# contracts

## Scope

The contracts domain covers `packages/contracts`.

## Rules

- Record transport-independent DTOs before binding them to one transport.
- proto-socket is the first internal transport target.
- REST exceptions must be documented.
- gRPC is out of scope until explicitly added.
- Contract notes must not include raw secrets or private credentials.