Data & State

Separate transient context, durable application state, user memory, and audit evidence.

Record the lifecycle

For each state class, define its source, schema, authority, retention, access policy, and deletion path.