{ "format": "takoform.form-lifecycle@v2", "projectStatus": "experimental", "currentEpoch": "forms.takoform.com/v1alpha2", "states": ["proposal", "experimental", "stable", "legacy"], "legacy": { "apiVersion": "forms.takoform.com/v1alpha1", "decision": "spec/decisions/0004-takoform-is-an-experimental-specification.md", "epochDecision": "spec/decisions/0006-v1alpha2-restarts-form-lines.md", "releaseSources": "forms/releases", "releaseSourceInventory": { "format": "takoform.legacy-release-inventory@v1", "count": 71, "digest": "sha256:292495fe4190d077eb993da0e79c31fd856ee62332096eb5397ec615a17a90f4" }, "historicalAdmissionRoots": ["admission/v1", "admission/v3", "admission/v4"], "newCreatePolicy": "host-policy", "retainedCapabilities": ["read", "observe", "delete", "recovery", "migration"] }, "currentForms": [], "proposals": [ { "id": "cloud-edge-worker", "document": "proposals/edge-worker.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud EdgeWorker offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Deploy an immutable edge application artifact and expose its declared request interface.", "portableBoundary": "Artifact identity, entrypoint, non-secret configuration, declared connections, and observable service identity.", "portableFields": ["configuration", "connections", "entrypoint", "name", "runtime", "runtimeVersion", "source"], "hostDecisions": ["runtime implementation", "placement", "capacity", "credentials", "routing", "pricing"], "lifecycleRisks": {"replacement": "Artifact or immutable execution identity changes may require replacement.", "dataLoss": "Runtime-local state is outside this Form and must not be implied durable.", "delete": "Delete retires the serving identity while preserving host audit evidence.", "import": "Import requires exact artifact and host resource identity evidence.", "drift": "Refresh reports artifact, configuration, connection, and serving-status drift."}, "securityBoundary": {"credentials": "Credentials remain host-owned bindings.", "network": "The host owns ingress, egress, routing, and isolation policy.", "artifacts": "Application bytes are immutable and digest-bound.", "secrets": "Secret values never enter portable desired state or provider state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Application, Component, Link, and Action inform the resource model but do not define immutable edge artifacts or request serving."},{"name":"CIMI","applicability":"applicable","finding":"System and Machine lifecycle inform generic operations but do not model an edge/event application contract."},{"name":"TOSCA","applicability":"applicable","finding":"Node, artifact, and relationship concepts inform topology without requiring TOSCA orchestration."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"Deployment, Knative Service, and managed-resource reconciliation inform lifecycle and drift."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"Workers, Fastly, and edge-service providers show common artifact, configuration, route, and state boundaries."}], "existingAbstractionGap": "A provider-neutral immutable edge application contract with host-owned routing, credentials, placement, and runtime implementation." }, { "id": "cloud-relational-database", "document": "proposals/relational-database.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud RelationalDatabase offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Provision a relational database with a declared engine contract and expose a query interface.", "portableBoundary": "Engine family, compatibility version, optional digest-bound schema material, logical database identity, and observable query interface without credentials.", "portableFields": ["databaseName", "engine", "engineVersion", "name", "schemaFormat", "schemaSha256", "schemaUrl"], "hostDecisions": ["database implementation", "placement", "capacity", "backup system", "credentials", "pricing"], "lifecycleRisks": {"replacement":"Engine-family changes may require export and replacement.","dataLoss":"Delete and migration can destroy durable data without host recovery evidence.","delete":"Delete follows host retention and backup policy and must report retained recovery.","import":"Import binds an existing database only with exact engine and ownership evidence.","drift":"Refresh reports engine compatibility, logical identity, schema-material identity, and query-service availability drift."}, "securityBoundary": {"credentials":"Database credentials remain host-owned and are exposed only through authorized bindings.","network":"The host owns network reachability and isolation.","artifacts":"Database engine artifacts are host implementation details.","secrets":"Passwords and connection secrets never enter portable state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Resource, Storage, Link, and lifecycle actions inform attachment and lifecycle."},{"name":"CIMI","applicability":"applicable","finding":"System, Volume, and credential separation inform managed infrastructure boundaries."},{"name":"TOSCA","applicability":"applicable","finding":"Database and DBMS node relationships inform portable requirement and capability separation."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"Database operators and managed-resource APIs inform reconciliation, secret publication, and deletion policy."