Expose authoritative lifecycle deletion through capability bindings

src/capability-model/execution.ts

@@ -125,7 +125,7 @@ export function validateExecutionContracts(workspace: WorkspaceRevision): Capabi
     if (!revision) continue;
     for (const entry of conformance.operationBindings) {
       const operation = operations(entry.operationId, revision);
-      if (!operation?.execution || operation.execution.kind === "remote") continue;
+      if (!operation) continue;
       const path = `${conformance.atomId}/${revision.revisionId}/${entry.operationId}`;
       let binding;
       try {
@@ -142,6 +142,19 @@ export function validateExecutionContracts(workspace: WorkspaceRevision): Capabi
         const target = interfaces.get(entry.binding.interfaceRevisionId);
         if (target) supports(operation.execution, operations(entry.binding.operationId, target)?.execution, path);
       }
+      if (binding.kind === "lifecycle") {
+        if (
+          operation.execution?.kind !== "transaction" ||
+          operation.execution.targets.length !== 1 ||
+          operation.execution.targets[0] !== "server"
+        )
+          fail(
+            path,
+            "Deletion requires an explicitly server-only transaction; partial replicas cannot enumerate incoming references",
+          );
+        continue;
+      }
+      if (!operation.execution || operation.execution.kind === "remote") continue;
       if (binding.kind === "package") {
         const provider = packages.get(binding.packageRevisionId)?.exports.find((e) => e.id === binding.exportId);
         supports(operation.execution, provider?.execution, path);