feat: accept ADR-0008 private-by-default exposure (WP-0023 T01)

Operator ratified the recommended table. Record the sibling ADR,
point ADR-0006 at it, and open T02.
This commit is contained in:
codex 2026-08-15 19:50:46 +02:00
parent 567682c902
commit b3e9980321
5 changed files with 121 additions and 9 deletions

View file

@ -21,9 +21,16 @@ defined split triggers.
The detailed contract is
[`docs/reef-production-readiness-contract.md`](../reef-production-readiness-contract.md).
Who may reach a listener is a different axis:
[`ADR-0008`](ADR-0008-private-by-default-exposure.md). Production
admission does not imply a public surface. A public surface requires
this admission **and** an exposure grant.
## Consequences
- `hosts_rail` and `binds_rapp` no longer imply deployability.
- `reef-railiance` may host Knative in wave 2, but Qonto cannot be called
production-approved solely from that declaration.
- Repeated evidence collection should become functional automation.
- `production-approved` is not permission to publish a listener. See
ADR-0008.