4a664533d3
Add the exposure contract, additive family schema fields, validator checks and fixtures, the reef-railiance exception snapshot, and routed intakes. Enforcement stays in the owning repos.
19 lines
409 B
YAML
19 lines
409 B
YAML
kind: substrate-reef
|
|
reef_id: reef-k3s
|
|
repo: reef-k3s
|
|
ownership_repo: railiance-infra
|
|
substrate_kind: server-group
|
|
lifecycle_state: active
|
|
criticality: high
|
|
primary_rail: rail-kubernetes
|
|
hosted_rails:
|
|
- rail-kubernetes
|
|
current_members:
|
|
- K3s01
|
|
exposure:
|
|
posture: public
|
|
grants:
|
|
- port: 6443
|
|
reason: must be rejected
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-infra
|