docs(OGAR): APP‖class codebook layout + per-app migration plan (plan only)

[AdaWorldAPI]

What

Claims the high u16 of the 32-bit classid as the APP / codebook-namespace + render prefix, leaving the low u16 as the shared canonical concept. Documentation only — nothing minted, spine byte-for-byte unchanged. Gated on the 5+3 codebook pass.

classid : u32  =  [ hi u16 : APP / render ]  [ lo u16 : concept ]
                    0xAAAA                       0xDDCC

The two halves carry orthogonal facts:

half	answers	keyed by	shared?
lo u16 0xDDCC	WHAT it is	RBAC grant + ontology + cross-app identity	shared across apps
hi u16 0xAAAA	WHOSE rendering	app ClassView / Askama template / SoA layout	per-app

This resolves the operator's observation that classid is 8 hex but only the low 4 were ever used (the high u16 was reserved-zero, not SoA versioning — that's ENVELOPE_LAYOUT_VERSION: u8 = 2, a separate byte). Additive: every shipped id is 0x0000_DDCC, so zero ENVELOPE_LAYOUT_VERSION cost and RESERVE-DON'T-RECLAIM holds. It also answers "codebook per project avoids radix-trie codebook limits" — each app prefix roots its own centroid-codebook hierarchy + template set.

The goal it serves

Strings / text / media / online sources rendered by key-value resolution against typed content stores, so no serialization exists in the hot path (the Firewall, ADR-022/023). A rendered object is a tree of keys. The same discipline extends to RAG: retrieval moves keys; content materializes into the LLM only at the membrane, exactly once. Two membranes (UI render + LLM prompt), one rule — the hot path stays blob-free end to end. (The model is, deliberately, C64/6502 addressing — character ROM = string codebook, sprite pointers = media keys, PEEK/POKE not serde.)

Files

• APP-CLASS-CODEBOOK-LAYOUT.md — the layout; Medcare worked example (patient = 0x0005_0901); §3.5 render / §3.6 content-KV / §3.7 RAG membrane / §3.8 C64-6502 intuition; invariants I-APP1..6.
• APP-CODEBOOK-MIGRATION-PLAN.md — wave-ordered: W0 OpenProject (0x0001) + Redmine (0x0007) flagship · W1 WoA · W2 SMB · W3 Odoo (delete the od-ontology fork) · W4 q2 (author port first).
• CLASSID-RBAC-KEYSTONE-SPEC.md — prior-session keystone spec; §7 dated correction (auth is core domain 0x0B, not project-block 0x011B).
• CONSUMER-MIGRATION-HOWTO.md — prior-session generic guide (pull classid → enrich → authorize, no bridge).
• DISCOVERY-MAP.md — D-APPCLASS + D-KV-RENDER ledger entries ([H]).

The flagship (W0) — two renders, one concept

WorkPackage (OpenProject) → 0x0001_0102 ┐ lo 0x0102 project_work_item ⇒ ONE RBAC + ontology
Issue       (Redmine)     → 0x0007_0102 ┘ hi 0x0001/0x0007 ⇒ TWO templates, zero concept dup

Both authorize on the shared project_role 0x0117 grant lattice (already the keystone's worked example, harvested from the Rails/Redmine model); each renders via its own ClassView.

Status

[H] — every register/id maps to a shipped type, but minting is gated on the 5+3 codebook pass; a PROBE-KV-RENDER-NOSERDE (hot-path no-serde across one render + one RAG path) would promote the render claim [H]→[G]. No code, no classid minted, no spine edit.

🤖 Generated with Claude Code

https://claude.ai/code/session_01EYvNjD8M8LMNYbRy3gq2FP

---

Generated by Claude Code

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.