{
  "date": "2026-03-29",
  "source_document": "knowledge/deployment/app-delivery-object-mapping.md",
  "scope": {
    "system": "app-delivery",
    "filtered_repos": [
      "db9-cd"
    ],
    "notes": [
      "This file is a machine-readable projection of the markdown mapping supplement.",
      "Confidence values are normalized to high, medium-high, medium, medium-low, and low.",
      "source_repo is used when one repo is the best current owner.",
      "source_family is used when the deployment object belongs to a repo family, deployment package, or control-plane bundle.",
      "Each object includes a generated mapping_id plus evidence references that point back to registry files, repo metadata, or special-case manifests."
    ]
  },
  "objects": [
    {
      "deployment_object": "auditservice",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/auditservice",
      "confidence": "high",
      "rationale": "exact repo name and matching binaries",
      "mapping_id": "mapping:auditservice",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/auditservice.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/auditservice.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/auditservice.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/auditservice/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "authserver",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/auth-server",
      "confidence": "high",
      "rationale": "exact binary domain with matching interfaces",
      "mapping_id": "mapping:authserver",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/authserver.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/authserver.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/authserver.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/auth-server/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "account-svc",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/account",
      "confidence": "high",
      "rationale": "account repo exposes central, provider, and worker binaries serving this domain",
      "mapping_id": "mapping:account-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/account-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/account-svc.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/account-svc.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/account/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "billing-svc",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/billing",
      "confidence": "high",
      "rationale": "exact service domain",
      "mapping_id": "mapping:billing-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/billing-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/billing-svc.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/billing-svc.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/billing/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "config-center",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/config-center",
      "confidence": "high",
      "rationale": "exact repo and binary",
      "mapping_id": "mapping:config-center",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/config-center.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/config-center/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "config-center-regional",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/config-center",
      "confidence": "high",
      "rationale": "config-center mapping directly references config-center-regional",
      "mapping_id": "mapping:config-center-regional",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/config-center-regional.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/config-center-regional.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/config-center-regional.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/config-center/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "config-service",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/config-service",
      "confidence": "high",
      "rationale": "exact repo and binary",
      "mapping_id": "mapping:config-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/config-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/config-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "core-svc",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/core-svc",
      "confidence": "high",
      "rationale": "exact repo and server binaries",
      "mapping_id": "mapping:core-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/core-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/core-svc/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dataapps",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/dataapps",
      "confidence": "high",
      "rationale": "exact repo name",
      "mapping_id": "mapping:dataapps",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dataapps.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/dataapps.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/dataapps.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/dataapps/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dataflow-service-ng",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/dataflow-service",
      "confidence": "high",
      "rationale": "repo contains dataflow-ng binary",
      "mapping_id": "mapping:dataflow-service-ng",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dataflow-service-ng.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/dataflow-service-ng.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/dataflow-service-ng.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/dataflow-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "metrics-integration",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/metrics-integration",
      "confidence": "high",
      "rationale": "exact repo and matching binaries",
      "mapping_id": "mapping:metrics-integration",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/metrics-integration.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/metrics-integration.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/metrics-integration.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/metrics-integration/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-metering",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/serverless-metering",
      "confidence": "high",
      "rationale": "exact repo and binary",
      "mapping_id": "mapping:serverless-metering",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-metering.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/serverless-metering/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "ipip-svc",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/devtier-store-service",
      "confidence": "high",
      "rationale": "devtier-store-service deep scan contains the ipip binary, and both local cd.yaml and app-delivery/ipip-svc use the same image and command",
      "mapping_id": "mapping:ipip-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/ipip-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/devtier-store-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "devops-service",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/devops",
      "confidence": "high",
      "rationale": "repo contains devops-server binary",
      "mapping_id": "mapping:devops-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/devops-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/devops-service.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/devops-service.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/devops/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "tcidm-service",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/tcidm",
      "confidence": "high",
      "rationale": "exact regional service binary",
      "mapping_id": "mapping:tcidm-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tcidm-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tcidm/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "cluster-ng-service",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/cluster-service-ng",
