codex 1a6d83ace9 CUST-WP-0071-T05: default-deny egress, hub delivery env, widen platform-addons project ... Founder decision 2026-10-21 (T05 follow-up): custodian-assessment gets default-deny ingress/egress with egress only to DNS, kube-apiserver (10.43.0.1:443, 92.205.62.239:6443), Prometheus 9090 and State Hub 8000. The railiance-platform-addons AppProject source admits PersistentVolumeClaim and NetworkPolicy (bootstrap is hand-applied; not applied here). CronJob gets STATE_HUB_URL. Re-vendored the-custodian sources at 9edd315. Still suspended and unregistered. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c		2026-10-21 08:41:37 +02:00
..
applications	Record the ArgoCD lane as the production change path and plan policy-nexus onboarding.	2026-09-21 14:36:08 +02:00
bootstrap	Point npm handoff and ArgoCD sourceRepos at Forgejo	2026-07-09 11:38:14 +02:00
platform-addons	CUST-WP-0071-T05: default-deny egress, hub delivery env, widen platform-addons project	2026-10-21 08:41:37 +02:00
railiance01	CUST-WP-0071-T05: default-deny egress, hub delivery env, widen platform-addons project	2026-10-21 08:41:37 +02:00
repositories	Declare railiance01 ArgoCD bootstrap on its own path, automated sync off (RPF-WP-0044-T01).	2026-09-21 19:04:15 +02:00