Option C: the gate on ADMINISTER @ realm:kubernetes is tiered by ADR-0006
readiness state. Below production-approved, activation=APPROVED by founder
plan approval; at production-approved, CONSTRUCT via ArgoCD for
external-audited evidence, direct apply only as activation=BREAK_GLASS.
rapp-policy-nexus gets a dated transition to 2026-12-21.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Founder plan approval is accepted as the gate for ops-mason's phase-4
protected writes, as an operator-accepted exception to section 6.4, not a
change to the standard. Review 2026-12-21.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
