refactor: retain workflow as optional editor

docs/CONCEPT.md

@@ -2,10 +2,9 @@
 
 ## Purpose
 
-The current `govoplan-workflow` package is the process orchestration module. The
-accepted target moves definition/runtime ownership to the headless
-`govoplan-workflow-engine` module and keeps `govoplan-workflow` as the optional
-authoring and inspection surface. See `ENGINE_EDITOR_SPLIT.md`.
+`govoplan-workflow-engine` is the headless process orchestration module.
+`govoplan-workflow` is its optional authoring and inspection surface. See
+`ENGINE_EDITOR_SPLIT.md`.
 
 Workflow does not own business records. A case, task, file, appointment,
 template, payment, or postbox message remains owned by its domain module.
@@ -20,7 +19,7 @@ action/effect contracts.
 
 ## Ownership
 
-The module owns:
+Workflow Engine owns:
 
 - workflow definitions and versions
 - workflow instances and current state
@@ -30,7 +29,10 @@ The module owns:
 - retry/manual-intervention state for failed command handoffs
 - action/effect execution records for workflow-triggered automation
 - workflow audit/event emission
-- workflow diagram metadata and WebUI route contributions
+- workflow diagram metadata
+
+Workflow owns visual authoring, catalogue, comparison, activation, inspection,
+override, and reset surfaces. It owns no process tables or transition runtime.
 
 The module does not own:
 

docs/ENGINE_EDITOR_SPLIT.md

@@ -118,3 +118,20 @@ but the canonical baseline remains available.
 The extraction must preserve existing definition IDs, revision IDs, active
 revision selection, instance foreign keys, idempotency keys, API routes, and
 audit references.
+
+## Implemented Boundary
+
+The split is implemented in the `govoplan-workflow-engine` repository. Engine
+owns the unchanged migration chain and `/api/v1/workflow` API, retains the
+existing `workflow:*` permission namespace through an explicit manifest
+compatibility field, and exposes headless runtime and contribution
+capabilities. `govoplan-workflow` now has a hard dependency on runtime module
+ID `workflow_engine`, contributes only its WebUI/navigation/editor contract,
+and keeps one release line of `govoplan_workflow.backend` import facades.
+
+Module manifests can announce versioned workflow baselines. Reconciliation is
+idempotent, records module/schema/hash provenance, keeps a newly supplied
+baseline revision inactive when an older revision is active, and fails closed
+when required capabilities or interfaces are absent. Baselines are immutable;
+editing derives a pinned local override, and reset archives that override
+without removing revision or instance history.