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"RDS, Cloud SQL, D1, and PostgreSQL providers expose compatibility and state tradeoffs."}], "existingAbstractionGap": "A small relational service intent that exposes portable query capability while leaving credentials, topology, and engine implementation to the host." }, { "id": "cloud-object-bucket", "document": "proposals/object-bucket.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud ObjectBucket offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Provision durable object storage and expose an authorized object-storage interface.", "portableBoundary": "Bucket identity, version-retention semantics, lifecycle behavior, and object interface without backend credentials or provider namespace.", "portableFields": ["name", "versioning"], "hostDecisions": ["object-store implementation", "region", "capacity", "replication", "credentials", "pricing"], "lifecycleRisks": {"replacement":"A host migration may require copy and replacement; version-retention changes remain an explicit workload-semantic update.","dataLoss":"Bucket deletion can destroy all objects and requires explicit host safeguards.","delete":"Delete must state non-empty handling and retained recovery policy.","import":"Import binds an existing bucket with exact ownership and lifecycle evidence.","drift":"Refresh reports version-retention, availability, and implementation-independent bucket drift."}, "securityBoundary": {"credentials":"Object credentials remain host-owned bindings.","network":"The host owns endpoint exposure and network policy.","artifacts":"No executable artifact belongs in the Form.","secrets":"Keys and signed URLs never enter portable state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Storage and Link concepts inform attachment but object operations require a distinct interface."},{"name":"CIMI","applicability":"applicable","finding":"Volume lifecycle informs durable storage while object semantics remain different."},{"name":"TOSCA","applicability":"applicable","finding":"Object-storage node capabilities inform requirements and relationships."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"ObjectBucketClaim and provider managed buckets inform claim, deletion, and connection publication."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"S3, R2, GCS, and Azure bucket resources expose common lifecycle and policy boundaries."}], "existingAbstractionGap": "A backend-neutral object bucket lifecycle paired with an explicit object interface and no credential transport." }, { "id": "cloud-key-value-store", "document": "proposals/key-value-store.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud KeyValueStore offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Provision a namespaced key-value store and expose authorized key operations.", "portableBoundary": "Namespace lifecycle, broad consistency/capability intent, and key-value interface without backend credentials.", "portableFields": ["consistency", "defaultTtlSeconds", "name"], "hostDecisions": ["store implementation", "placement", "capacity", "consistency implementation", "credentials", "pricing"], "lifecycleRisks": {"replacement":"Incompatible consistency or namespace changes may require copy and replacement.","dataLoss":"Delete destroys keys unless the host retains recovery evidence.","delete":"Delete follows explicit non-empty and retention policy.","import":"Import requires exact namespace ownership and capability evidence.","drift":"Refresh reports namespace and declared capability drift without reading values."}, "securityBoundary": {"credentials":"Access credentials remain host-owned.","network":"The host owns service reachability and isolation.","artifacts":"No executable artifact belongs in the Form.","secrets":"Stored values and credentials never enter Resource state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Generic Resource and Link concepts apply but do not define key-value semantics."},{"name":"CIMI","applicability":"not-applicable","finding":"CIMI has no focused portable key-value service contract; only generic lifecycle concepts transfer."},{"name":"TOSCA","applicability":"applicable","finding":"Capability and relationship modeling informs consumption of the store."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"Managed KV CRDs and connection-secret patterns inform reconciliation while secret transport is excluded."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"Cloudflare KV and managed cache/provider resources show namespace and state behavior."}], "existingAbstractionGap": "A minimal namespaced KV lifecycle and interface that does not standardize a provider's consistency or credential model." }, { "id": "cloud-queue", "document": "proposals/queue.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud Queue offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Provision a durable message queue used by connected producers and consumers.", "portableBoundary": "Queue lifecycle, delivery intent, retention limits, and declared messaging interface without selecting a broker.", "portableFields": ["connections", "messageRetentionSeconds", "name", "ordering"], "hostDecisions": ["broker implementation", "placement", "capacity", "consumer materialization", "credentials", "pricing"], "lifecycleRisks": {"replacement":"Delivery or retention changes may require a new queue and drain.","dataLoss":"Delete or incompatible migration can discard queued messages.","delete":"Delete must define drain, purge, and retained evidence behavior.","import":"Import requires exact broker queue ownership and delivery-semantics evidence.","drift":"Refresh reports queue policy and consumer-binding drift without reading message bodies."