Events and identifiers

Domain subjects include Organization, Estate, MigrationObject, Wave, Engagement, ConnectionBinding, DependencyGraph, MigrationPlan, Artifact, ConversionBatch, and Residue. Events use past-tense Airlift names such as AirliftAssessmentRecorded, AirliftConversionRecorded, AirliftReadinessRecorded, AirliftMigrationCertificateMinted, and AirliftCutoverRecorded. Discovery and planning also emit AirliftAssessmentAccepted, AirliftDependencyGraphStarted, AirliftDependencyBatchRecorded, AirliftDependencyGraphAccepted, AirliftMigrationPlanGenerated, AirliftMigrationPlanSelected, and AirliftMigrationPlanFrozen. The conversion factory emits AirliftArtifactRegistered, AirliftConversionBatchCreated, AirliftConversionBatchStarted, AirliftConversionBatchCompleted, and the AirliftResidue* lifecycle events. Source access emits AirliftConnectionBindingRegistered, AirliftConnectionBindingVerified, AirliftConnectionBindingRetired, and AirliftConnectionDiagnosticRecorded (an admitted connectivity diagnostic bound to a connection binding; its digest is derived by the handler, never supplied by the caller). Databricks access emits AirliftAccessPreflightRecorded. V1 and V2 deployment records describe the App service principal; V2 participant records bind one pseudonymous user and workspace for evaluator readiness. Participant records never satisfy deployment reachability, and deployment records never satisfy participant readiness. The handler derives every digest and overall state; access observations never raise target integration state to observed. Evaluation readiness emits AirliftEvaluationCandidateFrozen and AirliftEvaluatorRehearsalRecorded (an admitted candidate freeze and rehearsal; both digests are handler-derived, and evaluation_ready is derived only — never stored on either event). Unity Catalog evidence emits AirliftUcProjectionRunRecorded and AirliftUcTargetReconciliationRecorded (an admitted analytics projection run and a per-artifact target reconciliation; both digests are handler-derived, freshness derives from the cursor watermark, and a current evidence state promotes nothing).

Platform also emits ComplianceBlocked, AdapterInvocationStarted, AdapterInvocationSucceeded, and AdapterInvocationFailed. Authorization can reject a principal before domain/policy execution; an authorization denial therefore does not promise a ComplianceBlocked event.

Every envelope carries the organization as tenantId, plus invocation/correlation identity. Projections derive tenant scope from the envelope, not an event payload field.