.
+
 The unversioned health/readiness/version endpoints are operational probes. The
 versioned `/api/v1/*` endpoints establish the MVP API namespace. Future
 domain-resource endpoints should live under `/api/v1`.
@@ -49,19 +127,14 @@ python3 -m pip install -e '.[service]'
 
 ## Planned Resource Shape
 
-Planned endpoint groups:
+Remaining planned endpoint groups:
 
 - `POST /collections`, `GET /collections`, `GET /collections/{id}`
 - `POST /artifacts`, `GET /artifacts/{id}`, `GET /artifacts`
-- `POST /relationships`, `GET /relationships`
-- `POST /ingest`
-- `POST /query/artifacts`, `POST /query/relationships`
-- `POST /runs`, `GET /runs/{id}`, `GET /runs/{id}/manifest`
 - `POST /context/artifact/{id}`
 
 For the governed asset registry architecture, these planned groups should be
-translated to assets, metadata, relationships, ingestion jobs, retrieval,
-transformations, workflow templates/runs, review queues, and reconstruction
+translated to assets, metadata, context packages, and bounded agent operation
 resources.
 
 ## MVP API Versioning Policy
@@ -85,10 +158,6 @@ resources.
 
 ## Deferred
 
-- Ingestion, retrieval, transformation, and workflow endpoints.
-- Actor context, delegation, and authorization middleware.
-- Agent-safe operation catalog.
-- Context package API.
-- Dry-run and review-gate response envelopes for high-impact operations.
+No MVP service API task remains deferred in this workplan.
 - Streaming run execution.
 - Provider-backed assisted steps.