feat(runtime): enforce governed mutation boundaries

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06ba0-10aa-7ea0-b20a-4f3fac39efe9
This commit is contained in:
tegwick 2026-09-04 11:25:07 +02:00
parent e3c6124e22
commit 20e6f381f6
28 changed files with 1068 additions and 154 deletions

View file

@ -1,5 +1,5 @@
# Long-lived instance placeholder until T03 task intake polls issue-core.
# Keeps one ready replica with harness CLI + git tools; no LLM session here.
# Packaging-smoke placeholder only. The supported production runtime is the
# railiance01 user service; this Deployment never claims or executes work.
apiVersion: apps/v1
kind: Deployment
metadata:
@ -8,6 +8,8 @@ metadata:
labels:
app.kubernetes.io/name: rein-aharness
app.kubernetes.io/part-of: rein-aharness
app.kubernetes.io/component: packaging-smoke
rein-aharness.railiance.io/runtime-role: packaging-smoke
spec:
replicas: 1
selector:
@ -18,6 +20,8 @@ spec:
labels:
app.kubernetes.io/name: rein-aharness
app.kubernetes.io/part-of: rein-aharness
app.kubernetes.io/component: packaging-smoke
rein-aharness.railiance.io/runtime-role: packaging-smoke
spec:
securityContext:
fsGroup: 10001