Architecture blueprint and workplan refinement

workplans/KONT-WP-0009-service-api-agent-safe-operation.md

@@ -31,6 +31,13 @@ Primary: FR-160 to FR-169 and FR-180 to FR-188.
 Supporting: FR-060 to FR-066, FR-080 to FR-085, FR-100 to FR-106,
 FR-120 to FR-126, FR-200 to FR-202, FR-240 to FR-245.
 
+## Architecture Constraint
+
+Implement the service API as an adapter over application services, following
+`docs/architecture-blueprint.md`. HTTP routes must not own domain behavior.
+Agent operations must use the bounded operation catalog, policy checks, audit
+events, dry-run behavior, and review gates described in the blueprint.
+
 ## S9.1 - Implement versioned FastAPI service skeleton and health contracts
 
 ```task
@@ -169,4 +176,6 @@ Acceptance:
 - The service API exposes the MVP operation surface without requiring UI.
 - Agent-safe operations are explicit, bounded, permissioned, auditable, and
   reviewable.
+- API routes remain adapters over the core contracts described in
+  `docs/architecture-blueprint.md`.
 - `python3 -m pytest` passes.