coulomb/activity-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: prepare pinned Custodian worker bundle and required input admission

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
This commit is contained in:
tegwick 2026-10-19 15:09:27 +02:00
parent 0319fe8be8
commit fed119a17c
18 changed files with 1058 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

9
SCOPE.md
View file

@ -381,3 +381,12 @@ placement, accepted mounts/network, delivery and first unattended proof remain
unverified; see docs/custodian-bounded-operations.md. This adds no scheduler or
generic shell. The generated .custodian-brief.md is now an ignored local
orientation snapshot; its existing bytes remain local.
Custodian delivery preparation now includes an image-baked, hash-verified four-file
owner bundle, tunable input policy, and a required daily pre-execution gate validating
completion markers, exact snapshot hashes and independent per-repo Forge
freshness receipts. The reviewed candidate in `k8s/custodian-release/` is outside
active kustomization; placeholders prevent claiming an accepted image/snapshot.
Both definitions stay disabled. No runtime publication, retention deletion or
schedule activation is implemented by these source artifacts.