      "confidence": "high",
      "rationale": "repo contains cluster_ng_server",
      "mapping_id": "mapping:cluster-ng-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/cluster-ng-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/cluster-ng-service.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/cluster-ng-service.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/cluster-service-ng/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "gke-provider",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/gke-provider",
      "confidence": "high",
      "rationale": "exact repo name exists in KB",
      "mapping_id": "mapping:gke-provider",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/gke-provider.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/gke-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "novu-svc",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/novu",
      "confidence": "medium",
      "rationale": "exact domain repo exists, but KB classifies it as deployment config rather than service code",
      "mapping_id": "mapping:novu-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/novu-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/novu-svc.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/novu-svc.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/novu/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "tidb-mgmt-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:tidb-mgmt-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tidb-mgmt-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dedicated-global-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:dedicated-global-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dedicated-global-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "nextgen-global-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:nextgen-global-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/nextgen-global-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-global-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:serverless-global-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-global-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-global-regional-proxy",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "medium",
      "rationale": "closest source binary is regional_proxy; deployment name differs",
      "mapping_id": "mapping:serverless-global-regional-proxy",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-global-regional-proxy.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "tempo-proxy",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:tempo-proxy",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tempo-proxy.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "tempo-wrapper",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:tempo-wrapper",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tempo-wrapper.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "tidb-mgmt-portal",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:tidb-mgmt-portal",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tidb-mgmt-portal.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dataflow-svc",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/dataflow-service",
      "confidence": "high",
      "rationale": "repo contains cmd/dataflow",
      "mapping_id": "mapping:dataflow-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dataflow-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/dataflow-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dedicated-ticdc-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/dataflow-service",
      "confidence": "medium",
      "rationale": "service mappings reference regional-ticdc-service; deployment package name differs",
      "mapping_id": "mapping:dedicated-ticdc-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dedicated-ticdc-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/dataflow-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dataservice-central-svc",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/dataservices",
      "confidence": "medium",
      "rationale": "repo exposes central-style binaries and central service mappings",
      "mapping_id": "mapping:dataservice-central-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dataservice-central-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/dataservices/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dataservice-regional-svc",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/dataservices",
      "confidence": "medium",
      "rationale": "repo exposes regional gateway and executor binaries; deployment name is package-level",
      "mapping_id": "mapping:dataservice-regional-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dataservice-regional-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/dataservice-regional-svc.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/dataservices/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dedicated-metering-server",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/metering",
      "confidence": "high",
      "rationale": "the package deploys instance-metering-server and network-metering-server, while the metering repo exposes instancemetering, networkmetering, and related binaries",
      "mapping_id": "mapping:dedicated-metering-server",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dedicated-metering-server.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/metering/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dedicated-regional-server",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "high",
      "rationale": "repo contains regional-server binary",
      "mapping_id": "mapping:dedicated-regional-server",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dedicated-regional-server.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "infra-exporter",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:infra-exporter",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/infra-exporter.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "infra-webhook",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:infra-webhook",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/infra-webhook.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "quota-exporter",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "high",
      "rationale": "exact binary in repo",
      "mapping_id": "mapping:quota-exporter",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/quota-exporter.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "eks-provider",
      "mapping_class": "class_b",
      "mapping_type": "exact_unscanned_repo",
      "source_repo": "tidbcloud/eks-provider",
      "confidence": "medium-high",
      "rationale": "release metadata points to the exact Dockerfile URL, manifests use the same image name, and multiple repos still import github.com/tidbcloud/eks-provider or github.com/tidbcloud/eks-provider/api",
      "mapping_id": "mapping:eks-provider",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/eks-provider.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        }
      ]
    },
    {
      "deployment_object": "gardener-provider",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "medium",
      "rationale": "deployment uses dbaas/infra-api/infra-provider image, so current evidence points to infra control-plane or provider code rather than a standalone scanned repo",
      "mapping_id": "mapping:gardener-provider",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/gardener-provider.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "chaos-provider",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "medium",
      "rationale": "repo contains chaos-provider binary, but role is admin-tool-like in scan result",
      "mapping_id": "mapping:chaos-provider",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/chaos-provider.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/chaos-provider.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/chaos-provider.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "cluster-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "medium",
