policy surfacegenerated from canonical sources — do not edit

Coulomb Policy Nexus

Governing documents and public risk records at stable addresses, with visible currency.

DocumentStatusLifecycleRevisionOwnerReviewedReview dueCurrency
NetKingdom Tenancy Posture v0.1proposedactivedraft-14net-kingdom2026-08-232027-02-23current
Autonomy Lanes (Fleet) v0.1acceptedactiveaccepted-1the-custodian2026-08-312027-02-28current
Contribution Convention v0.1acceptedactiveaccepted-1the-custodian2026-08-312027-02-28current
Project Repository Flavor (prj-) v0.1acceptedactiveaccepted-1the-custodian2026-08-312027-02-28current
Work Record Types & Identity (Fleet) v0.1acceptedactiveaccepted-1the-custodian2026-08-312027-02-28current
Workplan Terminology (Fleet) v0.1acceptedactiveaccepted-1the-custodian2026-08-312027-02-28current
Coulomb estate architectureproposedactivedraft-3the-custodian2026-08-312027-02-28current
Railiance architectureproposedactivedraft-3railiance-master2026-08-312027-02-28current
NetKingdom architectureproposedactivedraft-3net-kingdom2026-08-312027-02-28current
State Hub architectureproposedactivedraft-3state-hub2026-08-312027-02-28current
Policy Nexus architectureproposedactivedraft-1the-custodian2026-08-182027-02-18current
Policy addressing and permanenceacceptedactiveaccepted-1the-custodian2026-08-182027-02-18current
Repository Prefix Architectureacceptedactiveaccepted-1railiance-master2026-07-252027-01-25current
Wave 1 rail-kubernetes Boundaryacceptedactiveaccepted-1railiance-master2026-07-252027-01-25current
First-Wave rapp Selectionacceptedactiveaccepted-1railiance-master2026-07-252027-01-25current
First-Wave reef Rolloutacceptedactiveaccepted-1railiance-master2026-07-262027-01-26current
Derived Rail Compositionacceptedactiveaccepted-1railiance-master2026-07-262027-01-26current
Reef Production Admissionacceptedactiveaccepted-2railiance-master2026-08-292027-02-28current
Rapp Declaration Contractacceptedactiveaccepted-2railiance-master2026-08-232027-02-23current
Private-by-default Exposureacceptedactiveaccepted-2railiance-master2026-08-292027-02-28current
Activity-Core as Coulomb Org Event Bridgeacceptedactiveaccepted-2activity-core2026-05-142026-11-14current
Markdown-as-Definition Format for Event Types and ActivityDefinitionsacceptedactiveaccepted-2activity-core2026-05-142026-11-14current
Rule vs. Instruction Model and Expression DSLacceptedactiveaccepted-2activity-core2026-05-142026-11-14current
The Producer Trust Boundary — Guardrails and Error-Correction for Untrusted Outputacceptedactiveaccepted-2activity-core2026-06-262026-12-26current
Ops runs vs development work records — claim queue and plane splitacceptedactiveaccepted-2activity-core2026-08-032027-02-03current
ADR-0001 — The routing catalog is a pointer layer, never a second copyacceptedactive1ops-warden2026-08-182027-02-18current
ADR-0002 — ops-warden is a transparent conduit, never a secret brokeracceptedactive1ops-warden2026-08-182027-02-18current
ADR-0003 — Cover gaps, but never silently own themacceptedactive1ops-warden2026-08-182027-02-18current
ADR-0004 — High-risk lanes refuse raw value streaming to agent sessionsacceptedactive1ops-warden2026-08-182027-02-18current
ADR-0005 — Implement one lane narrowly, route everything elseacceptedactive1ops-warden2026-08-182027-02-18current
Workplans and Work Items Are Repository Artefactsacceptedactiveaccepted-2the-custodian2026-08-312027-02-28current
Custodian Agent Runtime — v0.1 Bootstrap Designacceptedactiveaccepted-1the-custodian2026-03-122026-09-12current
Materialized Derived State with Fingerprint Invalidation for Repo-Sourced Dataacceptedactiveaccepted-2the-custodian2026-08-312027-02-28current
Connectivity-First Network Posture for Custodian Infrastructureacceptedactiveaccepted-1the-custodian2026-03-262026-09-26current
Cross-Repo Workplans Live in Dedicated Project Reposacceptedactiveaccepted-1the-custodian2026-06-222026-12-22current
Canon Federation and Concept Ownership Across InfoTech and Commerceacceptedactiveaccepted-1the-custodian2026-08-172027-02-17current
