Module ports 

Application ports (dependency-inverted boundaries).

Wave 2 introduces explicit traits for the boundaries already demonstrated by Runtime ports. Speculative ports are intentionally omitted.

Modules

observe

Observe-side ports used by application services.

provider

Provider-runtime failures after transport/protocol decoding.

secrets

Secret-resolution port (binding references only; action-scoped).