[shipmill-romamo]

Fills the Issues section of the five specs that merged today, so specs.py check holds each criterion to exactly one build issue.

• S-002 (A component can't build a frontend: the artifact is the git tree, and deploy only runs uv sync #86): Validate Component build steps (S-002-1, S-002-11) #113, Refuse Node runtimes at validate and in the Render importer (S-002-14, S-002-15) #114, Run Component build steps in artifact build (S-002-2..10, S-002-12, S-002-13) #115
• S-004 (No CLI command applies one Domain: its vhost and certificate come only from migrate, which converges every server #87): Converge one Domain in domains.yml and record the previous vhost hash (S-004-2, 11, 12, 13, 17) #116, Add cloudfall domains apply (S-004-1, 3, 5..10) #117, Add cloudfall domains observe and the domains MCP tools (S-004-4, 14, 15, 16) #118
• S-005 (Deploy has no release-phase hook, so database migrations run by hand after the health gate #88): Run a component's release command before the deploy switches current (S-005-1..7, 10, 11) #119, Show the release command in the deploy and rollback plans (S-005-8, S-005-9) #120
• S-006 (A PostgreSQL service can't be declared without an application Cloudfall deploys #81): Validate PostgreSQL databases owned by a declared role (S-006-1..4, S-006-11) #121, Converge owned PostgreSQL databases with their role and password (S-006-5, 6, 7, 12, 13) #122, Open a PostgreSQL service to declared sources over TLS (S-006-8, 9, 10) #123
• S-007 (data copy can't migrate a Supabase database #82): Copy only the selected schemas with data copy --schema (S-007-1..5, S-007-14) #124, Refuse a data copy the target can't hold before restoring (S-007-6..11) #125, Check --schema values and add migrate --data-schema (S-007-12, S-007-13) #126

Part of #86, #87, #88, #81, #82

Plan

Serves: quality bar
Files: docs/specs/002-component-build-steps.md, docs/specs/004-domains-apply.md, docs/specs/005-release-command.md, docs/specs/006-standalone-postgresql.md, docs/specs/007-data-copy-schemas.md
Order: one commit
Proof: specs.py check passes

🤖 Generated with Claude Code