Initial project import

plugins/1c/connector/policies/designer-sql-decoding-policy.yaml

@@ -1,6 +1,6 @@
 id: 1c-designer-sql-decoding-policy
 status: active
-summary: "Controlled changes in a disposable 1C base may be made only through 1C clients; the adapter observes and decodes SQL without writing application data."
+summary: "The adapter is a SQL codec only: it decodes and encodes strictly by the live-SQL-derived, versioned configuration-storage specification. In an explicitly authorised test base it may write only verified configuration saved-state overlays. It never invents 1C structure, BSL, or integrity atoms, and never writes active configuration or application data."
 
 scope:
   default_base_id: upo_test
@@ -8,8 +8,10 @@ scope:
   forbidden_base_class: [production, unclassified]
   platform_mutation_authority:
     application_data: 1c_enterprise_client
-    metadata_working_state: 1c_designer
-  adapter_role: sql_observer_and_decoder
+    active_configuration: 1c_designer
+    metadata_saved_state: adapter_sql_only_with_verified_codec
+  adapter_role: specification_bound_sql_decoder_and_controlled_saved_state_writer
+  fundamental_rule: "Unknown, incomplete, or ambiguous structure returns explicit evidence and unsupported/partial/ambiguous; no guessed decoding or encoding is permitted."
 
 credentials:
   persistence: forbidden_in_repository
@@ -35,7 +37,7 @@ experiment:
   forbidden_selectors_for_callers: [sql_number, physical_table, internal_guid_only]
 
 sql_observation:
-  adapter_access: read_only
+  adapter_access: sql_only
   allowed: [SELECT, metadata_schema_inspection, ConfigSave_read, ConfigCASSave_read, application_table_read]
   forbidden:
     - direct_application_data_write
@@ -43,7 +45,20 @@ sql_observation:
     - direct_ConfigCAS_write
     - sql_identity_or_permission_change
     - trigger_or_profiler_installation
-  rule: "All experimental mutations happen through 1C; SQL is evidence, not the mutation transport."
+  rule: "For production and unclassified bases SQL is evidence only. In the explicitly authorised disposable base, SQL writes are limited to ConfigSave/ConfigCASSave after a proven lossless codec, exact preconditions, atomic paired-file update, backup, and readback verification."
+
+saved_state_write:
+  allowed_base_id: upo_test
+  allowed_tables: [ConfigSave, ConfigCASSave]
+  forbidden_tables: [Config, ConfigCAS]
+  required:
+    - "Resolve the target by live public-name evidence; do not require callers to supply a physical selector."
+    - "Read and hash every target byte stream before writing."
+    - "Use an exact, unique edit anchor or a proven offset/path selector; otherwise return an ambiguity error."
+    - "For extension saved-state, update the changed payload and the matching __configinfo file-SHA1 reference atomically."
+    - "Preserve unproven service atoms byte-for-byte; never generate a value by guesswork or randomness."
+    - "Create rollback evidence and verify SQL readback after commit."
+    - "Return Configurator refresh guidance based on whether the object existed in saved-state before the write."
 
 metadata_layers:
   designer_save:
@@ -66,4 +81,3 @@ promotion_gates:
   - "The rule is reproduced with a second value or a second object of the same shape."
   - "A regression fixture and decoder test are added."
   - "Rollback through 1C restores the SQL evidence or the experiment documents an irreversible schema migration."
-