KES Code Boundary Hardening
Historical Status Note
This document records the first hardening move that happened before the extracted svc-kes runtime and later compatibility-layer removal.
Current truth:
- canonical KES runtime: services/svc-kes
- old
svc-tendersKES HTTP host: retired - former
services/svc-tenders/src/kes/validation.tsandcontracts.ts: removed as live paths
The path references below are historical hardening evidence, not current runtime ownership.
What validation moved
Sprint 88 moved the clearly KES-owned schema block out of the mixed root validator and into:
Moved schemas: