fix: preserve unrelated live boundary rules during signing lane apply
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102
This commit is contained in:
codex 2026-09-05 16:43:47 +02:00
parent 80793afe4f
commit 238d261536
4 changed files with 24 additions and 4 deletions

View file

@ -0,0 +1,7 @@
# RPF-WP-0035-T04: preflight signing key is API-only.
path "platform/data/workloads/state-hub/repository-rename-preflight" {
capabilities = ["deny"]
}
path "platform/metadata/workloads/state-hub/repository-rename-preflight" {
capabilities = ["deny"]
}