KES Shared Dependency Reduction
Current Status Note
This document now reflects the post-extraction state.
- canonical KES runtime: services/svc-kes
- retired host: old colocated KES HTTP routing in
svc-tenders - removed compatibility layer: former
services/svc-tenders/src/kes/*
What shell dependencies were narrowed
Sprint 89 narrowed the KES shell dependency surface by grouping payment-sensitive ingress behavior behind a clearer KES-facing contract. Later runtime extraction and compatibility cleanup carried that narrower contract into the extracted runtime.
New explicit KES-facing ingress contract:
- contracts.ts defines
KesPaymentIngressSupport - KesRouteSupport exposes instead of mixing KYC/signature helpers directly into the broader parser/auth surface