ops-hub/.claude/rules/repo-boundary.md

## Repo boundary

This repo owns **ops-hub** only. It does not own:

- Generic Inter-Hub framework, API substrate, auth → `inter-hub/`
- State Hub workstream/task/decision implementation → `state-hub/`
- SSH CA, credential routing catalog, bootstrap SSH envelope → `ops-warden/`
- OpenBao mounts, platform secret paths, ESO → `railiance-platform/`
- Cluster desired state, host principals, force-command wrappers → `railiance-infra/`
- HelixForge architecture handoff canon → `helix-forge/` (linked, not duplicated)
- Identity/OIDC/MFA → `key-cape/` / Keycloak
Normalize agent instructions and workplan frontmatter (STATE-WP-0067) - Align agent files with on-disk workplan prefixes (infer from workplan ids) - Set workplan domain to registered domain_slug; add topic_slug where applicable - Repair frontmatter delimiter formatting; migrate legacy task status literals - Regenerate AGENTS.md, CLAUDE.md, and .claude/rules from State Hub templates 2026-06-22 23:16:27 +02:00			`## Repo boundary`

			`This repo owns ops-hub only. It does not own:`

Complete ops-hub Inter-Hub bootstrap and close bootstrap workplans. Extract bootstrap logic into src/ops_hub/bootstrap.py with dry-run support, public hub discovery, and unit tests. Update the gate probe to accept public hub listing (200 or 401), document dev commands and architecture, and archive finished OPS-WP-0001 and OPS-WP-0002 workplans. 2026-07-07 01:49:12 +02:00			- Generic Inter-Hub framework, API substrate, auth → `inter-hub/`
			- State Hub workstream/task/decision implementation → `state-hub/`
			- SSH CA, credential routing catalog, bootstrap SSH envelope → `ops-warden/`
			- OpenBao mounts, platform secret paths, ESO → `railiance-platform/`
			- Cluster desired state, host principals, force-command wrappers → `railiance-infra/`
			- HelixForge architecture handoff canon → `helix-forge/` (linked, not duplicated)
			- Identity/OIDC/MFA → `key-cape/` / Keycloak