feat: adopt security zones and explicit workload refs

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0291a-1e87-7151-9934-fcbfe3f65eb1

docs/adr/ADR-0006-enforcement-is-zone-scoped.md

@@ -4,18 +4,18 @@ type: adr
 title: "ADR-0006 — Enforcement is zone-scoped, never a global flag"
 domain: infotech
 repo: ops-warden
-status: accepted
+status: superseded
 version: "1.0"
 revision: "1"
 owner: ops-warden
 binds: "ops-warden"
 created: "2026-08-19"
-updated: "2026-08-19"
+updated: "2026-08-22"
 last_reviewed: "2026-08-19"
 review_interval: 6m
 enforced_by: "warden.yaml policy.enabled; scripts/check_policy_caller_identity.py; zone-engine ZONE-WP-0001; WARDEN-WP-0032"
 supersedes: ""
-successor: ""
+successor: "ops-warden-adr-0009"
 ---
 
 # ADR-0006 — Enforcement is zone-scoped, never a global flag