chore(consistency): sync task status from DB [auto]

Updated by fix-consistency on 2026-09-04:
  - update .custodian-brief.md for rein-aharness

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06ba0-10aa-7ea0-b20a-4f3fac39efe9
This commit is contained in:
custodian-sync 2026-09-04 11:00:20 +02:00
parent 7641fcde40
commit f01b765668
20 changed files with 1027 additions and 165 deletions

View file

@ -1,19 +1,28 @@
---
id: ADR-002
title: Governed execution is a responsibility chain, not a single enforcement point
status: proposed
status: accepted
date: "2026-08-23"
workplan_task: HARNESS-WP-0003-T01
accepted: "2026-08-29"
workplan_task: REINAH-WP-0003-T01
---
# ADR-002 — Governed execution responsibility chain
## Status
Proposed. Acceptance requires acknowledgement from the owners of Activity Core,
Glas, sand-boxer, and llm-connect. Until then this document records the
implementation target for `HARNESS-WP-0003` but does not amend `INTENT.md` or
supersede accepted ADR-001.
Accepted 2026-08-29 by operator Bernd Worsch. This is the implementation
contract for `REINAH-WP-0003`. It amends the slogan wording in `INTENT.md` and
ADR-001 on the same date; it does not replace ADR-001's instance/runtime split
or the prohibition on tenant-held credentials and tenant-specific runtime
wiring.
The proposed text required sibling-owner acknowledgement before acceptance.
Glas had already approved the boundary; Activity Core had deployed the queue
and lease behavior it asked to see in writing. The operator accepted the
substance without waiting for remaining exact-revision acknowledgements from
Activity Core, sand-boxer, and llm-connect. Those recordings remain welcome;
they are no longer a gate. Sibling objection still changes the matrix.
## Context
@ -211,4 +220,8 @@ Reviews requiring follow-up:
live spoof-refusal evidence, and no manufactured late-close run. Those facts
are incorporated in this revision for final Activity Core acknowledgement.
Pending: revised Activity Core acknowledgement, sand-boxer, and llm-connect.
Pending as recording only, not a gate: revised Activity Core
acknowledgement of this accepted text, sand-boxer, and llm-connect.
Operator acceptance: Bernd Worsch, 2026-08-29, session decision to accept
ADR-002 as written and proceed with T02 wiring.