      "rationale": "service mapping contains cluster-server.json; deployment name differs",
      "mapping_id": "mapping:cluster-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/cluster-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "config-manager",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "confidence": "medium-high",
      "rationale": "infra-provider deep scan exposes config-manager/cmd/server with the deployed metrics, probes, webhook, and cluster-config reconciliation surface, which matches the app-delivery package more closely than the legacy infra-api cmd/config-manager entrypoint",
      "source_repo": "tidbcloud/infra-provider",
      "mapping_id": "mapping:config-manager",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/config-manager.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dedicated-region-base-services",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/infra-provider",
      "confidence": "low",
      "rationale": "likely a deployment bundle around regional platform services, not one source binary",
      "mapping_id": "mapping:dedicated-region-base-services",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dedicated-region-base-services.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/dedicated-region-base-services.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/dedicated-region-base-services.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "tidb-worker",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/aws-shared-provider",
      "confidence": "high",
      "rationale": "aws-shared-provider deep scan contains cmd/tidb-worker, and manifests use aws-shared-provider-tidb-worker image",
      "mapping_id": "mapping:tidb-worker",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tidb-worker.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/aws-shared-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "o11y-agent-control-server",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/observability",
      "confidence": "high",
      "rationale": "repo contains agent-control-server binary",
      "mapping_id": "mapping:o11y-agent-control-server",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/o11y-agent-control-server.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/observability/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "o11y-svc",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/observability",
      "confidence": "medium",
      "rationale": "same domain family, but deployment name is broader than one binary",
      "mapping_id": "mapping:o11y-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/o11y-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/observability/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "o11y-cluster-agent-crd",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/observability",
      "confidence": "medium",
      "rationale": "CRD group is agent.observability.pingcap.com, which aligns with the observability domain, but the object is packaging rather than one executable",
      "mapping_id": "mapping:o11y-cluster-agent-crd",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/o11y-cluster-agent-crd.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/observability/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-regional-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/serverless-service",
      "confidence": "medium",
      "rationale": "repo exposes the serverless runtime surface, but the deployment name is region-specific packaging",
      "mapping_id": "mapping:serverless-regional-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-regional-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/serverless-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-svc",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/serverless-service",
      "confidence": "high",
      "rationale": "manifests use serverless-service image and execute /serverless-service for grpc, http, worker, and br-worker variants",
      "mapping_id": "mapping:serverless-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/serverless-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-meta-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/serverless-metering",
      "confidence": "high",
      "rationale": "manifests use serverless-metering image and execute /serverless-metering meta-server",
      "mapping_id": "mapping:serverless-meta-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-meta-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/serverless-metering/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-meta-store",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/aws-shared-provider",
      "confidence": "high",
      "rationale": "manifests use aws-shared-provider-meta-server image, and the repo scan contains cmd/meta-server",
      "mapping_id": "mapping:serverless-meta-store",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-meta-store.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/aws-shared-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "serverless-ops-service",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/aws-shared-provider",
      "confidence": "high",
      "rationale": "manifests use aws-shared-provider-ops-service image, and the repo scan contains cmd/ops-service",
      "mapping_id": "mapping:serverless-ops-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-ops-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/serverless-ops-service.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/aws-shared-provider/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "infra-api-crd",
      "mapping_class": "class_c",
      "mapping_type": "control_plane_packaging",
      "source_family": "tidbcloud/infra-api|tidbcloud/infra-provider",
      "confidence": "medium",
      "rationale": "same API family; deployment object is CRD packaging",
      "mapping_id": "mapping:infra-api-crd",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/infra-api-crd.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-api/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "infra-api-providerconfig",
      "mapping_class": "class_c",
      "mapping_type": "control_plane_packaging",
      "source_family": "tidbcloud/infra-api|tidbcloud/infra-provider",
      "confidence": "medium",
      "rationale": "provider config packaging around the infra API domain",
      "mapping_id": "mapping:infra-api-providerconfig",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/infra-api-providerconfig.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-api/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "infra-api-webhook",
      "mapping_class": "class_c",
      "mapping_type": "control_plane_packaging",
      "source_family": "tidbcloud/infra-api|tidbcloud/infra-provider",
      "confidence": "medium",
      "rationale": "webhook package in the same control-plane family",
      "mapping_id": "mapping:infra-api-webhook",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/infra-api-webhook.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/infra-api/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dedicated-infra-apiserver",
      "mapping_class": "class_d",
      "mapping_type": "third_party_bundle",
      "source_family": "infra-cd apiserver stack + third-party kubernetes control-plane bundle",
      "confidence": "high",
      "rationale": "app-delivery deploys third-party/kube-apiserver and third-party/kube-controller-manager images, while infra-cd/projects/apiserver owns the surrounding infra-apiserver stack and DNS/wiring",
      "mapping_id": "mapping:dedicated-infra-apiserver",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dedicated-infra-apiserver.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "deployment_bundle_manifest",
          "file": "app-delivery/dedicated-infra-apiserver/base/deployment.yaml",
          "line": 66,
          "detail": "The deployment bundle runs third-party kube-apiserver images rather than a first-party business service image."
