// Package ports declares the driven-port interfaces of the oikos core:
// repositories, executors, resolvers, probes, secrets, and events.
// Core packages define these interfaces; adapters under internal/adapters
// implement them. See docs/adr/0016-hexagonal-ports-adapters.md.
//
// Port rules (plan §3.3/§3.6):
//   - Command-side repository methods are transaction-scoped aggregates:
//     one method = one BEGIN…COMMIT = everything that must succeed or
//     fail together. Input structs carry derived checks, audit entries,
//     and events as fields.
//   - Read methods are plain queries.
//   - ReadModels (query-shaped report reads consumed directly by the
//     httpapi/mcpserver adapters) materializes with the first vertical
//     slice in Phase 3 and grows as report handlers rewire.
//   - Signatures reference core/domain types (plus port-local payload
//     types); they firm up per phase as the slices land.
package ports