}, "securityBoundary": {"credentials":"Producer and consumer credentials remain host-owned bindings.","network":"The host owns broker endpoints and isolation.","artifacts":"Consumer code belongs to a connected runtime Resource, not the Queue.","secrets":"Message contents and credentials never enter portable state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Resource, Link, and Action inform lifecycle and producer/consumer relationships."},{"name":"CIMI","applicability":"not-applicable","finding":"CIMI has no focused broker-neutral message queue contract."},{"name":"TOSCA","applicability":"applicable","finding":"Messaging queue nodes and relationships inform capabilities and requirements."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"Broker operators, KEDA, and managed Queue resources inform reconciliation and consumer attachment."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"SQS, Pub/Sub, Service Bus, and Cloudflare Queue resources expose delivery and retention differences."}], "existingAbstractionGap": "A broker-neutral queue lifecycle and connection contract with explicit but deliberately narrow delivery intent." }, { "id": "cloud-schedule", "document": "proposals/schedule.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud Schedule offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Invoke one connected Resource on a portable recurring schedule.", "portableBoundary": "Schedule expression, timezone, and exact target connection without selecting a scheduler.", "portableFields": ["connections", "cron", "name", "timezone"], "hostDecisions": ["scheduler implementation", "delivery retries", "placement", "credentials", "capacity", "pricing"], "lifecycleRisks": {"replacement":"Expression changes should update in place unless the host cannot preserve identity.","dataLoss":"Missed invocations are operational events rather than durable Form state.","delete":"Delete stops future delivery and retains bounded execution audit.","import":"Import requires exact scheduler and target identity evidence.","drift":"Refresh reports expression, timezone, target, and delivery-registration drift."}, "securityBoundary": {"credentials":"Invocation authority remains a host-owned binding.","network":"The host owns delivery transport and reachability.","artifacts":"No executable artifact belongs in Schedule.","secrets":"Invocation credentials and payload secrets never enter portable state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Action and Link concepts inform invocation of a connected Resource."},{"name":"CIMI","applicability":"not-applicable","finding":"CIMI does not define a focused recurring invocation resource."},{"name":"TOSCA","applicability":"applicable","finding":"Policies, triggers, and workflows inform schedule-to-target relationships."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"CronJob and managed scheduler resources inform expression, timezone, and missed-run behavior."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"Cloud scheduler and event-rule resources expose target, retry, and timezone tradeoffs."}], "existingAbstractionGap": "A small recurring trigger Resource that connects to another portable Resource without embedding provider event targets." }, { "id": "cloud-container-service", "document": "proposals/container-service.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud ContainerService offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Run an immutable OCI image as a long-lived service and expose declared interfaces.", "portableBoundary": "Digest-pinned image, non-secret configuration, declared connections, and observable request interface.", "portableFields": ["configuration", "connections", "image", "name"], "hostDecisions": ["container runtime", "placement", "capacity", "networking", "credentials", "pricing"], "lifecycleRisks": {"replacement":"Host networking or runtime changes may require replacement; image changes should create a reviewed revision.","dataLoss":"Writable local filesystem is not portable durable state.","delete":"Delete retires service instances and preserves host audit evidence.","import":"Import requires exact image, service identity, and configuration evidence.","drift":"Refresh reports image, connections, request-interface availability, and service-configuration drift."}, "securityBoundary": {"credentials":"Registry and runtime credentials remain host-owned.","network":"The host owns ingress, egress, service discovery, and isolation.","artifacts":"The OCI image must be pinned by digest.","secrets":"Secret environment and files never enter portable desired state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Application, Component, Resource, and Link inform service composition."},{"name":"CIMI","applicability":"applicable","finding":"Machine and System lifecycle inform compute service operations but not OCI semantics."