        },
        {
          "type": "infra_stack_definition",
          "file": "infra-cd/projects/apiserver/Pulumi.yaml",
          "line": null,
          "detail": "The infra-cd apiserver project owns the surrounding infra stack and wiring."
        }
      ]
    },
    {
      "deployment_object": "external-secrets-operator",
      "mapping_class": "class_d",
      "mapping_type": "addon_bundle",
      "source_family": "third-party addon bundle",
      "confidence": "high",
      "rationale": "deployment addon, not a core business service",
      "mapping_id": "mapping:external-secrets-operator",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/external-secrets-operator.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/external-secrets-operator.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/external-secrets-operator.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        }
      ]
    },
    {
      "deployment_object": "cert-manager-regional-objects",
      "mapping_class": "class_d",
      "mapping_type": "addon_bundle",
      "source_family": "third-party addon bundle",
      "confidence": "high",
      "rationale": "regional addon package",
      "mapping_id": "mapping:cert-manager-regional-objects",
      "evidence": [
        {
          "type": "addon_applicationset",
          "file": "app-delivery/dedicated-regional-server/app-registry/cert-manager.yaml",
          "line": 4,
          "detail": "Dedicated regional server bundle deploys cert-manager as a regional addon object."
        },
        {
          "type": "addon_applicationset",
          "file": "app-delivery/dev/nextgen-regional-control-plane/app-registry/cert-manager.yaml",
          "line": 57,
          "detail": "Next-gen regional control-plane bundle also deploys cert-manager in regional environments."
        }
      ]
    },
    {
      "deployment_object": "tiflow-crd",
      "mapping_class": "class_d",
      "mapping_type": "addon_bundle",
      "source_family": "crd addon bundle",
      "confidence": "high",
      "rationale": "deployment package, not a business service repo",
      "mapping_id": "mapping:tiflow-crd",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tiflow-crd.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        }
      ]
    },
    {
      "deployment_object": "vpa-agent",
      "mapping_class": "class_d",
      "mapping_type": "addon_bundle",
      "source_family": "platform component",
      "confidence": "medium",
      "rationale": "likely an operator-side addon rather than a first-party API service",
      "mapping_id": "mapping:vpa-agent",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/vpa-agent.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        }
      ]
    },
    {
      "deployment_object": "cluster-secret-store",
      "mapping_class": "class_d",
      "mapping_type": "addon_bundle",
      "source_family": "deployment bundle",
      "confidence": "medium",
      "rationale": "package-level deployment concern with limited source evidence",
      "mapping_id": "mapping:cluster-secret-store",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/cluster-secret-store.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/cluster-secret-store.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/cluster-secret-store.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        }
      ]
    },
    {
      "deployment_object": "dummy-http",
      "mapping_class": "class_d",
      "mapping_type": "addon_bundle",
      "source_family": "utility or test deployment",
      "confidence": "medium",
      "rationale": "no clear business-service repo match",
      "mapping_id": "mapping:dummy-http",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dummy-http.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        }
      ]
    },
    {
      "deployment_object": "serverless-credits-campaign-svc",
      "mapping_class": "class_e",
      "mapping_type": "direct_or_family_match",
      "source_repo": "tidbcloud/serverless-credits-campaign",
      "confidence": "medium",
      "rationale": "same domain repo exists locally and in KB",
      "mapping_id": "mapping:serverless-credits-campaign-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/serverless-credits-campaign-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/serverless-credits-campaign/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "clusterproxy-related-usage",
      "mapping_class": "class_e",
      "mapping_type": "direct_or_family_match",
      "source_repo": "tidbcloud/clusterproxy",
      "confidence": "high",
      "rationale": "exact repo and proxy binary exist",
      "mapping_id": "mapping:clusterproxy-related-usage",
      "evidence": [
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/clusterproxy/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "rbac-management-service",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/account",
      "confidence": "high",
      "rationale": "account repo contains tools/rbac-management/rbac_management.py plus environment-specific GitHub workflows and .pingcap/Dockerfile_rbac_tools that build and push the dbaas/{env}/rbac-management image later consumed by app-delivery",
      "mapping_id": "mapping:rbac-management-service",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/rbac-management-service.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/rbac-management-service.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/rbac-management-service.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/account/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        },
