# AIOS V1R5 to V2R1 Migration Plan

## Goal

Move from shared Gateway assumptions to Tenant Cell isolation.

## Order

1. Establish Tenant Registry and signed Tenant Context.
2. Implement Tenant Router.
3. Implement OpenClaw Cell lifecycle management.
4. Introduce canonical message envelope.
5. Add provenance and execution policy enforcement.
6. Migrate Hermes into shared fabric with isolated profiles.
7. Migrate memory, secrets and audit storage.

## Do Not

- Do not modify Hermes first.
- Do not share production credentials across tenants.
- Do not treat workspace separation as a sandbox.
- Do not allow unknown message origins to execute tools.

## Acceptance

Each migration stage requires automated tests and runtime evidence before promotion.