@@ -193,6 +193,8 @@ Release retain their separate responsibilities and least-privilege permissions.
 
 ## Dependency ownership and delivery
 
+Version increases require the owner's explicit permission for that specific increase. This includes packages, releases, grain interfaces, protocol versions, serializer aliases and persisted/public contracts. Cleanup, refactoring, contract changes and standing delivery authorization do not authorize a version increase.
+
 `ManagedCode.*` projects and packages are ours. A confirmed defect is fixed in its
 owning sibling repository after reading its policy. Do not replace the dependency,
 copy its implementation or hide the defect with a consumer workaround.
 
@@ -1,6 +1,5 @@
 <Solution>
   <Folder Name="/src/">
-    <Project Path="src/KeyLoad.Replication/KeyLoad.Replication.csproj" />
     <Project Path="src/KeyLoad.Abstractions/KeyLoad.Abstractions.csproj" />
     <Project Path="src/KeyLoad.Core/KeyLoad.Core.csproj" />
     <Project Path="src/KeyLoad.Diagnostics/KeyLoad.Diagnostics.csproj" />
 
@@ -4,7 +4,7 @@ namespace KeyLoad;
 
 /// <summary>Administrator-authorized observation of the actual executing node.</summary>
 /// <param name="CapturedAt">Node capture time for process counter sampling.</param>
-/// <param name="Node">Actual physical status; never implies all voters are healthy.</param>
+/// <param name="Node">Actual physical status; native membership supplies each silo status.</param>
 /// <param name="Admission">Current node command and HTTP occupancy, not throughput.</param>
 /// <param name="Storage">Bounded physical file observation.</param>
 /// <param name="Http">Actual process HTTP observations.</param>
@@ -13,16 +13,13 @@ namespace KeyLoad;
 public sealed record AdminNodeSnapshot([property: Orleans.Id(0)] DateTimeOffset CapturedAt, [property: Orleans.Id(1)] NodeStatus Node, [property: Orleans.Id(2)] NodeAdmissionStatus Admission,
     [property: Orleans.Id(3)] AdminStorageSnapshot Storage, [property: Orleans.Id(4)] AdminHttpSnapshot Http)
 {
-    /// <summary>Gets the configured voter identity of the executing node, comparable with the reported leader.</summary>
+    /// <summary>Gets the executing native Orleans silo name.</summary>
     [Orleans.Id(5)]
-    public string? LocalVoter
-    {
-        get; init;
-    }
+    public string? SiloName { get; init; }
 
-    /// <summary>Gets the configured voter membership; membership never implies that another voter is healthy.</summary>
+    /// <summary>Gets active silo names directly from native Orleans membership.</summary>
     [Orleans.Id(6)]
-    public ImmutableArray<string> Voters { get; init; } = [];
+    public ImmutableArray<string> ActiveSilos { get; init; } = [];
 
     /// <summary>Gets bounded native derived history of this physical node; null when the embedding host provides none.</summary>
     [Orleans.Id(7)]
 
@@ -1,26 +1,18 @@
 namespace KeyLoad;
 
-/// <summary>Reports node identity, replication progress, and readiness.</summary>
-/// <param name="NodeId">The canonical persisted physical storage owner identifier, formatted as a GUID.</param>
-/// <param name="Incarnation">The unique identifier for this process incarnation.</param>
-/// <param name="Applied">The highest committed position applied by this node.</param>
-/// <param name="Leader">The current leader identifier, if known.</param>
-/// <param name="Voters">The number of voting nodes in the cluster.</param>
-/// <param name="Durability">The configured durability profile.</param>
-/// <param name="RoutingReady">Whether the node is ready to receive routed requests.</param>
-/// <param name="ProcessId">The operating system process identifier.</param>
-/// <param name="ReadGeneration">The generation of the node's read view.</param>
-[Orleans.GenerateSerializer]
-[Orleans.Alias(NativeContractAliases.NodeStatus)]
-public sealed record NodeStatus([property: Orleans.Id(0)] string NodeId, [property: Orleans.Id(1)] Guid Incarnation, [property: Orleans.Id(2)] long Applied, [property: Orleans.Id(3)] string? Leader, [property: Orleans.Id(4)] int Voters, [property: Orleans.Id(5)] DurabilityProfile Durability, [property: Orleans.Id(6)] bool RoutingReady, [property: Orleans.Id(7)] int ProcessId,
-    [property: Orleans.Id(8)] long ReadGeneration = NodeStatus.DefaultReadGeneration)
-{
-    /// <summary>Gets the current native consensus term from the same locked status snapshot.</summary>
-    [Orleans.Id(9)]
-    public long ConsensusTerm
-    {
-        get; init;
-    }
-
-    private const int DefaultReadGeneration = 0;
-}
+/// <summary>Reports this physical store, native Orleans membership count and configured data-copy requirement.</summary>
+/// <param name="NodeId">Persisted physical store identifier.</param>
+/// <param name="Incarnation">Persisted database incarnation.</param>
+/// <param name="Position">Local ZoneTree position; positions on different stores are not interchangeable read tokens.</param>
+/// <param name="SiloCount">Active silos observed by native Orleans membership.</param>
+/// <param name="ReplicaCount">Required persisted copies for a successful write.</param>
+/// <param name="Durability">Actual database durability contract.</param>
+/// <param name="RoutingReady">Whether native runtime and database startup completed.</param>
+/// <param name="ProcessId">Operating system process identifier.</param>
+/// <param name="ReadGeneration">Current physical store read generation.</param>
+[Orleans.GenerateSerializer, Orleans.Alias(NativeContractAliases.NodeStatus)]
+public sealed record NodeStatus([property: Orleans.Id(0)] string NodeId,
+    [property: Orleans.Id(1)] Guid Incarnation, [property: Orleans.Id(2)] long Position,
+    [property: Orleans.Id(3)] int SiloCount, [property: Orleans.Id(4)] int ReplicaCount,
+    [property: Orleans.Id(5)] DurabilityProfile Durability, [property: Orleans.Id(6)] bool RoutingReady,
+    [property: Orleans.Id(7)] int ProcessId, [property: Orleans.Id(8)] long ReadGeneration);
@@ -1,6 +1,6 @@
 using Microsoft.Extensions.Options;
 
