ARKlab/Ark.Tools — documented rules

API ComplianceRedactionOptions.PiiScan, Meaning PiiScanMode.Off (default) or MessageAndProperties — the NLog last-resort text scan

API ComplianceRedactionOptions.HmacKey, Meaning Programmatic HMAC key for ComplianceRedactor

Type EmailAddress, Classification [PersonalData], Redaction Mask, Validation RFC-shaped address, ≤ 320 chars, normalized to lower-case trimmed

Type PhoneNumber, Classification [PersonalData], Redaction Mask, Validation 7–15 digits, optional leading + , separators stripped

Type PersonName, Classification [PersonalData], Redaction Mask, Validation 1–200 chars, trimmed

Type PostalAddressLine, Classification [PersonalData], Redaction Erase, Validation 1–500 chars

Type NationalIdentifier, Classification [SensitivePersonalData], Redaction Erase, Validation 1–100 chars

Type ApiKey, Classification [Secret], Redaction Erase, Validation 1–4096 chars

Package Ark.Tools.Compliance.Dapper, Registration SensitiveValueDapper.RegisterBuiltIn() and SensitiveValueDapper.Register<CustomerReference>()

Package Ark.Tools.Compliance.Dapper, Registration SensitiveValueDapper.RegisterBuiltIn() and SensitiveValueDapper.Register<CustomerReference>()

Package Ark.Tools.Compliance.NewtonsoftJson, Registration SensitiveValueNewtonsoftJson.RegisterBuiltIn(settings) / Register<T>(settings)

Package Ark.Tools.Compliance.NewtonsoftJson, Registration SensitiveValueNewtonsoftJson.RegisterBuiltIn(settings) / Register<T>(settings)

Package Ark.Tools.Compliance.MessagePack, Registration add SensitiveValueFormatterResolver.Instance to the resolver chain SensitiveValueFormatterResolver.RegisterBuiltIn() / Register<T>()

Package Ark.Tools.Compliance.MessagePack, Registration add SensitiveValueFormatterResolver.Instance to the resolver chain SensitiveValueFormatterResolver.RegisterBuiltIn() / Register<T>()

Package Ark.Tools.Compliance.Reqnroll, Registration SensitiveValueReqnroll.Register() in test setup — feature tables then bind columns to sensitive value objects

The mapping lives in the **library** (Ark.Tools.MediatorFramework.Grpc), as ArkGrpcErrorInterceptor, not in application code: the interceptor maps BusinessRuleViolationException to an RpcException with StatusCode.FailedPrecondition and a Google.Rpc.Status whose details contain one ArkBusinessRuleViolation (packed as Any), and ValidationException to InvalidArgument + BadRequest field violations.

Ark.Tools.Core.EvolvableEnum is an opt-in readonly struct that lets a contract member carry unknown enum values safely:

Ark.Tools.Core.EvolvableEnum is an opt-in readonly struct that lets a contract member carry unknown enum values safely:

Add a transport-neutral McpToolAttribute to Ark.Tools.MediatorFramework:

It does not reference McpServerToolAttribute or McpServerToolTypeAttribute.

It does not reference McpServerToolAttribute or McpServerToolTypeAttribute.

McpToolAttribute field ReadOnly, Meaning MCP tool annotation defaults to true for IQuery<T> and false for IRequest<T> / ICommand

McpToolAttribute field Destructive, Meaning MCP tool annotation defaults to false for IQuery<T> and true for IRequest<T> / ICommand

McpToolAttribute field Idempotent, Meaning MCP tool annotation defaults to false

McpToolAttribute field OpenWorld, Meaning MCP tool annotation defaults to true

The generated bridge therefore exposes an attachment input as a bounded McpAttachmentInput object supplied by Ark.Tools.MediatorFramework.Mcp:

Element Send seam, File IMessagingTransport.cs:9-66, Behaviour SendAsync , PublishAsync , native sizing/measuring Adequate unchanged by this PRD

Element Send seam, File IMessagingTransport.cs:9-66, Behaviour SendAsync , PublishAsync , native sizing/measuring Adequate unchanged by this PRD

Element Dispatch, File MessagingDispatcher.cs:92-175, Behaviour Per-delivery classify headers, prepare payload, DI scope, pipeline, settle, metrics Handler stage is bounded by retryPolicy.MaximumHandlerDuration a per-message renewal loop runs alongside

Element Retry policy, File IMessagingRetryPolicy.cs, Behaviour MaximumDeliveryCount , SecondLevelRetriesEnabled , MaximumHandlerDuration , RetryDelay MaximumHandlerDuration is the natural input for lock and prefetch budgeting

Element Retry policy, File IMessagingRetryPolicy.cs, Behaviour MaximumDeliveryCount , SecondLevelRetriesEnabled , MaximumHandlerDuration , RetryDelay MaximumHandlerDuration is the natural input for lock and prefetch budgeting

Element Retry policy, File IMessagingRetryPolicy.cs, Behaviour MaximumDeliveryCount , SecondLevelRetriesEnabled , MaximumHandlerDuration , RetryDelay MaximumHandlerDuration is the natural input for lock and prefetch budgeting

async loops (not threads) reading the channel and calling the unchanged MessagingDispatcher.OnDeliveryAsync.

