railiance-platform/argocd
codex 567d2c671b RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02)
Namespace custodian-agents, ServiceAccount custodian-agent (no automount, no
token Secret), curated read-only ClusterRole custodian-supervised-observer and
its binding, per the founder decision of 2026-10-20. Offline pytest guard
asserts no forbidden resource, no write verb, no wildcard.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
2026-10-20 13:38:05 +02:00
..
applications Record the ArgoCD lane as the production change path and plan policy-nexus onboarding. 2026-09-21 14:36:08 +02:00
bootstrap Point npm handoff and ArgoCD sourceRepos at Forgejo 2026-07-09 11:38:14 +02:00
platform-addons RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00
railiance01 feat(argocd): adopt issue-core child over read-only SSH source at 186c817 (RPF-WP-0044-T04) 2026-10-20 13:20:24 +02:00
repositories Declare railiance01 ArgoCD bootstrap on its own path, automated sync off (RPF-WP-0044-T01). 2026-09-21 19:04:15 +02:00