Add the exposure contract, additive family schema fields, validator checks and fixtures, the reef-railiance exception snapshot, and routed intakes. Enforcement stays in the owning repos.
42 lines
985 B
YAML
42 lines
985 B
YAML
kind: managed-workload-package
|
|
repo_family: rapp
|
|
rapp_id: rapp-unapproved
|
|
repo: rapp-unapproved
|
|
ownership_repo: railiance-platform
|
|
contract_version: 1.0.0
|
|
readiness_state: declared
|
|
workload_identity:
|
|
name: unapproved
|
|
package_type: helm-managed-platform-service
|
|
data_classification: internal
|
|
criticality: medium
|
|
primary_rail: rail-kubernetes
|
|
supported_rails:
|
|
- rail-kubernetes
|
|
bound_reefs:
|
|
- reef-example
|
|
runtime_dependencies:
|
|
- kubernetes-api
|
|
composition:
|
|
purpose: Fixture rapp used to exercise exposure validation.
|
|
member_repos:
|
|
- repo: rapp-unapproved
|
|
role: package
|
|
deployables:
|
|
- unapproved
|
|
rollout_contract:
|
|
default_mode: helm-upgrade-install
|
|
smoke_contract:
|
|
required:
|
|
- example-status-ok
|
|
rollback_contract:
|
|
order:
|
|
- helm-rollback
|
|
exposure:
|
|
posture: public
|
|
binding_admission: verified
|
|
grant:
|
|
hostname: unapproved.example
|
|
reason: should fail
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-platform
|