build: adopt staged records and retain reviewed orientation snapshot
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
This commit is contained in:
parent
ca0cb75729
commit
7eb4e22705
6 changed files with 57 additions and 16 deletions
17
SCOPE.md
17
SCOPE.md
|
|
@ -351,3 +351,20 @@ title: Layer declaration
|
|||
status: current
|
||||
description: Machine-readable Engine/PDP boundary declaration in INTENT.md frontmatter, carrying no standard version by design, with version-stamped conformance state and three declared gaps (G2 a ruled §11 non-conformance) and a per-event-class emission declaration in cadence.yaml, per docs/conformance/security-layer-conformance.md, per Security Layer Model section 11.
|
||||
```
|
||||
|
||||
|
||||
## Repository maintenance reuse
|
||||
|
||||
The tracked `.generated-work-records.json` adopts the Custodian staged-source
|
||||
adapter for WORK-RECORDS.md. `make generated-work-records` uses the existing
|
||||
State Hub renderer through `.generated-work-records.mk`; the shared pre-commit
|
||||
hook runs this isolated recipe only for opted-in repositories. The corresponding
|
||||
`make generated-work-records-check` is read-only. Canonical repository identity
|
||||
is explicit and does not depend on the checkout directory.
|
||||
|
||||
Unstaged source changes are preserved; conflicts and unstaged generated-file
|
||||
changes stop the commit. For `git commit --only`, generate first and include
|
||||
WORK-RECORDS.md with the selected source paths. Existing generated-only guards
|
||||
and exact-scope secret scans remain in place. This is repository maintenance,
|
||||
not a runtime service, authorization decision, deployment or publication.
|
||||
Other index generators and hub-derived briefs retain their owner boundaries.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue