Security API/SPI: identity types, authentication records, authorization contracts, and the sealed verification-source family

Event bus service dispatch with contract-first interfaces and resilience policies

Extension API for the REST framework: interfaces, annotations, lifecycle hooks, middleware

Workflow runtime core: plan model, DSL, registry, public WorkflowOperations facade, generic transactional SPIs, side-effect recorder SPI, contract annotations. SQL-free.

JAX-RS routing runtime: route registration, method invocation, error pipeline, response handling

Default security runtime: authorization engine, action registry, in-memory policy resolvers, security event emitter, and Dagger modules

Backend-agnostic Micrometer metrics core: registry provider SPI, composite assembly, and bootstrap contributor

Authentication, authorization, and security context bridging for the REST framework

Annotation processor (CG-009) that validates JAX-RS resource classes at compile time: security-annotation conflicts, path-placeholder/PathParam alignment, body/form exclusivity, and multiple-HTTP-verb guardrail. Pure validation — no ...

Annotation processor (CG-005) that generates ServiceContractContributor implementations and a Dagger @Module for @ServiceContract-annotated interfaces, eliminating startup-time reflection and turning structural mistakes into compiler ...

Annotation processor that generates {Consumer}_BindingMeta companions with precomputed Kafka consumer binding metadata, letting KafkaConsumerRegistrar skip boot-time reflective scanning, plus compile-time consumer-shape validation