Seeded repo with intent and initial content.

envelopes/examples/platform-tenant-acme.yaml

@@ -0,0 +1,35 @@
+# Example platform tenant envelope (canon B10). Platform-owned; read-only to the tenant.
+apiVersion: emergent-security/v0.8
+kind: PlatformTenantEnvelope
+id: envelope://platform/tenant/acme
+tenant: tenant://acme
+owner: L3
+version: 7
+capabilities:                 # every class the tenant can reach at all
+  - code.edit
+  - test.add
+  - git.commit_feature
+  - git.push_feature
+  - dependency.add
+  - deploy.tenant_runtime
+  - data.tenant_own
+delegated:                    # subset of capabilities decided autonomously by platform delegation
+  code.edit:            { mode: autonomous }
+  test.add:             { mode: autonomous }
+  git.commit_feature:   { mode: autonomous }
+  git.push_feature:     { mode: autonomous }
+  dependency.add:       { mode: autonomous_with_obligations, evidence_required: [lockfile_updated], obligations: [record] }
+  deploy.tenant_runtime:
+    mode: autonomous_with_obligations
+    evidence_required: [tests, provenance]
+    obligations: [record, verify_provenance]
+ceilings:
+  blast_radius: tenant
+  tenant_reach: own
+  data_sensitivity: personal
+  irreversible: false
+  external_exposure: published_endpoints_only
+prohibitions:                 # classes the tenant may never perform, in any mode
+  - deploy.public
+  - iam.platform_change
+escalation_target: platform

envelopes/examples/tenant-governance-acme.yaml

@@ -0,0 +1,17 @@
+# Example tenant governance envelope (canon B11). Tenant-owned; may only narrow
+# envelope://platform/tenant/acme.
+apiVersion: emergent-security/v0.8
+kind: TenantGovernance
+tenant: tenant://acme
+mode: self_governed
+bounded_by: envelope://platform/tenant/acme
+established_by: human://acme/admin-1
+restrictions:
+  prohibitions: [dependency.add]
+  ceilings:
+    blast_radius: repository
+human_decision_classes:
+  - deploy.tenant_runtime
+escalation_target: [human://acme/admin-1, human://acme/admin-2]
+deadline_default: 24h
+on_deadline: escalate_to_next_admin