-namespace KeyLoad.Replication;
+namespace KeyLoad.Clustering;
 
 /// <summary>Independent deployment size and required durable data copies.</summary>
 [ConfigurationOptions]
 
@@ -1,13 +1,13 @@
-namespace KeyLoad.Replication;
+using Orleans.CodeGeneration;
+
+namespace KeyLoad.Clustering;
 
 /// <summary>Native Orleans scheduling for commands sharing one database's atomic metadata.</summary>
-[Alias(StorageCopyContract.GrainAlias)]
+[Version(BackgroundWorkerIdentity.InterfaceVersion)]
 public interface IDatabaseCommitGrain : IGrainWithGuidKey
 {
     /// <summary>Returns only after every configured data copy has persisted the same operation.</summary>
-    [Alias(StorageCopyContract.Apply)]
     Task<OperationResult> ApplyAsync(ReplicatedOperation operation, CancellationToken cancellationToken);
     /// <summary>Requires matching durable copies before admitting a read.</summary>
-    [Alias(StorageCopyContract.ReadCut)]
     Task<SiloStorageCut> ReadCutAsync(CancellationToken cancellationToken);
 }
@@ -1,18 +1,17 @@
 using Orleans.Services;
 
-namespace KeyLoad.Replication;
+using Orleans.CodeGeneration;
+
+namespace KeyLoad.Clustering;
 
 /// <summary>Typed Orleans access to one silo's exclusively owned ZoneTree database.</summary>
-[Alias(StorageCopyContract.ServiceAlias)]
+[Version(BackgroundWorkerIdentity.InterfaceVersion)]
 public interface ISiloDatabaseService : IGrainService
 {
     /// <summary>Reads the durable local cut without changing storage.</summary>
-    [Alias(StorageCopyContract.Cut)]
     Task<SiloStorageCut> ReadCutAsync(CancellationToken cancellationToken);
     /// <summary>Evaluates business time and deterministic command decisions at the selected store.</summary>
-    [Alias(StorageCopyContract.Prepare)]
     Task<ReplicatedOperation> PrepareAsync(ReplicatedOperation operation, CancellationToken cancellationToken);
     /// <summary>Applies exactly the prepared operation through ZoneTree's atomic commit gate.</summary>
-    [Alias(StorageCopyContract.Apply)]
     Task<OperationResult> ApplyAsync(ReplicatedOperation operation, CancellationToken cancellationToken);
 }
@@ -1,6 +1,6 @@
-namespace KeyLoad.Replication;
+namespace KeyLoad.Clustering;
 
 /// <summary>Actual persisted store identity and local cut; this contains no cluster authority.</summary>
-[GenerateSerializer, Alias(StorageCopyContract.CutAlias)]
+[GenerateSerializer]
 public sealed record SiloStorageCut([property: Id(0)] Guid Incarnation,
     [property: Id(1)] long Position);
@@ -1,16 +1,9 @@
-namespace KeyLoad.Replication;
+namespace KeyLoad.Clustering;
 
 internal static class StorageCopyContract
 {
     internal const int MinimumCount = 1;
     internal const int FirstOwner = 0;
-    internal const string ServiceAlias = "keyload.silo-database-service";
-    internal const string GrainAlias = "keyload.database-commit-grain";
-    internal const string CutAlias = "keyload.silo-storage-cut";
-    internal const string ReadCut = "read-cut";
-    internal const string Cut = "cut";
-    internal const string Prepare = "prepare";
-    internal const string Apply = "apply";
     internal const string InvalidIncarnation = "A database incarnation is required.";
     internal const string InvalidCounts = "SiloCount and ReplicaCount must be positive; ReplicaCount cannot exceed SiloCount.";
     internal const string DifferentOutcomes = "The persisted data-copy outcomes differ.";
 
@@ -1,6 +1,6 @@
 using KeyLoad.Core;
 
-namespace KeyLoad.Replication;
+namespace KeyLoad.Clustering;
 
 /// <summary>Submits authorized native operations to Orleans; it owns no cluster lifecycle or protocol.</summary>
 public sealed class SiloCommandCoordinator(DatabaseEngine database, IGrainFactory grains) : ICommitCoordinator