Single source of truth for who is acting.
SpreadVerse Core owns the shared rules and reusable primitives every future product edition must obey. Neutral. Auditable. Independent of any single domain.
Single source of truth for who is acting.
Workspace + organization isolation, enforced at the contract layer.
Roles, permissions, policy checks — uniform across editions.
Traceability and approval discipline for every important action.
API response shape, error shape, validation rules.
Controlled fields, field governance, agent-readable descriptions.
Statuses, tasks, events, lifecycle transitions.
Notes, messages, activity history, notification concepts.
Document references, requirements, lifecycle states.
Pricing, fee, cost, commission, receivable, payable, ledger concepts.
Approved metrics, reportable fields, cross-domain aggregation rules.
Safe task boundaries, evidence reporting, no uncontrolled execution.
Product editions may define their own workflows, screens, forms, customer language, document requirements, product rules, commercial models, and user journeys.
However — editions must not rewrite Core rules. Product-specific behavior is implemented as controlled extensions of:
No domain-specific concepts leak in. If a vertical needs it, it lives in an extension.
Never reach past the Core API. Never depend on internals.
Cross-domain coupling becomes a vertical's gravitational pull. Mediate through Core.
Or approved shared modules. Duplication is a tax with compounding interest.
Untyped extension fields are the root cause of platform decay. Not allowed.
If it changes state, it has an actor, a policy check, and an audit record.
Tests that always pass are worse than no tests. Either it works on real evidence, or it ships broken.
Aspirations don't earn the same typography as shipped reality.
The-Ultimate-Core/ ├── apps/ │ ├── client/ # planned end-user web application │ └── server/ # planned API and worker application ├── packages/ │ ├── config/ # shared configuration and env validation │ ├── types/ # shared types and schemas │ ├── db/ # database schema and migrations │ ├── errors/ # API error contracts │ ├── logger/ # structured logging package │ ├── auth/ # auth and permission helpers │ ├── metadata/ # metadata governance contracts │ ├── agent-contracts/ # agent-safe task contracts │ └── design-system/ # shared UI tokens and primitives ├── docs/ ├── .github/workflows/ ├── package.json └── pnpm-workspace.yaml
Master principles for the Core foundation.
What belongs in Core vs. extensions.
Build extensions without fragmenting architecture.
Controlled metadata model. Anti-chaos rules.
Safe agent / Codex development discipline.
Layer model and dependency direction.
Planned API contracts. Database conventions and data classification.
Deployment planning. Branching and delivery discipline.