coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Contract table: index of everything open with owners, with message ids
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 943911@bnt-lap001
Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0
This commit is contained in:
tegwick 2026-11-06 11:31:18 +01:00
parent 4ca3db6a77
commit f8b6a0bbbc
1 changed files with 20 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

20
docs/bounded-execution-contract-table.md
View file

@ -562,3 +562,23 @@ The agent's default context can read NetworkPolicies in `sso`, `approval-engine`
Not covered from source: OpenBao's ingress (rapp-openbao is private) and live drift from source, such as the
approval-engine policy that was live but not in its file. The readiness preflight Job catches unreachable endpoints
before a window, and T07 and O1 cover the drift.
## Open with owners (index, 2026-11-06)
Everything below was sent as a State Hub message. Nothing in it blocks NK-WP-0058, which is finished. An answer
goes into the row's record named here.
| Owner | Question or request | Message | Recorded in |
| --- | --- | --- | --- |
| railiance-platform | C1 supported window-role interface; O1 which objects Argo owns; C5 stale Secret name in `bounded-executor.md` | `f6198285` | routing table above |
| railiance-platform | Argo pin drift: informed-decision live `005709a` vs git `77161fe` (OutOfSync); bao-notice `9ee20967` vs `a1f5851` | `549f4ba3` | T05 evidence |
| railiance-platform | 57 convention-lint findings | `c8371e0d` | NK-WP-0058-T07 |
| six owners | contract-CI mode (pinned plus nightly main, or a published contract file) | `4892658f`, `3a546559`, `aa44a2b3`, `7cf8d61f`, `a2105e34`, `ee1e5bb5` | Contract CI table above |
| audit-core, approval-engine, informed-decision, access-engine, key-cape | convention-lint findings (14, 3, 4, 2, 2) | `9e57fd89`, `41b19d89`, `7da9abe8`, `abe7e149`, `573f56a1` | NK-WP-0058-T07 |
| ops-warden | strip every token variable in `warden access --exec` and name it in the refusal | `4acb653c` | routing table above |
| informed-decision, access-engine | C6: which copy of the executor's present-existing profile is the source | `fa7e25d3`, `df5aa613` | routing table above |
| user-engine, tenant-engine | literal tenant-management bearer in the deployed manifest; `POST /v1/tenants` not served | `f441911e`, `700c43f1` | `workplans/ADHOC-2026-11-06.md` T01 |
| state-hub | fix-consistency C-11 `KeyError 'id'` and C-41 without the 422 reason | `d05750f3` | this table |
| net-kingdom (NK-WP-0057) | E5/C7 approver and routing; E2 KeyCape client registration; E7 `sso` runtime owners | — | NK-WP-0057-T01 inputs |
| net-kingdom (NK-WP-0048) | 6 digest-drift test failures in its 1.2/1.3 artifacts | — | `workplans/ADHOC-2026-11-06.md` T02 |
| founder and railiance-platform | close mode for the window watch (delete on the write role) | — | CCR-2026-0064 `lifecycle.close_mode` |