Design the application storage and cache ownership boundary

BEARING.md

@@ -14,11 +14,12 @@ timeline
 
 ## Current State
 
-`v6.0.1` shipped on `2026-06-13`. The encryption surface is simplified, the
+`v6.1.0` shipped on `2026-07-11`. The encryption surface is simplified, the
 dedup-with-encryption gap is closed, and npm plus GitHub Releases are the active
 publication surfaces while JSR remains deferred behind the upstream toolchain
-blocker. The `v6.1.0` candidate adds mutable root-set retention for GC-safe
-caches and derived state.
+blocker. Mutable root sets now provide current-generation GC-safe retention.
+The emergency `v6.2.0` goalpost builds the application asset, bundle, page,
+cache, expiry, witness, and diagnostics APIs above that primitive.
 
 What exists now:
 
@@ -120,14 +121,14 @@ With v6.0.0 shipped, active work is tracked in GitHub Issues and Milestones.
 Repo docs hold design and evidence records, not the active queue.
 
 The next selected design record is
-[0045-v6-1-bounded-residency](./docs/design/0045-v6-1-bounded-residency/bounded-residency.md).
-It targets large-vault and large-blob residency hardening for
-[#38](https://github.com/git-stunts/git-cas/issues/38) in the
-[`v6.1.0` milestone](https://github.com/git-stunts/git-cas/milestone/2).
+[0047-application-storage-cache-boundary](./docs/design/0047-application-storage-cache-boundary/application-storage-cache-boundary.md).
+It targets the application storage and cache ownership boundary for
+[#50](https://github.com/git-stunts/git-cas/issues/50) in the
+[`v6.2.0` milestone](https://github.com/git-stunts/git-cas/milestone/3).
 
 The broader horizon remains:
 
-- **TUI modernization.** Track
+- **TUI modernization.** Carried forward to `v6.3.0`; track
   [#39](https://github.com/git-stunts/git-cas/issues/39). Keep dashboard and
   wizard actions sharing executable
   option-building truth while improving operator ergonomics around long-lived

CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- **Application storage ownership contract** — cycle API-0047 defines opaque
+  asset/bundle/page handles, generic application publication, generation-scoped
+  retention witnesses, RootSet-backed cache collections, expiry-safe replay
+  storage, and repository/cache diagnostics as the `v6.2.0` implementation
+  boundary. Invariant I-002 makes `git-cas` the owner of physical CAS and cache
+  lifecycle while applications retain domain and causal semantics.
+
 ## [6.1.0] — 2026-07-11
 
 ### Added

ROADMAP.md

@@ -29,31 +29,34 @@ Repo docs are supporting records:
 The milestones below should exist in GitHub. If this table and GitHub disagree,
 GitHub wins and this file should be corrected.
 
-| Milestone | Theme | Tracker |
-| --- | --- | --- |
-| [`v6.0.1`](https://github.com/git-stunts/git-cas/milestone/1) | Patch closeout and planning truth | [#37](https://github.com/git-stunts/git-cas/issues/37) |
-| [`v6.1.0`](https://github.com/git-stunts/git-cas/milestone/2) | Bounded residency and scale hardening | [#38](https://github.com/git-stunts/git-cas/issues/38) |
-| [`v6.2.0`](https://github.com/git-stunts/git-cas/milestone/3) | Operator TUI consolidation | [#39](https://github.com/git-stunts/git-cas/issues/39) |
-| [`v6.3.0`](https://github.com/git-stunts/git-cas/milestone/4) | Agent automation parity | [#40](https://github.com/git-stunts/git-cas/issues/40) |
-| [`v6.4.0`](https://github.com/git-stunts/git-cas/milestone/5) | Browser and edge read-path exploration | [#41](https://github.com/git-stunts/git-cas/issues/41) |
-| [`v7.0.0`](https://github.com/git-stunts/git-cas/milestone/6) | Protocol break only if audit requires it | [#42](https://github.com/git-stunts/git-cas/issues/42), only when justified |
+| Milestone                                                     | Theme                                                      | Tracker                                                                                                        |
+| ------------------------------------------------------------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------- |
+| [`v6.0.1`](https://github.com/git-stunts/git-cas/milestone/1) | Patch closeout and planning truth                          | [#37](https://github.com/git-stunts/git-cas/issues/37)                                                         |
+| [`v6.1.0`](https://github.com/git-stunts/git-cas/milestone/2) | Bounded residency and scale hardening                      | [#38](https://github.com/git-stunts/git-cas/issues/38)                                                         |
+| [`v6.2.0`](https://github.com/git-stunts/git-cas/milestone/3) | Emergency application storage and cache ownership boundary | [#50](https://github.com/git-stunts/git-cas/issues/50)                                                         |
+| [`v6.3.0`](https://github.com/git-stunts/git-cas/milestone/4) | Operator TUI and agent automation follow-through           | [#39](https://github.com/git-stunts/git-cas/issues/39), [#40](https://github.com/git-stunts/git-cas/issues/40) |
+| [`v6.4.0`](https://github.com/git-stunts/git-cas/milestone/5) | Browser and edge read-path exploration                     | [#41](https://github.com/git-stunts/git-cas/issues/41)                                                         |
+| [`v7.0.0`](https://github.com/git-stunts/git-cas/milestone/6) | Protocol break only if audit requires it                   | [#42](https://github.com/git-stunts/git-cas/issues/42), only when justified                                    |
 
 ## Next Release Design
 
 The next selected design record is:
 
-- [0045-v6-1-bounded-residency](./docs/design/0045-v6-1-bounded-residency/bounded-residency.md)
+- [0047-application-storage-cache-boundary](./docs/design/0047-application-storage-cache-boundary/application-storage-cache-boundary.md)
 
 Its GitHub goalpost issue,
-[#38](https://github.com/git-stunts/git-cas/issues/38), is the canonical
+[#50](https://github.com/git-stunts/git-cas/issues/50), is the canonical
 tracker. The design doc is the durable contract; the issue is the work item.
 
-Initial `v6.1.0` slice issues:
+Initial `v6.2.0` slice issues:
 
-- [#43 Targeted vault lookup](https://github.com/git-stunts/git-cas/issues/43)
-- [#44 Streaming vault list](https://github.com/git-stunts/git-cas/issues/44)
-- [#45 Blob read residency contract](https://github.com/git-stunts/git-cas/issues/45)
-- [#46 Docs and release evidence](https://github.com/git-stunts/git-cas/issues/46)
+- [#54 Opaque asset handles and retention witnesses](https://github.com/git-stunts/git-cas/issues/54)
+- [#51 Structured bundle and Merkle page storage](https://github.com/git-stunts/git-cas/issues/51)
+- [#59 RootSet-backed CacheSet lifecycle](https://github.com/git-stunts/git-cas/issues/59)
+- [#53 Expiry-safe replay set](https://github.com/git-stunts/git-cas/issues/53)
+- [#55 Repository and cache usage diagnostics](https://github.com/git-stunts/git-cas/issues/55)
+- [#49 Repository-wide reachability classification](https://github.com/git-stunts/git-cas/issues/49)
+- [#60 v6.2.0 release evidence](https://github.com/git-stunts/git-cas/issues/60)
 
 ## Rule