feat: implement RMASTER-WP-0023 private-by-default exposure

Add the exposure contract, additive family schema fields, validator
checks and fixtures, the reef-railiance exception snapshot, and
routed intakes. Enforcement stays in the owning repos.
This commit is contained in:
codex 2026-08-15 20:08:37 +02:00
parent 6301798fab
commit 4a664533d3
24 changed files with 998 additions and 13 deletions

View file

@ -73,8 +73,7 @@ enum.
Ops-bridge is the normal path to a shielded thing.
The detailed per-family reading lives in
[`docs/exposure-posture-contract.md`](../exposure-posture-contract.md)
once `RMASTER-WP-0023-T02` writes it.
[`docs/exposure-posture-contract.md`](../exposure-posture-contract.md).
## Consequences