Runtime contract

A .oxbin is consumed by a runtime backend. The runtime contract defines what a backend promises: how to load an artifact, how to bind it to per-tenant state, how to answer queries against bitemporal data, how to apply mutations, and how to enforce the capability surface that gates compliance-sensitive operations.

The contract specifies a three-role factoring (Engine / Module / Store factoring), a trait surface (The OxbinRuntime trait surface), a lifecycle (Lifecycle), bitemporal AsOf semantics (AsOf semantics — bitemporal point), a capability surface (Capability surface), and the ox runtime serve HTTP surface (Serving surface).