},{"name":"TOSCA","applicability":"applicable","finding":"Container runtime, software component, artifact, and relationship types are direct prior art."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"Deployment, Service, probes, resources, and rollout reconciliation are direct prior art."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"ECS, Cloud Run, Container Apps, and provider-native container services expose common and divergent fields."}], "existingAbstractionGap": "A digest-bound OCI service intent smaller than Kubernetes and independent of one managed container product." }, { "id": "cloud-stateful-entity", "document": "proposals/stateful-entity.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud StatefulEntity offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Run a namespace of addressable stateful entities from immutable application code.", "portableBoundary": "Entity namespace identity, digest-bound code, generic entrypoint, runtime and persistence capability requirements, non-secret configuration, connections, and declared invocation interface.", "portableFields": ["configuration", "connections", "entrypoint", "name", "persistence", "runtime", "runtimeVersion", "source"], "hostDecisions": ["stateful runtime", "placement", "replication", "storage", "credentials", "pricing"], "lifecycleRisks": {"replacement":"Namespace or storage-model changes require explicit migration and may not permit replacement.","dataLoss":"Delete can destroy entity state and requires retention or evacuation policy.","delete":"Delete must drain or evacuate entities and report recovery boundaries.","import":"Import requires exact namespace, code, and durable-state ownership evidence.","drift":"Refresh reports code, namespace, runtime, and durable-state availability drift without reading entity data."}, "securityBoundary": {"credentials":"Invocation and storage credentials remain host-owned.","network":"The host owns routing, isolation, and entity addressing exposure.","artifacts":"Application code is immutable and digest-bound.","secrets":"Entity data and secrets never enter portable Resource state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Resource, Link, and Action inform addressable lifecycle but not stateful entity namespaces."},{"name":"CIMI","applicability":"not-applicable","finding":"Machine and System do not directly model addressable actor/entity state."},{"name":"TOSCA","applicability":"applicable","finding":"Stateful components, artifacts, and storage relationships inform deployment boundaries."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"StatefulSet and operator patterns inform identity and storage but not per-entity addressing semantics."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"Durable Object namespaces and actor-runtime resources expose code, namespace, and migration coupling."}], "existingAbstractionGap": "A portable namespace-level contract for addressable durable entities without standardizing the host's actor runtime or storage engine." }, { "id": "cloud-vector-index", "document": "proposals/vector-index.md", "owner": "Takoform maintainers", "consumer": "Takosumi Cloud VectorIndex offering", "intendedHosts": ["Takosumi Cloud"], "workload": "Provision a vector index with fixed dimensional and metric compatibility and expose an index interface.", "portableBoundary": "Dimension, metric family, lifecycle identity, and declared vector-index interface without selecting an engine or embedding provider credentials.", "portableFields": ["connections", "dimensions", "metric", "name"], "hostDecisions": ["index implementation", "placement", "capacity", "replication", "credentials", "pricing"], "lifecycleRisks": {"replacement":"Dimension or incompatible metric changes require rebuild or replacement.","dataLoss":"Delete or rebuild can discard indexed vectors unless export/recovery exists.","delete":"Delete follows explicit retention and recovery policy.","import":"Import requires exact dimension, metric, namespace, and ownership evidence.","drift":"Refresh reports index configuration and availability drift without reading vector contents."}, "securityBoundary": {"credentials":"Index credentials remain host-owned bindings.","network":"The host owns query endpoint exposure and isolation.","artifacts":"No executable artifact belongs in the Form.","secrets":"Vectors, metadata, and credentials never enter portable Resource state."}, "priorArt": [{"name":"OCCI","applicability":"applicable","finding":"Generic Resource and Link concepts apply but do not define vector index compatibility."},{"name":"CIMI","applicability":"not-applicable","finding":"CIMI has no focused vector-search resource contract."},{"name":"TOSCA","applicability":"applicable","finding":"Data service capabilities and relationships inform consumption boundaries."},{"name":"Kubernetes/Crossplane","applicability":"applicable","finding":"Managed vector database CRDs and operators inform reconciliation and connection publication."},{"name":"Terraform/OpenTofu","applicability":"applicable","finding":"Pinecone, managed search, and Vectorize resources expose dimension, metric, namespace, and state tradeoffs."}], "existingAbstractionGap": "A minimal engine-neutral vector-index compatibility contract that leaves data plane, credentials, scaling, and pricing to the host." } ] }