coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0055-T14: founder chooses digest-pinned mounted policy bundles
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4515@bnt-lap001
Assistant-Session: 0bf96127-6e04-41be-bfda-d11717c3f354
This commit is contained in:
tegwick 2026-10-27 22:38:30 +01:00
parent 169c93876c
commit 56f2aa9a3a
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
workplans/NK-WP-0055-security-platform-production-readiness.md
View file

@ -314,6 +314,8 @@ Owner: access-engine. **Done when:** policy changes are imported without rebuild
tenant packages split, one production explain receipt exists, and FLEX-WP-0031 (decision records) and FLEX-WP-0024 (signed
envelope) are delivered or accepted as exceptions.
2026-10-27 founder decision: import path **B**, a policy bundle mounted into access-engine and pinned by digest, so policy changes no longer need an image rebuild; move to C (signed bundle) once FLEX-WP-0024 signing custody exists. Delivery sits in access-engine FLEX-WP-0039-T03.
## Register rotation lanes with blast radius and verification
```task