docs: ratify PRD rev1 — consolidated bundle, permanent shim, rev0 archived

Ratifies the Mosaic Stack PRD rev1 (Jason Woltje, 2026-09-01) as project
source of truth and installs the GOV.1 lifecycle model:

- docs/PRD.md becomes a permanent shim (kind: shim, current_rev ->
  docs/PRDs/2026-08-31_PRD_rev1/). Its path never changes again.
- docs/PRDs/2026-08-26_PRD_rev0/PRD.md archives the 2026-08-26 North Star
  verbatim (sha256 60cc2f98...36afdf unchanged). Archive, never delete.
- docs/PRDs/2026-08-31_PRD_rev1/ is the frozen rev1 bundle: 18 sectioned
  documents (VIS, DATA, AUTHN, AUTHZ, SEAT, ROLE, HARN, PROV, SESS, UI, CLI,
  GOV.1-5) consolidating rev0 D1-D15, the fleet north star, the agent-runtime
  L1/L2 contracts and the control-plane-surfaces lane findings, with a single
  decision map (GOV.3) and a closed open-questions frontier (GOV.5, grill
  rounds 1-8). Drafting inputs (_source-* snapshots) are not shipped.

Consequences of the ratified rulings carried in the same change:

- Q-T1 (ruling B, "shipped but frozen"): D3 amended in GOV.3/VIS.1;
  federation M1-M3 acknowledged as shipped behind tier === 'federated',
  excluded from the v1 bar and frozen, with a security re-audit gate before
  any resumption. docs/MISSION-MANIFEST.md, docs/federation/MISSION-MANIFEST.md
  and docs/scratchpads/mvp-20260312.md get status: superseded + banners
  (content preserved verbatim); docs/guides/deployment.md gains a
  "Relationship to the PRD (D15)" section. NORTH_STAR.yaml adds dormant
  workstream M (projects no goals by design); NORTH_STAR.md regenerated.
- Q-G2 (distinct registry prefixes): every citation of the operator
  DECISION-REGISTER in the bundle reads OD-nn; the stack registry stays
  D1-D15; L1-Dnn/L2-Dnn untouched. Prefix rule recorded in GOV.1.

Follow-ups (not in this PR): CI parity drift-gate witness (Q-C1); brain-side
DECISION-REGISTER rename to OD- with redirect table on its next touch.

