# contracts

## Scope

The contracts domain covers `packages/contracts`.

## Rules

- Record transport-independent DTOs before binding them to one transport.
- External provider and consumer integrations use REST APIs and HTTP
  webhook/callback delivery.
- proto-socket is internal-only and must not be documented as an external
  integration contract or fallback transport.
- REST exceptions and internal-only transports must be documented.
- gRPC is out of scope until explicitly added.
- Contract notes must not include raw secrets or private credentials.