feat: implement RMASTER-WP-0023 private-by-default exposure
Add the exposure contract, additive family schema fields, validator checks and fixtures, the reef-railiance exception snapshot, and routed intakes. Enforcement stays in the owning repos.
This commit is contained in:
parent
6301798fab
commit
4a664533d3
24 changed files with 998 additions and 13 deletions
15
tools/testdata/family-declarations/bad-exposure/reef-storage-example/declarations/reef.yaml
vendored
Normal file
15
tools/testdata/family-declarations/bad-exposure/reef-storage-example/declarations/reef.yaml
vendored
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
kind: substrate-reef
|
||||
reef_id: reef-storage-example
|
||||
repo: reef-storage-example
|
||||
ownership_repo: railiance-platform
|
||||
substrate_kind: object-storage
|
||||
lifecycle_state: planned
|
||||
criticality: high
|
||||
current_members: []
|
||||
exposure:
|
||||
posture: public
|
||||
grants:
|
||||
- hostname: s3.example
|
||||
reason: provider API is not a listener we open
|
||||
approved_on: "2026-08-15"
|
||||
residual_risk_owner: railiance-platform
|
||||
Loading…
Add table
Add a link
Reference in a new issue