Architecture Decision Records

Architecture Decision Records (ADRs) capture durable design choices whose rationale should survive implementation refactoring. They complement ../architecture.md; they do not replace the product contract.

ADR	Decision
ADR-001	Snapshot is the default publication mode
ADR-002	Execution is bound to immutable approved source state and fails closed on drift
ADR-003	Replacement preserves repositories and recovery evidence rather than deleting or auto-rolling back
ADR-004	Wizard/public command share the approved-plan application engine; native commands use centralized no-shell execution
ADR-005	Content verifies before protection restoration; v0.1.0 supports github.com only

Each ADR records context, decision, alternatives/tradeoffs, and consequences. New ADRs should be added only for durable choices that would be costly or confusing to rediscover from source history.