{
  "schema_version": 1,
  "work_package": "P3-WP07",
  "compose_profile": {
    "local_engineering_status": "ready",
    "capabilities": [
      "checksum verified offline bundle",
      "CycloneDX SBOM and release manifest",
      "environment isolation",
      "upgrade preflight and restore-based rollback",
      "logical PostgreSQL export and cold managed-volume snapshot",
      "restore to new Compose project"
    ],
    "constraints": [
      "single-host Compose is not cluster HA",
      "backup encryption and offsite media require external provider evidence",
      "local recovery timing is not an approved enterprise objective"
    ]
  },
  "cluster_profile": {
    "local_engineering_status": "renderable_contract_ready",
    "enterprise_uat_status": "TBD_EXTERNAL",
    "capabilities": [
      "Helm values schema and immutable image references",
      "secret references only",
      "runtime/migrator separation",
      "hardened pod security, probes, resources, PDB, topology and NetworkPolicy",
      "digest-bound promotion, drift and restore-based rollback contracts"
    ],
    "external_requirements": [
      "approved Kubernetes or OpenShift target",
      "enterprise registry and signing certificate",
      "load balancer and failure-domain topology",
      "approved SLA, recovery objectives and change window",
      "offsite encrypted backup media and recovery sign-off"
    ]
  },
  "equivalence_rule": "Compose remains the private delivery profile. Cluster profile has equivalent application, migrator, secret-reference, artifact, backup and recovery contracts, while multi-node availability and automatic recovery require enterprise UAT."
}