docs/PRDs/2026-08-31_PRD_rev1/PRD.md

@@ -0,0 +1,103 @@
+---
+kind: spec
+status: ratified
+ratified: 2026-09-01 (Jason Woltje; PRD rev1 ratification PR)
+succeeds: origin/next:docs/PRD.md (2026-08-26 North Star, commit 9aa4983c, sha256 60cc2f98697471850caa3440d79139d70f67eda585a2ee465fdcd517bc36afdf)
+---
+
+# PRD: Mosaic Stack — rev1
+
+The project source of truth, successor to the 2026-08-26 North Star PRD
+(rev0). Ratified 2026-09-01; this bundle is frozen — the next revision is
+drafted in a lane and lands as a new bundle ([[GOV.1-prd-lifecycle]]). This file assembles the section documents in this bundle; the
+sections own the detail. Order authority and naming: [[PRD.0-index]].
+Lifecycle (shim, frozen revision bundles, archival): [[GOV.1-prd-lifecycle]].
+
+The PRD is **mission-independent**: missions pin an accepted PRD version and
+reference it (register OD-16/OD-19); they never usurp it. rev0 ([rev0 PRD](../2026-08-26_PRD_rev0/PRD.md)) is archived verbatim beside this bundle;
+`docs/PRD.md` is the permanent shim pointing here.
+
+## Metadata
+
+- **Owner / decision authority:** Jason Woltje
+- **Status:** ratified 2026-09-01 (Jason Woltje). Drafted as a class-2 draft-native in lane `fleet/lanes/control-plane-surfaces` (estate brain); grill record in [[GOV.5-open-questions]]
+- **Base text:** rev0, pinned at `origin/next` commit `9aa4983c`
+- **Pulled sources (inputs, never ratified; not shipped in this bundle):** [rev0 PRD](../2026-08-26_PRD_rev0/PRD.md) and the operator DECISION-REGISTER (estate brain `docs/guides/proposed/DECISION-REGISTER.md`, snapshot 2026-08-28, sha256 `2cc81be1…aabec`; operator-only corpus, not shipped)
+
+## Revision log
+
+| Rev | Date | State | Notes |
+|-----|------|-------|-------|
+| rev0 | 2026-08-26 | superseded 2026-09-01; archived verbatim as `docs/PRDs/2026-08-26_PRD_rev0/PRD.md` | North Star PRD (Part I product north star from D1–D14 + D15; Part II workstream contracts) |
+| rev1 | 2026-08-31 | **ratified 2026-09-01** (Jason; grill rounds 1–8 closed the GOV.5 frontier) | rev0 + control-plane surfaces (seats, roles, harnesses, providers, authentication, sessions, WebUI/CLI), consolidated decision map, authorization gap register, docs-estate consolidation |
+
+## Mandate (2026-08-31 drafting directive)
+
+1. Combine the official PRD (rev0) with the `control-plane-surfaces` and
+   `agent-runtime-ng` lane findings.
+2. Ingest and reconcile the pertinent document corpus — stack `docs/` on
+   `origin/next`, `~/.mosaic/docs`, `~/.mosaic/docs/guides/proposed`
+   ([[GOV.2-docs-inventory]] is the audit trail).
+3. Specify all functions of the site and the north star in one place, with
+   full `mosaic` CLI ↔ WebUI parity.
+4. Remove the no-central-location ambiguity; clear up drift and naming issues;
+   clarify ambiguous structural language.
+5. Walk open questions via ms-grill-me before ratification
+   ([[GOV.5-open-questions]]).
+
+---
+
+## Part I — Product north star
+
+**[[VIS.1-north-star]]** — what Mosaic Stack is, who it is for, deployment
+modes, hierarchy and tenancy, identity, onboarding, data custody, the
+webUI-over-tooling architecture gate, the v1 slice, the fleet-north-star
+subordination, non-goals, and tiered containerized deployment. rev0 Part I
+preserved as base text with marked rev1 annotations.
+
+## Part II — Platform model (control plane)
+
+| Section | Owns |
+|---|---|
+| [[DATA.1-record-authority]] | record-class authority (J1), the configuration data model, seat-file consolidation, reconciliation obligation |
+| [[AUTHZ.1-capability-authority]] | intersection authority model, `mosaic-core` enforcement, firewalls, privilege escapation, accepted risk, gap register G1–G7 |
+| [[ROLE.1-role-governance]] | role definitions/revisions, manifest invariants, role surface, seat/role separation rule |
+| [[SEAT.1-seat-profile]] | instance contract, seat surface, the separated role-binding control (G5), OD-02/OD-03 semantics |
+| [[HARN.1-harness-config]] | harness install/enable, model allowlists, adapter boundary (register OD-38) |
+| [[PROV.1-providers]] | hosted and local providers, named instances, activation |
+| [[AUTHN.1-auth-accounts]] | agent-side provider accounts, OAuth/API, custody rules, broker boundary |
+| [[SESS.1-session-continuity]] | Stack session id, incarnation layering, mid-stream switching via register OD-57–OD-61, the two-operations rule |
+
+## Part III — Surfaces
+
+| Section | Owns |
+|---|---|
+| [[UI.1-webui-surfaces]] | governing rules and the complete page/function inventory, including the authorization-audit page |
+| [[CLI.1-parity]] | CLI primacy, the one-engine rule (OD-53), the parity-matrix obligation, command families |
+
+## Part IV — Governance
+
+| Section | Owns |
+|---|---|
+| [[GOV.1-prd-lifecycle]] | SOT rule, shim, frozen revision bundles, archival |
+| [[GOV.2-docs-inventory]] | corpus inventory, supersession verdicts, naming-defects register |
+| [[GOV.3-decision-map]] | every binding decision registry, collision rule, reconciliation notes |
+| [[GOV.5-open-questions]] | the grill list; ratification gate |
+
+## Part V — Active workstream contracts (preserved unchanged)
+
+**[[GOV.4-workstream-contracts]]** — rev0 Part II carried verbatim: #1194
+drift detection, Compaction Refresh Trust Lifecycle, Pi Persistent Goal Loop,
+FCM, cross-harness comms, KBN-101, TESS, channel plugins, MOS-PORT, workspace
+placement guard, Release Integrity, T78 CLI migration. Open issues bind to
+them; they graduate out individually as workstreams close.
+
+---
+
+## Ratification
+
+Per [[GOV.1-prd-lifecycle]]: this bundle freezes into
+`mosaicstack/stack docs/PRDs/` (branch off `origin/next`), rev0 archives as a
+one-file bundle, `docs/PRD.md` becomes the generated pointer (register OD-18).
+Gate: [[GOV.5-open-questions]] empty or explicitly deferred; then reviewed PR
+per stack delivery gates.