Workplan Identity Uniqueness, Single Registrar, and Repo Worker Topologyacceptedactiveaccepted-2the-custodian2026-08-312027-02-28current
Hub Authority, Local Cache, and the Two Kinds of Hub Dataproposedactivedraft-2the-custodian2026-08-312027-02-28current
Federated Namespaces: Four Planes, Declared Posture, and the Limits of Reconciliationproposedactivedraft-2the-custodian2026-08-172027-02-17current
ADR-0001 — S3 owns platform services, not the substrate beneath themacceptedactive1.0railiance-platform2026-08-172027-02-17current
ADR-0002 — S3 owns the placement rule; the package repo owns the numberproposedactive1.0railiance-platform2026-08-172027-02-17current
ADR-0003 — Decisions that bind others live in docs/adr, not only in the State Hubacceptedactive1.0railiance-platform2026-08-172027-02-17current
NetKingdom IAM Profile v0.3acceptedactiveaccepted-1net-kingdom2026-08-222027-02-22current
Recursive Multi-Tenant Identity and Authorization Architectureacceptedactive1net-kingdom2026-08-222027-02-22current
Security Orchestration Boundaryacceptedactive1net-kingdom2026-08-222027-02-22current
Object Storage STS Credential Vending Boundaryacceptedactive1net-kingdom2026-08-222027-02-22current
Orchestration vs Dependency, and Self-Coherent Intentacceptedactive1net-kingdom2026-08-222027-02-22current
NetKingdom IAM Profile Ownership And Version Governanceacceptedactive1net-kingdom2026-08-222027-02-22current
Playbook Capability Contract Ownershipacceptedactive1net-kingdom2026-08-222027-02-22current
Tenant Onboarding Grouping Taxonomyacceptedactive2net-kingdom2026-08-222027-02-22current
Tenant Capability Roles, Carrying Mechanism, and Tenant-Engine Ownershipacceptedactive1net-kingdom2026-08-222027-02-22current
NetKingdom Railiance Workload Packaging and Relational Platformacceptedactive1net-kingdom2026-08-222027-02-22current
k3s API is tunnel-onlyacceptedactiveaccepted-1railiance-infra2026-08-222027-02-22current
Profile-driven execution selection over the ops_run pull queueacceptedactiveaccepted-1activity-core2026-08-212027-02-21current
Code-registered bounded operations are the only local mutation exceptionacceptedactiveaccepted-1activity-core2026-08-232027-02-23current
ADR-0007 — Build-stage permissiveness stops at credential disclosureacceptedactive1ops-warden2026-08-192027-02-19current
ADR-0008 — A lane's risk grade covers every field its path disclosesacceptedactive1ops-warden2026-08-212027-02-21current
ADR-0009 — Adopt security-zones v0.1 as a consumeracceptedactive1ops-warden2026-08-222026-11-22current
ADR-0010 — ops-warden is Staff: lanes, not rules, and one declared engine gapacceptedactive1ops-warden2026-08-282026-11-28current
NetKingdom Security-Layer Interaction Boundaryacceptedactiveaccepted-1railiance-master2026-08-292027-02-28current
What the Hub Projects: Forge as Projection Source, Working Copies as Preliminary Overlayacceptedactive1.0the-custodian2026-08-252027-02-25current
NetKingdom Posture Feedback v0.1proposedactive0.1net-kingdom2026-08-232026-11-23current
NetKingdom Security Layer Model v0.7acceptedactive0.7gate-house2026-08-282026-11-28current
NetKingdom Security Scenario Composition v0.1proposedactive0.1net-kingdom2026-08-232026-11-23current
NetKingdom Security Zones v0.1proposedactive0.1zone-engine2026-08-222026-11-22current
flex-auth /v1/check authenticates no callerfixedactivepublished-1risk-nexus2026-08-202027-02-20current
The legal basis for retaining audit facts against an erasure request has been assumed, never establishedacceptedactivepublished-1risk-nexus2026-08-202027-02-20current
Severity: how bad, how likely, and what is not a risk at alladoptedactiveadopted-1risk-nexus2026-08-202027-02-20current
Disclosure: publish now, hold, or restrictadoptedactiveadopted-1risk-nexus2026-08-202027-02-20current
Review and expiry: what happens when nobody looksadoptedactiveadopted-1risk-nexus2026-08-202027-02-20current
What this register may verify for itself, and what it must take from ownersadoptedactiveadopted-1risk-nexus2026-08-202027-02-20current
Waiting: how this register depends on other people without becoming a queueadoptedactiveadopted-1risk-nexus2026-08-202027-02-20current