Target component model

Component	Responsibility	Boundary	Side effects
Launcher.Next.App	minimal WPF shell and view model	UI only	none until explicit action
Core	contracts, manifest models, validation policy	no WPF/registry/process/filesystem/Autodesk	none
Application	synchronize/activate/prepare workflows	ports only	none directly
Infrastructure	local files, hashes, catalog implementation	filesystem/network behind interfaces	staging/cache writes
Autodesk	registry discovery, script construction, ProcessStartInfo	OS/process boundary	dry-run only in foundation
Observability	redacted JSONL events	local logging	log file write

Feature flag: Legacy, NextPilot, NextPreferred; default is Legacy. No production configuration changes occur without explicit authorization.