{
  "schema_version": "2026-05-14.leafenterprise.data-plane.v1",
  "source_of_truth": true,
  "sources": [
    {
      "id": "aws_sql",
      "name": "AWS SQL Server",
      "role": "Current claims/reporting runtime source for scoped savings/audit rows.",
      "authoritative_for": ["claims rows", "audit report source tables when filtered by governed run scope"],
      "not_authoritative_for": ["contract guarantees", "rebate-backed savings", "cross-scope comparisons"],
      "allowed_consumers": ["LeafEnterprise backend", "governed MCP tools through backend APIs"]
    },
    {
      "id": "azure_sql_domo_takeover",
      "name": "Azure SQL Domo takeover store",
      "role": "Dedicated curated store for Domo migration and reconciliation datasets.",
      "authoritative_for": ["promoted complete takeover manifests", "golden comparison packets"],
      "not_authoritative_for": ["live runtime savings calculations unless explicitly promoted"],
      "allowed_consumers": ["LeafEnterprise takeover jobs", "validation tools", "agent evidence retrieval"]
    },
    {
      "id": "adls_gen2",
      "name": "ADLS Gen2",
      "role": "Immutable storage for bronze/silver evidence, materialized files, and artifacts.",
      "authoritative_for": ["evidence retention", "artifact replay", "source snapshot lineage"],
      "not_authoritative_for": ["direct browser-visible raw content"],
      "allowed_consumers": ["backend jobs", "AKS workers", "governed retrieval pipelines"]
    },
    {
      "id": "graph_onedrive",
      "name": "Microsoft Graph / OneDrive",
      "role": "Read-only governed retrieval for contract packets and client-folder evidence.",
      "authoritative_for": ["candidate contract packet retrieval", "exact packet promotion after resolver checks"],
      "not_authoritative_for": ["raw download URL exposure", "local path exposure"],
      "allowed_consumers": ["contract guarantee resolver", "backend-only packet tools"]
    },
    {
      "id": "salesforce_itr",
      "name": "Salesforce ITR",
      "role": "Request intake, workbench source, history/files/notes/feed evidence mirror.",
      "authoritative_for": ["request lineage", "operator intent", "evidence bundle context"],
      "not_authoritative_for": ["final savings math by itself"],
      "allowed_consumers": ["ITR workbench", "evidence materialization", "search document publication"]
    },
    {
      "id": "azure_ai_search_foundry_iq",
      "name": "Azure AI Search / Foundry IQ",
      "role": "Enterprise retrieval index over governed extracted evidence and packets.",
      "authoritative_for": ["search and retrieval over approved indexed context"],
      "not_authoritative_for": ["bypassing source-system policy or sensitivity boundaries"],
      "allowed_consumers": ["agent tools", "module copilots", "retrieval routers"]
    },
    {
      "id": "domo",
      "name": "Domo",
      "role": "Migration and reconciliation evidence for legacy savings/audit behavior.",
      "authoritative_for": ["legacy behavior comparison", "Beast Mode discovery", "negative tests"],
      "not_authoritative_for": ["runtime LeafEnterprise calculations", "final guarantee or rebate-backed claims"],
      "allowed_consumers": ["takeover validation jobs", "reconciliation docs", "golden comparison tooling"]
    }
  ]
}