        {
          "type": "source_build_definition",
          "file": "account/.pingcap/Dockerfile_rbac_tools",
          "line": null,
          "detail": "The account repo builds the RBAC management tooling image from Dockerfile_rbac_tools."
        },
        {
          "type": "source_release_workflow",
          "file": "account/.github/workflows/update-rbac-prod.yaml",
          "line": null,
          "detail": "The prod update-rbac workflow pushes the rbac-management image consumed by app-delivery."
        }
      ]
    },
    {
      "deployment_object": "clinic",
      "mapping_class": "class_f",
      "mapping_type": "deployment_bundle",
      "source_family": "tidbcloud/clinic-cd multi-application delivery family",
      "confidence": "medium-high",
      "rationale": "the only matching repo metadata is tidbcloud/clinic-cd, and the delivery package bundles clinic-api, clinic-data-service, clinic-ui, chaos-api, cloud-server, ngm, Grafana, and addon pieces rather than one source binary",
      "mapping_id": "mapping:clinic",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/clinic.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/clinic.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/clinic.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/clinic-cd/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        },
        {
          "type": "bundle_internal_applicationset",
          "file": "app-delivery/clinic/app-registry/clinic-api.yaml",
          "line": 4,
          "detail": "Clinic delivery family includes the clinic-api ApplicationSet."
        },
        {
          "type": "bundle_internal_workload",
          "file": "app-delivery/clinic/cloud-server/base/deployment.yaml",
          "line": 25,
          "detail": "Clinic delivery family also packages the cloud-server workload image."
        },
        {
          "type": "bundle_internal_workload",
          "file": "app-delivery/clinic/ngm/base/statefulset.yaml",
          "line": 32,
          "detail": "Clinic delivery family packages the ngm monitoring workload."
        }
      ]
    },
    {
      "deployment_object": "nextgen-regional-control-plane",
      "mapping_class": "class_f",
      "mapping_type": "deployment_bundle",
      "source_family": "next-gen regional platform bundle",
      "confidence": "high",
      "rationale": "package contains dataplane-manager, o11y-agent, ticdc-service, crossplane, cert-manager-adjacent components, and other regional control-plane pieces from multiple source families",
      "mapping_id": "mapping:nextgen-regional-control-plane",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/nextgen-regional-control-plane.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/nextgen-regional-control-plane.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/nextgen-regional-control-plane.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        }
      ]
    },
    {
      "deployment_object": "cost-metering-service-svc",
      "mapping_class": "class_a",
      "mapping_type": "direct_scanned_repo",
      "source_repo": "tidbcloud/cost-metering-service",
      "confidence": "high",
      "rationale": "exact repo exists in KB, and manifests use the cost-metering-service image",
      "mapping_id": "mapping:cost-metering-service-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/cost-metering-service-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/cost-metering-service-svc.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/cost-metering-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "tempo-migrate",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "high",
      "rationale": "manifests run /command/tempo-migrate/tempo-migrate from the tidb-management-service image, and service-catalog classifies tempo-migrate-service under tidb-management-service",
      "mapping_id": "mapping:tempo-migrate",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/tempo-migrate.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "dedicated-3-layer-migrate",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/tidb-management-service",
      "confidence": "medium-high",
      "rationale": "the package deploys dedicated-tempo-migrate jobs and config points to tempo-migrate-service.tidb-management-service, so this is a dedicated migration unit in the same service family",
      "mapping_id": "mapping:dedicated-3-layer-migrate",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/dedicated-3-layer-migrate.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/tidb-management-service/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "ng-autoscaler",
      "mapping_class": "class_b",
      "mapping_type": "multi_binary_family",
      "source_family": "tidbcloud/cluster-service-ng",
      "confidence": "medium-high",
      "rationale": "cluster-service-ng contains the internal/dataplane-manager/helm/ng-autoscaler chart, while manifests deploy the tidbcloud/ng-autoscaler image into next-gen dataplane contexts",
      "mapping_id": "mapping:ng-autoscaler",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/ng-autoscaler.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/ng-autoscaler.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "kb_repo_meta",
          "file": "knowledge/repos/cluster-service-ng/meta.json",
          "line": 2,
          "detail": "KB repo metadata confirms the mapped source repository exists locally in the knowledge base."
