[arDaraz]

Summary

• add a complete product and architecture specification for growing CrewBoss from a Bash agent skill into a durable multi-project orchestration platform
• define the Skill + CLI + Go service + SQLite architecture, public protocols, state models, adapters, security boundaries, migration path, and delivery workflows
• provide an incremental roadmap from v0.2 through v1.0, a Firstmate parity matrix, and a reproducible acceptance scenario
• incorporate expert review findings after rebasing onto merged PR Implement FIFO event-driven crew supervision #2

Why

CrewBoss needs a concrete path from its current local Bash workflow to a reliable Firstmate competitor without copying Firstmate's branding or protocols. The original specification branch was based on main before PR #2, so its event baseline was stale. Review also exposed an overclaim in same-user process isolation and several smaller contract gaps.

Important decisions

• current crewboss emit, events.jsonl, and at-least-once delivery are treated as shipped baseline behavior
• the new crewboss.cli.v1 JSON contract is implemented only in Go; Bash remains a frozen rollback engine
• safe worker-role isolation requires a verified sandbox that denies control and state paths; unsafe-host is explicitly advisory
• the reference database driver is CGo-free modernc.org/sqlite
• release artifacts use pinned Sigstore identity verification, checksums, and macOS signing/notarization

Impact

This PR changes documentation only. It does not change current CrewBoss runtime behavior. The specification becomes the master contract for later per-release implementation plans.

Validation

• bash tests/run: 100 tests passed, exit 0
• git diff --check: clean
• all review findings checked against merged main and the specification
• stale sentinel, numbered-roadmap, dual-Bash-contract, undefined-command, circular-brief, and Unicode-dash checks return no matches