{
  "id": "server_workspace_manager",
  "label": "Server Workspace Manager Canonical",
  "phase": "phase-04",
  "category": "containerization",
  "status": "ACTIVE_DH_MIRROR",
  "purpose": "Define the server workspace roots that DEVON-DEV must respect before creating files, directories, builds, releases, configs, logs, backups, scripts or sandbox material.",
  "function": "Keep every server-side operation inside declared workspace roots so DEVON-DEV cannot create artifacts in arbitrary host paths, confuse sandbox with production, lose backups, bury logs or build releases outside governed locations.",
  "workspace_contract": {
    "requires_project_root": true,
    "requires_sandbox_root": true,
    "requires_production_root": true,
    "requires_backup_root": true,
    "requires_logs_root": true,
    "requires_temp_root": true,
    "requires_build_root": true,
    "requires_release_root": true,
    "requires_config_root": true,
    "requires_scripts_root": true,
    "blocks_unknown_roots": true,
    "requires_path_policy": true,
    "requires_root_validation_before_write": true,
    "decision_authority": "NONE_FSM_DECIDES"
  },
  "technology_requirements": [
    {
      "technology": "Server Workspace Registry",
      "required_for": "Register project_root, sandbox_root, production_root, backup_root, logs_root, temp_root, build_root, release_root, config_root and scripts_root for DEVON-DEV server operations.",
      "required_by_phase": "phase-04",
      "required_by_category": "server_workspace_manager",
      "required_by_buckets": [
        "Prerequisites",
        "Installation",
        "Configuration",
        "Validation",
        "Observable Evidence",
        "Failure Modes & Recovery",
        "Completion & Promotion"
      ],
      "expected_version": "MISSING until workspace-root schema and persisted registry exist",
      "validation_command": "MISSING until workspace root registration, lookup and path-resolution checks exist",
      "evidence_path": "/home/yeff/public_html/devon/canon/execution/state/dh_sources/server_workspace_manager_canonical.json",
      "status_source": "Documentation Hub + future Server Workspace Registry + devon-server-ops",
      "blocking_if_missing": true,
      "failure_impact": "Without Server Workspace Registry, DEVON-DEV cannot prove where project, sandbox, production, backup, logs, builds, releases, configs or scripts belong."
    },
    {
      "technology": "Path Policy Validator",
      "required_for": "Validate every filesystem, build, release, backup and script operation against the declared workspace roots before execution.",
      "required_by_phase": "phase-04",
      "required_by_category": "server_workspace_manager",
      "required_by_buckets": [
        "Configuration",
        "Validation",
        "Observable Evidence",
        "Failure Modes & Recovery",
        "Completion & Promotion"
      ],
      "expected_version": "MISSING until path policy and root membership checks exist",
      "validation_command": "MISSING until path validation can prove allowed root, blocked root, sandbox root and production root decisions",
      "evidence_path": "/home/yeff/public_html/devon/canon/execution/state/dh_sources/server_workspace_manager_canonical.json",
      "status_source": "Documentation Hub + future devon-server-ops path policy logs",
      "blocking_if_missing": true,
      "failure_impact": "Without Path Policy Validator, DEVON-DEV can write, build, back up or release material outside governed server roots."
    },
    {
      "technology": "devon-server-ops",
      "required_for": "Operate server filesystem and workspace actions through a controlled server operations service instead of direct unmanaged path writes.",
      "required_by_phase": "phase-04",
      "required_by_category": "server_workspace_manager",
      "required_by_buckets": [
        "Installation",
        "Configuration",
        "Validation",
        "Observable Evidence",
        "Failure Modes & Recovery",
        "Completion & Promotion"
      ],
      "expected_version": "MISSING until server operations service exists with workspace-aware filesystem operations",
      "validation_command": "MISSING until devon-server-ops can prove workspace-aware create, read, build, backup, log and script path handling",
      "evidence_path": "/home/yeff/public_html/devon/canon/execution/state/dh_sources/server_workspace_manager_canonical.json",
      "status_source": "Documentation Hub + future devon-server-ops health check + Execution Ledger",
      "blocking_if_missing": true,
      "failure_impact": "Without devon-server-ops integration, workspace governance remains documentation and server operations can still bypass path policy."
    }
  ],
  "depends_on": [
    "cdms",
    "server_registry",
    "sandbox_environment",
    "deployment_order",
    "tool_registry",
    "config_registry",
    "fsm_absolute_decision",
    "decision_rule_registry",
    "architecture_source_registry"
  ],
  "used_by": [
    "environment_registry",
    "container_image_registry_build_pipeline",
    "container_network_policy",
    "volume_persistence_governance",
    "filesystem_operations",
    "shell_execution",
    "backup_rollback",
    "execution_ledger",
    "future_execution_monitoring_panel"
  ]
}
