Reserve worker spend durably before governed dispatch
Some checks failed
Governed runtime contract / contract (push) Has been cancelled

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-09 17:58:27 +02:00
parent 4ffb8acb19
commit 38b25fbc26
14 changed files with 1378 additions and 9 deletions

View file

@ -21,3 +21,11 @@ KUBECONFIG=/etc/rancher/k3s/k3s.yaml
BAO_ADDR=https://bao.coulomb.social
VAULT_ADDR=https://bao.coulomb.social
EXECUTOR_APPROLE_DIR=/home/tegwick/.local/rein-aharness/approle-binky-mail
# Monetary admission is opt-in for existing workers. A factory deployment must
# set REQUIRE=1 after owner acceptance; absent/invalid state then denies claim.
# Never mount the private policy/ledger into a workload. See docs/spend-admission.md.
# AGENT_HARNESS_REQUIRE_SPEND_ADMISSION=1
# AGENT_HARNESS_SPEND_POLICY=/absolute/private/spend-policy.json
# AGENT_HARNESS_SPEND_LEDGER=/absolute/private/spend.sqlite3
# AGENT_HARNESS_EXECUTION_PROJECT=<accepted-project>