Service Boundary Runtime

The service boundary runtime covers Kukulkan production adapters for database,

auth/OIDC, object storage, search, email, observability, backup/restore, and

background jobs.

Database operations define connection config, schema setup, query execution,

transaction boundaries, typed result decoding, timeout/retry policy, and fake

database adapters for tests.

Auth operations define OIDC discovery, PKCE state and challenge generation, token

exchange contracts, JWT verification boundaries, fail-closed errors, and session

envelope validation.

Service adapters define object-store, search, email, OTLP/logging/metrics, and

fake package-test contracts. Production probes are opt-in and are not part of

default local gates.

Operations adapters define backup artifact manifests, restore plans, job request

models, job status/retry policy, and audit/provenance records.