| D1 | Long-context LLM fallback | Gemini 2.5 Pro via Vertex AI on factory-495015. Grok dropped. | 2026-05-02 | ARCHITECTURE.md §6 |
| D2 | Template blessed threshold | 3 successful runs, 0 reverts, 0 human overrides | 2026-05-02 | ARCHITECTURE.md §5.5 |
| D3 | Lock primitive | LockDO Durable Object singleton per app, D1 as audit log | 2026-05-02 | ARCHITECTURE.md §5.8 |
| D4 | Capability mutation flag | Graded side_effects levels (none/read-external/write-app/write-external), not boolean mutating | 2026-05-02 | ARCHITECTURE.md §7 |
| O2 | Memory backend default | CF Agent Memory primary + D1 dual-write. MEMORY_BACKEND=agent default; flip to d1 on beta flakiness. Monthly reconciliation workflow checks drift. | 2026-05-02 | factory#111 |
| O1 | Supervisor runtime location | New apps/supervisor worker — keep factory-admin read-only. Independent deploy/rollback; no coupling of dashboard with mutator operations. | 2026-05-02 | factory#110 |
| O3 | Template authoring surface | YAML in docs/supervisor/plans/, versioned with code; code-review applies; test harness on PR. Notion option rejected. | 2026-05-02 | ARCHITECTURE.md §12 |