Unchanged rules (MessagingSettlement.Decide), but settlement now runs **on the worker task**, off the receive path, and releases credit only after the settle call completes.

Target TypeConverter, Artifact SensitiveValueTypeConverter<T> (see below), Where Ark.Tools.Compliance (in-box)

Target Dapper, Adapter SensitiveValueTypeHandler<T> + SensitiveValueDapper.Register<T>(), Package Ark.Tools.Compliance.Dapper

Target Dapper, Adapter SensitiveValueTypeHandler<T> + SensitiveValueDapper.Register<T>(), Package Ark.Tools.Compliance.Dapper

Target protobuf-net, Adapter surrogate + RuntimeTypeModel registration, in the shape of Ark.Tools.Protobuf 's EvolvableEnumSurrogate<T>, Package Ark.Tools.Compliance.Protobuf

Adapters share the SensitiveValueSerialization.ToTransport/FromTransport helpers, so a new target is a reader/writer mapping and nothing else.

Adapters share the SensitiveValueSerialization.ToTransport/FromTransport helpers, so a new target is a reader/writer mapping and nothing else.

Package Ark.Tools.Compliance.NLog, Contents ComplianceLayout / PiiScanner , redaction wired by default into WithArkDefaultTargetsAndRules WithComplianceRedaction / WithoutComplianceRedaction for override/opt-out, TFMs net8.0;net10.0

Package Ark.Tools.Compliance.NewtonsoftJson, Contents SensitiveValueJsonConverter<T> and SensitiveValueNewtonsoftJson registrations, TFMs net8.0;net10.0

Setting AdaptiveConcurrency, Default true, What it is for Let the limit follow measured throughput and latency false pins it and disables measurement

Setting InitialConcurrency, Default processor count, What it is for Starting worker count, and the fixed limit when adaptation is off

Setting MinimumConcurrency, Default 1, What it is for Floor the controller may never go below

Setting MaximumConcurrency, Default 8 × processor count, What it is for Ceiling, and the natural place to express a downstream limit

Setting ConcurrencyEvaluationInterval, Default 5 s, What it is for How often the controller decides

Setting ThroughputImprovementThreshold, Default 0.05, What it is for Throughput noise band that growth must beat

Setting GradientIncreaseThreshold, Default 0.9, What it is for Latency gradient required to grow

Setting LittlesLawSlack, Default 2, What it is for Slack over the useful concurrency implied by throughput × latency

Setting BaselineRearmInterval, Default 10 min, What it is for How often the no-load latency baseline is re-measured

Setting ThreadPoolStarvationThreshold, Default 250 ms, What it is for Scheduling delay treated as host starvation

Setting PrefetchMultiplier, Default 2, What it is for Buffered deliveries per worker higher hides broker latency, and holds more locks

Setting MaximumPrefetch, Default 8 × MaximumConcurrency, What it is for Hard ceiling on buffered plus in-flight deliveries

Setting ExpectedHandlerDuration, Default 1 s, What it is for Per-message estimate used to bound the buffer on transports that cannot renew locks

Setting LockSafetyFactor, Default 0.5, What it is for Fraction of the native lock duration a full buffer may take to drain

Setting ShutdownTimeout, Default 30 s, What it is for Drain window before unprocessed deliveries are abandoned

Setting ReceiveChannels, Default 1, What it is for Reserved on the host Service Bus fan-out is declared on the transport instead

Setting ReceiveWaitTime, Default 1 s, What it is for Maximum wait asked of the broker per receive

Setting MinPollInterval, Default 50 ms, What it is for Shortest wait after an empty result

Setting MaxPollInterval, Default 30 s, What it is for Longest wait after consecutive empty results, and the maximum idle latency

Setting ErrorCooldown, Default 10 s, What it is for Jittered pause after a transport error

Setting AdvancedMetrics, Default false, What it is for Record the opt-in advanced metric tier AddArkMessagingAdvancedInstrumentation() turns it on for you

Setting RenewalSafetyMargin, Default 10 s, What it is for Smallest headroom kept before a lock expires

Setting RenewalScanInterval, Default 1 s, What it is for How often due locks are scanned

Setting MaximumRenewalBatch, Default 64, What it is for Locks renewed per scan, so a large in-flight set cannot stall the timer

The Modified property on IResourceMetadata is compared against the stored state: