ADR-0001 · YAML configuration
Normative contract — YAML transport, env interpolation, layered merge, typed access, subscription semantics, canonical JSON.
ADR-0002 · Secret references and SecretSource adapters
Normative contract for Phase 2 secrets — ${secret:scheme:path} reference grammar, the SecretSource interface, EnvSecretSource and VaultSource pilot adapters, lazy vs eager resolution, three new error reasons.
ADR-0003 · Push rotation and cloud secret managers (candidate)
Tracking candidate for the Phase 3 secrets discussion — push-based rotation channel, cloud secret-manager adapters (awssm / gcpsm / k8ssecret), token-renewal background hooks, composite patterns. No normative decisions yet; this page mirrors the candidate so context7 indexes the placeholder names.