coulomb/railiance-enablement
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-enablement/workplans/RAIL-EN-WP-0001-private-by-default-templates.md
tegwick 4ce0c85d20
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
workplan: RAIL-EN-WP-0001 private-by-default templates 
Intake from RMASTER-WP-0023. Adopt RAIL-EN-WP- so ids do not collide
with other RAILIANCE-WP- repos.
2026-08-15 20:52:04 +02:00

971 B
Raw Blame History

id type title domain repo status owner topic_slug created updated related
RAIL-EN-WP-0001 workplan Templates emit private Services, never a public Ingress by default financials railiance-enablement ready codex railiance 2026-08-15 2026-08-15
RMASTER-WP-0023
ADR-0008

RAIL-EN-WP-0001 — private-by-default templates

Intake from RMASTER-WP-0023-T05.

Goal

New-rapp and new-rail templates emit private Services and tunnel docs. They never emit a public Ingress by default. If a template mentions exposure, default to private or omit the field (fail-closed).

T01 — Audit and fix templates

id: RAIL-EN-WP-0001-T01
status: todo
priority: high

Find every template that creates a Service or Ingress. Make ClusterIP the default. Replace public Ingress examples with a grant-gated snippet that cites ADR-0008.

Done when: a new package from the paved path is private unless the author adds an explicit grant.