feat: add deployment zone overlays

fabric/interfaces/net-kingdom-control-surface-ui.yaml

@@ -0,0 +1,35 @@
+apiVersion: railiance.fabric/v1alpha1
+kind: InterfaceDeclaration
+metadata:
+  id: net-kingdom.control-surface.ui
+  name: NetKingdom Control Surface
+  owner: net-kingdom
+  repo: net-kingdom
+  domain: railiance
+spec:
+  lifecycle: active
+  environments: [dev]
+  description: Local NetKingdom control surface on the operator workstation.
+  interface_type: web-ui
+  version: v1
+  service_id: net-kingdom.iam-profile
+  capability_ids:
+    - net-kingdom.iam-profile.issuer
+  endpoint:
+    url: http://127.0.0.1:8876
+    notes: Local workstation endpoint after moving away from the Fabric registry port.
+  deployment_overlay:
+    deployment_environment: dev
+    deployment_scenario: bernd-laptop
+    routing_authority: net-kingdom-local-process
+    access_zone: private-dev
+    policy_authority: local-loopback-binding
+    exposure_class: local-only
+    route_evidence:
+      host: 127.0.0.1
+      port: 8876
+      protocol: tcp
+      route: http://127.0.0.1:8876
+  auth:
+    method: none
+  data_classification: internal

fabric/interfaces/railiance-fabric-registry-graph-explorer-ui.yaml

@@ -23,6 +23,18 @@ spec:
   endpoint:
     url: http://127.0.0.1:8765/ui/graph-explorer
     notes: Local workstation UI when the registry service is running.
+  deployment_overlay:
+    deployment_environment: dev
+    deployment_scenario: bernd-laptop
+    routing_authority: railiance-fabric-registry
+    access_zone: private-dev
+    policy_authority: local-loopback-binding
+    exposure_class: local-only
+    route_evidence:
+      host: 127.0.0.1
+      port: 8765
+      protocol: tcp
+      route: http://127.0.0.1:8765/ui/graph-explorer
   auth:
     method: none
   data_classification: internal

fabric/interfaces/railiance-fabric-registry-http-api.yaml

@@ -23,6 +23,18 @@ spec:
   endpoint:
     url: http://127.0.0.1:8765
     notes: Local workstation endpoint when the registry service is running.
+  deployment_overlay:
+    deployment_environment: dev
+    deployment_scenario: bernd-laptop
+    routing_authority: local-process
+    access_zone: private-dev
+    policy_authority: local-loopback-binding
+    exposure_class: local-only
+    route_evidence:
+      host: 127.0.0.1
+      port: 8765
+      protocol: tcp
+      route: http://127.0.0.1:8765
   auth:
     method: none
   data_classification: internal

fabric/interfaces/the-custodian-state-hub-dashboard.yaml

@@ -0,0 +1,35 @@
+apiVersion: railiance.fabric/v1alpha1
+kind: InterfaceDeclaration
+metadata:
+  id: the-custodian.state-hub.dashboard
+  name: State Hub Dashboard
+  owner: the-custodian
+  repo: the-custodian
+  domain: custodian
+spec:
+  lifecycle: active
+  environments: [dev]
+  description: Local browser dashboard for State Hub coordination views.
+  interface_type: web-ui
+  version: v1
+  service_id: the-custodian.state-hub
+  capability_ids:
+    - the-custodian.state-hub.coordination
+  endpoint:
+    url: http://127.0.0.1:3000
+    notes: Local workstation dashboard endpoint when the State Hub frontend is running.
+  deployment_overlay:
+    deployment_environment: dev
+    deployment_scenario: bernd-laptop
+    routing_authority: vite-dev-server
+    access_zone: private-dev
+    policy_authority: local-loopback-binding
+    exposure_class: local-only
+    route_evidence:
+      host: 127.0.0.1
+      port: 3000
+      protocol: tcp
+      route: http://127.0.0.1:3000
+  auth:
+    method: none
+  data_classification: internal

fabric/interfaces/the-custodian-state-hub-http-api.yaml

@@ -15,6 +15,21 @@ spec:
   service_id: the-custodian.state-hub
   capability_ids:
     - the-custodian.state-hub.coordination
+  endpoint:
+    url: http://127.0.0.1:8000
+    notes: Local workstation State Hub REST API.
+  deployment_overlay:
+    deployment_environment: dev
+    deployment_scenario: bernd-laptop
+    routing_authority: state-hub-local-process
+    access_zone: private-dev
+    policy_authority: local-loopback-binding
+    exposure_class: local-only
+    route_evidence:
+      host: 127.0.0.1
+      port: 8000
+      protocol: tcp
+      route: http://127.0.0.1:8000
   auth:
     method: none
   data_classification: internal

fabric/interfaces/the-custodian-state-hub-mcp-api.yaml

@@ -0,0 +1,35 @@
+apiVersion: railiance.fabric/v1alpha1
+kind: InterfaceDeclaration
+metadata:
+  id: the-custodian.state-hub.mcp-api
+  name: State Hub MCP API
+  owner: the-custodian
+  repo: the-custodian
+  domain: custodian
+spec:
+  lifecycle: active
+  environments: [dev]
+  description: Local MCP surface for State Hub coordination tools.
+  interface_type: mcp-api
+  version: v1
+  service_id: the-custodian.state-hub
+  capability_ids:
+    - the-custodian.state-hub.coordination
+  endpoint:
+    url: http://127.0.0.1:8001
+    notes: Local workstation MCP endpoint when State Hub is running.
+  deployment_overlay:
+    deployment_environment: dev
+    deployment_scenario: bernd-laptop
+    routing_authority: state-hub-local-process
+    access_zone: private-dev
+    policy_authority: local-loopback-binding
+    exposure_class: local-only
+    route_evidence:
+      host: 127.0.0.1
+      port: 8001
+      protocol: tcp
+      route: http://127.0.0.1:8001
+  auth:
+    method: none
+  data_classification: internal