        }
      ]
    },
    {
      "deployment_object": "infra-etcd-backup",
      "mapping_class": "class_c",
      "mapping_type": "control_plane_packaging",
      "source_family": "infra-cd apiserver stack operational backup bundle",
      "confidence": "high",
      "rationale": "README defines it as the snapshot cronjob for the infra apiserver etcd cluster, and the manifest snapshots https://etcd.infra.svc.cluster.local:2379 with third-party etcdctl plus aws-cli before uploading to the shared backup bucket",
      "mapping_id": "mapping:infra-etcd-backup",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/infra-etcd-backup.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "bundle_runtime_note",
          "file": "app-delivery/infra-etcd-backup/README.md",
          "line": 3,
          "detail": "README states the package snapshots the infra apiserver etcd cluster."
        },
        {
          "type": "manifest_runtime_reference",
          "file": "app-delivery/infra-etcd-backup/base/etcd-backup.yaml",
          "line": 34,
          "detail": "CronJob snapshots the infra etcd service and uploads the result to the backup bucket."
        }
      ]
    },
    {
      "deployment_object": "lake-svc",
      "mapping_class": "class_d",
      "mapping_type": "addon_bundle",
      "source_family": "private endpoint connectivity proxy bundle",
      "confidence": "high",
      "rationale": "manifests are only ExternalName services named lake-svc-proxy pointing at AWS VPCE hostnames, so the package is a private-endpoint connectivity shim rather than a workload built from a first-party source repo",
      "mapping_id": "mapping:lake-svc",
      "evidence": [
        {
          "type": "app_registry_object",
          "file": "app-delivery/app-registry/lake-svc.yaml",
          "line": 4,
          "detail": "root scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/dev/app-registry/lake-svc.yaml",
          "line": 4,
          "detail": "dev scope ApplicationSet for the deployment object."
        },
        {
          "type": "app_registry_object",
          "file": "app-delivery/staging/app-registry/lake-svc.yaml",
          "line": 4,
          "detail": "staging scope ApplicationSet for the deployment object."
        },
        {
          "type": "externalname_proxy",
          "file": "app-delivery/lake-svc/envs/prod/lake-svc-service.yaml",
          "line": 9,
          "detail": "The prod package is only an ExternalName service pointing at a VPCE hostname."
        }
      ]
    }
  ],
  "residual_ambiguity": [],
  "summary": {
    "object_count": 71,
    "residual_ambiguity_count": 0,
    "mapping_type_counts": {
      "direct_scanned_repo": 21,
      "multi_binary_family": 33,
      "exact_unscanned_repo": 1,
      "control_plane_packaging": 4,
      "third_party_bundle": 1,
      "addon_bundle": 7,
      "direct_or_family_match": 2,
      "deployment_bundle": 2
    },
    "confidence_counts": {
      "high": 47,
      "medium": 18,
      "medium-high": 5,
      "low": 1
    },
    "objects_with_evidence": 71
  }
}
