Constant ALL 

pub const ALL: &[&str];

Closed family of every substrate-owned annotation key in this module, in stable declaration order matching the pub const definitions above.

Peer to crate::finalizers::ALL on the “closed slice over a family of tatara-owned wire-form keys sharing the GROUP_PREFIX reverse-DNS namespace” axis-pair: the crate::finalizers module owns the same shape over its three finalizer keys; this const opens the mirror over the 20 annotation keys in this module.

Downstream sweeps that pre-lift the ALL owner had to hand-list every substrate-owned annotation key to iterate them — a fleet-wide annotation-audit binary dumping every tatara.pleme.io/* key on a cluster, a per-key coverage report answering “which annotations does the reconciler write vs read”, a cross-cluster rename planner, the existing intra-module pairwise-disjointness tests (see the “peer list” arrays in [crate::annotations_pins] which hand-list up to 18 sibling keys to prove one axis is disjoint from every other) — iterate through ONE substrate slice post-lift. A future addition to the annotation family that landed a new pub const above but forgot this slice surfaces at [crate::annotations_family_tests::all_matches_declared_length] rather than by silently escaping every downstream iteration consumer.

Pinned to length 21 by [crate::annotations_family_tests::all_matches_declared_length], to shared GROUP_PREFIX membership by [crate::annotations_family_tests::all_share_group_prefix], and to pairwise-uniqueness by [crate::annotations_family_tests::all_are_pairwise_unique] so a copy-paste that duplicated one arm’s wire form at another arm (silently double-booking the K8s metadata slot the two keys share) surfaces at the family pin rather than as silent annotation-writer collision at whichever downstream site stamped the copy-paste’d key.