Asset create/list/get, Metadata add/list, Lifecycle transition, Relationship create/list, Audit event query, Policy evaluation

workplans/KONT-WP-0009-service-api-agent-safe-operation.md

@@ -49,11 +49,13 @@ review gates through Markitect APIs.
 ## Implementation Status
 
 The first optional FastAPI service skeleton is implemented for health,
-readiness, version, and OpenAPI contracts. See
+readiness, version, OpenAPI contracts, and the initial asset/metadata/
+relationship/audit/policy resource surface. See
 `docs/service-api-implementation.md`.
 
-Domain-resource endpoints, actor context, agent operations, context packages,
-and dry-run/review-gate response contracts remain open in this workplan.
+Ingestion, retrieval, transformation, workflow, actor context, agent
+operations, context packages, and dry-run/review-gate response contracts remain
+open in this workplan.
 
 ## S9.1 - Implement versioned FastAPI service skeleton and health contracts
 
@@ -86,7 +88,7 @@ Implemented:
 
 ```task
 id: KONT-WP-0009-T002
-status: todo
+status: done
 priority: high
 state_hub_task_id: "a37e5ba3-e128-4100-b22c-c85cca3f8db3"
 ```
@@ -100,6 +102,16 @@ Acceptance:
 - Permission and policy checks run before protected operations.
 - Audit history can be queried by authorized callers.
 
+Implemented:
+
+- `ServiceRuntime` exposes asset create/list/get, metadata add/list,
+  lifecycle transition, relationship create/list, audit query, and policy
+  evaluation operations over existing service contracts.
+- FastAPI routes under `/api/v1` wrap those runtime operations without owning
+  domain behavior.
+- Policy denial blocks protected asset mutations and denied attempts remain
+  auditable.
+
 ## S9.3 - Expose ingestion retrieval transformation and workflow APIs
 
 ```task