2026-09-07 00:22:38 +02:00
|
|
|
# tenant-engine — Claude Code Instructions
|
Bootstrap repo: State Hub registration, agent docs, TEN-WP-0001/0002
statehub register + repo-seed template scaffold (CLAUDE.md, .claude/rules/,
registry/). INTENT.md and SCOPE.md rewritten from the generated stub to
match net-kingdom's ratified tenant-engine-boundary-contract_v0.1.md
(Purpose, Responsibility Boundary, Non-Goals). topic_slug corrected from
the auto-assigned custodian default to netkingdom, matching key-cape and
user-engine.
TEN-WP-0001 (bootstrap) complete: files reviewed/refined, stack decided
(Python 3.12 + FastAPI, matching qonto-assistant's convention), first real
workplan seeded.
TEN-WP-0002 drafted: service skeleton, domain model (tenant/grouping/
capability-role/plan-grant), storage layer, and the three boundary-contract
API surfaces (cache-read for key-cape, live-lookup for flex-auth with an
explicit fail-closed requirement, write API behind a WriteAuthorizer seam
since real flex-auth integration is a declared non-goal for this pass).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-23 21:56:07 +02:00
|
|
|
|
|
|
|
|
@SCOPE.md
|
|
|
|
|
@.claude/rules/repo-identity.md
|
|
|
|
|
@.claude/rules/session-protocol.md
|
|
|
|
|
@.claude/rules/first-session.md
|
|
|
|
|
@.claude/rules/workplan-convention.md
|
|
|
|
|
@.claude/rules/stack-and-commands.md
|
|
|
|
|
@.claude/rules/architecture.md
|
|
|
|
|
@.claude/rules/repo-boundary.md
|
|
|
|
|
@.claude/rules/credential-routing.md
|
|
|
|
|
@.claude/rules/agents.md
|
2026-10-03 15:25:38 +02:00
|
|
|
|
|
|
|
|
<!-- BEGIN EMERGENT-SECURITY-PILOT -->
|
|
|
|
|
## NetKingdom situational knowledge pilot
|
|
|
|
|
|
|
|
|
|
For security-related work, read the shared
|
|
|
|
|
[Emergent Security orientation](../emergent-security/knowledge/cards/start.md)
|
|
|
|
|
and the task's card in that package. From this repository root, validate and read:
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
PYTHONPATH=../emergent-security/src python3 -m emergent_security.knowledge --repositories .. show start --audience generic
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Use the matching provider audience when known and retrieve the relevant card.
|
|
|
|
|
Record package version, digest and source status; reload after resume/compaction
|
|
|
|
|
or a repository switch. A withheld card requires source review; an offline
|
|
|
|
|
snapshot is orientation only. If the sibling checkout is absent, use the trusted
|
|
|
|
|
installed `emergent-knowledge` package or an explicitly reviewed exported bundle;
|
|
|
|
|
do not silently download or execute a replacement.
|
|
|
|
|
|
|
|
|
|
This pilot adds situational knowledge, not authority, live readiness or a change
|
|
|
|
|
to this repository's owner contracts. Work: `emergent-security/EMERGENT-WP-0002`.
|
|
|
|
|
<!-- END EMERGENT-SECURITY-PILOT -->
|