feat: Phase 1 FDA host-operator Role and railiance01 pilot (WP-0009 T02–T07)

Lock DEC-FDA-001 working defaults; add roles/host-operator package with
OS/security and load protocols; scaffold eng-coulomb-railiance01-ho-001
with bound agent, vault, ramp checklists, and Kai quote/ledger.

docs/decisions/DEC-FDA-001-working-defaults.md

@@ -0,0 +1,77 @@
+# DEC-FDA-001 — Forward-deployed agency working defaults
+
+**Status:** accepted (working default; sponsor may override)
+**Date:** 2026-07-16
+**Workplan:** KAIZEN-WP-0009-T02
+**Deciders:** kaizen-agentic (implementation default for Phase 1 pilot)
+
+## Context
+
+Architecture open questions blocked Phase 1 scaffolding. We lock **working
+defaults** so host-operator @ railiance01 can proceed without waiting on a
+separate product decision cycle. Overrides are welcome; change this DEC and
+bump architecture/business model versions.
+
+## Decisions
+
+### D1 — Kai ledger home
+
+**Decision:** Phase 1 uses a **file-based JSONL ledger** at
+`engagements/.../commercial/ledger.jsonl` (schema in architecture §10).
+
+No State Hub extension and no finance-system integration in Phase 1.
+
+**Rationale:** Offline, reviewable, zero new infrastructure; enough to prove
+unit economics before EUR.
+
+### D2 — Engagement store placement
+
+**Decision:**
+
+| Artifact | Location |
+|----------|----------|
+| Role packages (supplier IP) | `kaizen-agentic/roles/<role-id>/` |
+| Pilot engagement tree | `kaizen-agentic/engagements/pilots/<engagement-id>/` |
+| Future production client vaults | Client-owned repo (e.g. railiance-hosts or dedicated ops-engagements); pilot may be **copied** out later |
+
+**Rationale:** Keep Phase 1 self-contained in the supplier repo for iteration.
+Client-owned vault remains the confidentiality rule; pilot path is scaffolding,
+not a claim of ownership of operational knowledge.
+
+### D3 — Multi-target binding
+
+**Decision:** **One Engagement, N Targets.** One bound agent definition;
+baselines and findings are per-target under `vault/baselines/<target-id>.md`.
+
+Pilot has N=1 (`railiance01`).
+
+### D4 — Metrics sharing with supplier optimizer
+
+**Decision:** **Opt-in, default off.** Pilot does not publish vault content or
+raw metrics to supplier optimizer. Local `.kaizen/metrics` or engagement
+`reports/` only. Shared aggregates require `contribute_metrics: approved` on
+the engagement record (not set for pilot).
+
+### D5 — Craft base for host-operator
+
+**Decision:** `base_agent: sys-medic`. Bound definition may start as sys-medic
+prompt + engagement binding appendix; Role package owns charter, protocols, and
+memory template.
+
+### D6 — Privilege policy
+
+**Decision:** `privileged_ops`, package upgrade, firewall change, and reboot
+require **recorded human approval** in the vault session log before execution.
+Observe-class work does not.
+
+## Consequences
+
+- Phase 1 pilot proceeds under `engagements/pilots/eng-coulomb-railiance01-ho-001/`
+- Architecture and business model docs promote to **v0.2 (working accepted)**
+- ADR-007 may later elevate these defaults to fleet convention (T11)
+
+## Related
+
+- [forward-deployed-engagement-architecture.md](../forward-deployed-engagement-architecture.md)
+- [ForwardDeployedAgencyBusinessModel.md](../../wiki/ForwardDeployedAgencyBusinessModel.md)
+- KAIZEN-WP-0009