Add revision-aware CMS taxonomies and relationships

TODO.md

@@ -0,0 +1,29 @@
+<!-- SPDX-License-Identifier: MPL-2.0 -->
+
+# Current work
+
+## CMS classification and relationships
+
+Implement `cms` and `cmssqlite` primitives for Gamertan's existing typed content:
+named flat taxonomies, stable terms with rename history, immutable revision
+associations, explicit publication and bidirectional related-content queries.
+Keep authorization, audits, application schemas, templates and commerce policy
+with their callers. Writes join caller-owned SQLite transactions.
+
+Implemented: validated values, explicit schema, caller-owned transactions,
+immutable associations, publication pointers, term aliases and public readers.
+Verified: focused race tests for scope isolation, conflicts, draft/public
+transitions, retirement, rename collisions, pagination and rollback. Gamertan's
+consumer HTTP regressions now exercise real content/catalog/case-study routing,
+draft isolation, restore, role/CSRF checks and unchanged catalog data.
+
+Consolidated evidence: the full package race suite passed; association fuzzing
+passed 698,275 executions. Dependency/module and license checks passed. Vet has
+only the existing vendored COSE diagnostic documented by `scripts/verify.sh`.
+The consumer's full Go suite and native trusted-TLS editor checks passed.
+
+Next: public-export verification, then preview27 publication and an immutable
+consumer pin. No unrelated auth changes in this slice.
+
+Status: implemented and consolidated Go/browser verification complete; export,
+upstream push and consumer deployment pending. Release history stays in CHANGELOG.