Allium spec distillation — run 1f7a2faf

[refset]

Allium spec — first pass

This PR carries the first pass of an Allium specification distilled from the
codebase by allium-swarm.

Run ID: 1f7a2faf-c397-468b-99b6-8e75a8ecda7a
Spec ID: 83e0b22a-584e-4033-b746-41bf6e3d6675
Files:

• specs/...

Aero is a Clojure/ClojureScript library (no service, no CLI) that reads an EDN configuration file and resolves a fixed, closed set of tag literals (#env, #profile, #include, #ref, #or, #join, #merge, #long, #double, #boolean, #keyword, #user, #hostname, #envf, #prop, #read-edn) into plain data. The distilled spec models the Application as the sole external actor, plus ConfigSource, Environment and IncludedFile as external inputs; a single Config entity tracks parse->resolve->done lifecycle; Deferred captures the laziness optimisation. Three surfaces are exposed: LibraryAPI (read-config + built-in resolvers + the deferred macro), ReaderExtension (defmethod aero.core/reader for user tags), and AlphaTagMacro (eval-tagged-literal / expand-case for tagged-literal macros). Lifecycle rules cover iterative resolution, profile/hostname/user/or selection semantics, #include resolution-with-fallback, missing-#ref drop-and-warn, deferred realisation, and parse/exhaustion error contracts. Invariants record Aero's security-relevant promises that configuration is data and that no Turing-complete evaluation occurs.

---

This is a ratification gate. Two equivalent ways to ratify:

1. PR review with state Approved. Open Files changed → Review changes → Approve. (GitHub forbids the PR's author from approving their own PR — if you opened it, use option 2.)
2. /ratify comment. Post a comment on this PR whose body starts with /ratify. Anything after the token is captured as the ratification rationale.

Merge is optional — approval alone is the signal.

If anything is missing, request changes (or post a comment) and the
orchestrator will re-distil with your feedback as additional context (up to
3 rounds).

[refset]

/ratify