feat(P39): refresh design docs + parameterize adapter (P1-1)

---ci---
project: acdl
phase: 39
milestone: v1.9
status: execute
---/ci---

Phase 39 — design-doc-refresh-and-p1-1-parameterization:

Design docs (REQ-100, REQ-101):
- hitl_matrix_design.md: 'dev-only spike'/'v1.2 wires the gates' framing
  replaced with v1.9 wired-gates reality; 8-concern matrix marked
  implemented (offline-testable subset + signed evidence artifacts,
  D-084); v1.9 wiring section cross-references hitl_gates.py +
  attestation_matrix.py; approver_dr noted.
- audit_ledger_design.md: outbox marked shipped+production since v1.8;
  S3 Object Lock + JWS + async worker + DLQ + daily checkpoints clearly
  labeled 'Deferred to a future milestone (D-083)'; RPO/RTO table updated;
  approver fields note v1.9 hitl_gates.attest.

P1-1 adapter parameterization (REQ-102, D-085):
- ecs-service interface.json: desired_count (default 1), launch_type
  (FARGATE), family (app) inputs added.
- alb interface.json: load_balancer_type (application), target_type (ip).
- adapter.py: hardcoded defaults replaced with inputs.get(<name>, <default>);
  hardcoded 'acdl-microservice-rt'/'acdl-microservice-igw' Name tags
  derive from the VPC name input.
- contract_resolver.py: child_input_map routes wires to the sub-resource
  that declares the input (desired_count → aws:ecs:service, family →
  aws:ecs:task_definition, target_type → targetgroup, etc.).
- microservice composition.json: wires added for the new inputs.

Tests: +21 (test_p1_1_adapter_parameterization.py, test_design_docs_current.py).
371 passed; run_ci.sh green; run_platform.sh --check-only green; v1.1 S3
regression preserved.

core/contract_resolver.py

@@ -141,6 +141,11 @@ def resolve_l2(contract, registry, repo_root):
     # For single-resource L1s, resourceId == childId
     # For multi-resource L1s, resourceId is the expanded sub-resource id
     child_outputs = {}
+    # child_input_map[childId] = {inputName: sub_resource_id} for multi-resource L1s
+    # so a wire targeting <childId>.inputs.<name> routes to the sub-resource
+    # that actually declares that input (P1-1 — desired_count → aws:ecs:service,
+    # family → aws:ecs:task_definition).
+    child_input_map = {}
     resources = []
 
     # Expand children to resources
@@ -156,6 +161,7 @@ def resolve_l2(contract, registry, repo_root):
 
         # Build the output->resourceId map for this child
         child_out_map = {}
+        child_in_map = {}
 
         # For multi-resource L1s (like vpc), the first resource type is the
         # primary; the adapter handles expansion. Use the interface's type
@@ -178,6 +184,9 @@ def resolve_l2(contract, registry, repo_root):
                 # Map each output to this sub-resource's id
                 for out_name in sub_res.get("outputs", []):
                     child_out_map[out_name] = res_id
+                # Map each declared input to this sub-resource's id (P1-1)
+                for in_name in sub_res.get("inputs", []):
+                    child_in_map[in_name] = res_id
         else:
             # Single-resource L1
             resource = {
@@ -202,6 +211,7 @@ def resolve_l2(contract, registry, repo_root):
                 child_out_map[out_name] = child_id
 
         child_outputs[child_id] = child_out_map
+        child_input_map[child_id] = child_in_map
 
     # Resolve wires to populate inputs
     for wire in composition.get("wires", []):
@@ -215,11 +225,22 @@ def resolve_l2(contract, registry, repo_root):
 
         value = _resolve_wire_value(wire, inputs, child_outputs)
         if value is not None:
-            # Find the target resource and set the input
-            for res in resources:
-                if res["id"] == target_child or res["id"].startswith(f"{target_child}-"):
-                    res["inputs"][input_name] = value
-                    break
+            # Route to the sub-resource that declares this input (P1-1).
+            # child_input_map maps <childId> -> {inputName -> sub_resource_id}.
+            # If the input is declared on a specific sub-resource, route there;
+            # otherwise fall back to the first matching resource (legacy).
+            in_map = child_input_map.get(target_child, {})
+            target_res_id = in_map.get(input_name)
+            if target_res_id is not None:
+                for res in resources:
+                    if res["id"] == target_res_id:
+                        res["inputs"][input_name] = value
+                        break
+            else:
+                for res in resources:
+                    if res["id"] == target_child or res["id"].startswith(f"{target_child}-"):
+                        res["inputs"][input_name] = value
+                        break
 
     # Build the stack instance
     stack_instance = {