ja573 · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
diff --git a/...-delivery/implementation-reports/THOTH-ASYNC-01-ADR-01-implementation-report.md b/...-delivery/implementation-reports/THOTH-ASYNC-01-ADR-01-implementation-report.md
diff --git a/docs/engineering/decisions/ADR-0008-machine-roles-and-durable-job-primitives.md b/docs/engineering/decisions/ADR-0008-machine-roles-and-durable-job-primitives.md
@@ -8,7 +8,8 @@ Decision owner: CTO
 Programmes affected: Shared Engineering Control / Shared Backend Architecture (owning programme); Publisher Services and Distribution Configuration; Thoth Metrics; future `thoth-api` programmes requiring machine/service identities or durable-job primitives
 Repositories affected: `thoth-pub/thoth`
 Supersedes: None
-Superseded by: None
+Superseded by: None in full
+Superseded in part by: [ADR-0012](ADR-0012-shared-asynchronous-event-and-job-execution.md) under ADR-0012's authority condition, only where ADR-0008 denies a reusable cross-programme job framework/API: the final shared-framework prohibition in section 3.3, section 3.4's programme-local-only ownership rule, section 5.1 item 6, section 5.2 item 6 and rejected alternative D. Section 3.5 is satisfied by ADR-0012, not superseded. Section 3.3's approved convention list, its `approved primitive != mandatory mechanism` rule, and all machine-role, least-privilege and `SUPERUSER` separation rules remain binding.
 
 Decision: machine and service authorization in `thoth` uses dedicated,
 least-privilege, **domain-specific** project roles, and no generic catch-all

diff --git a/docs/engineering/decisions/ADR-0010-staff-operations-console.md b/docs/engineering/decisions/ADR-0010-staff-operations-console.md
@@ -11,7 +11,8 @@ Owning programme issue: [#846](https://github.com/thoth-pub/thoth/issues/846)
 Architecture task: `ADM-ADR-01`
 Verification base: `develop @ 91dd607d674fcb9a75c8df31891eea0355c9ca84`
 Supersedes: None
-Superseded by: None
+Superseded by: None in full
+Superseded in part by: [ADR-0012](ADR-0012-shared-asynchronous-event-and-job-execution.md) under ADR-0012's authority condition, only where ADR-0010 invariant 15 and section 7.2 assume `distribution_job*` remains the long-term Publisher Services execution source, and where section 4.4's final sentence says ADR-0008 remains fully binding without ADR-0012's later shared-framework exception. Section 4.4's substantive rule that `ServiceOperation` is not itself a queue/framework/executor API remains binding. The Staff Operations Console, `ServiceOperation` audit seam, desired/execution/observed-state separation, attention/reconciliation model and staff-command gates remain binding.
 
 Decision: establish an admin-first Staff Operations Console with a deliberately
 entered publisher operating context; make `thoth` the canonical durable owner of