Features

Deterministic by design

Same input + same plan + same engine fingerprint → same SHA-256 output.
Cache key includes Codex section versions — a Codex bump auto-invalidates affected outputs.
Plan canonicalization (sorted keys, normalized numbers, comment stripping) makes the cache key reproducible across implementations.

Multi-instance native

Hybrid Codex routing (plant affinity first, controlled shared failover).
Per-replica /healthz reports instance_id, version_skew, and live Codex section versions.
End-to-end X-Compile-Request-Id propagation — query a single ID and see the full lint→compile→codex chain.
Section-version contract guard refuses traffic during incompatible mid-rollout windows.

Architectural integrity

Codex stays read-only — enforced by produce_surface_audit.py.
Compile MUST NOT re-implement Codex — enforced by consume_surface_audit.py.
Lineage on every job — JSONL stream + Redis index + bucket-authoritative output store.

Producer surface

Rewrite — 15 object-tree mutations (no content-stream surgery).
Marks — 12 v1.0 mark types (production + 1-up proofing) + external file ingestion.
Impose — sheet-level step-and-repeat with work-and-turn / tumble.
Trap — three engine slots (pure_python / ghostscript / external).
CJD — Compile Job Definition envelope (JSON or XML) for multi-producer pipelines.