{
  "membranes": [
    {
      "accepts": [
        "EcosystemRelevance"
      ],
      "active": false,
      "closing_condition": "Any SOLID enforcement layer failing or NATS stream misconfiguration detected.",
      "description": "Controls when the provisioning control plane is ready for production deployment and multi-user mode.",
      "id": "control-plane-readiness",
      "max_duration": "Indefinite",
      "name": "Control Plane Readiness",
      "opening_condition": {
        "core_stable": true,
        "description": "Orchestrator + Control Center operational, NATS streams configured and stable, SOLID boundaries passing all 6 enforcement layers, Cedar policies loaded and evaluated.",
        "max_tension_dimensions": 2,
        "pending_transitions": 2
      },
      "permeability": "Low",
      "protects": [
        "production deployment",
        "multi-user mode"
      ],
      "protocol": "Challenge"
    },
    {
      "accepts": [
        "EcosystemRelevance",
        "OpportunityAlignment"
      ],
      "active": false,
      "closing_condition": "Workspace config fails schema validation or provider capabilities no longer match declared requirements.",
      "description": "Controls when a workspace is ready for production use — all taskservs validated, config schema-checked, provider capabilities matched.",
      "id": "workspace-certification",
      "max_duration": "Indefinite",
      "name": "Workspace Certification",
      "opening_condition": {
        "core_stable": true,
        "description": "All taskservs in workspace have dependencies.ncl, config validates via nickel typecheck, provider capabilities match requirements.",
        "max_tension_dimensions": 3,
        "pending_transitions": 3
      },
      "permeability": "Medium",
      "protects": [
        "workspace production use"
      ],
      "protocol": "Observe"
    }
  ]
}