coulomb/zone-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: track scaffold gitignore and custodian brief

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-08-19 21:20:12 +02:00
parent ebec609843
commit b2800e10a7
3 changed files with 31 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
.gitignore vendored Normal file
View file

@ -0,0 +1,5 @@
# state-hub: track .claude/rules
# Claude Code local state (track shared rules; ignore machine-specific files)
.claude/*
!.claude/rules/
!.claude/rules/*.md

18
WORK-RECORDS.md Normal file
View file

@ -0,0 +1,18 @@
# Work Records — zone-engine
> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record
> stage 3). Do not edit by hand — edit the source file/block listed for
> each record and re-run fix-consistency to refresh this index. Archived
> workplans are omitted; closed decisions/intakes/engagements stay listed
> so recently-resolved work is still visible. [auto]
| Kind | ID | Status | Lane | Source |
| --- | --- | --- | --- | --- |
| workplan | ZONE-WP-0001 | proposed | — | workplans/ZONE-WP-0001-security-zone-model.md |
| task | ZONE-WP-0001-T01 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
| task | ZONE-WP-0001-T02 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
| task | ZONE-WP-0001-T03 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
| task | ZONE-WP-0001-T04 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
| task | ZONE-WP-0001-T05 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
| task | ZONE-WP-0001-T06 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
| task | ZONE-WP-0001-T07 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |

8
workplans/ZONE-WP-0001-security-zone-model.md
View file

@ -10,6 +10,7 @@ topic_slug: netkingdom
planning_priority: P1
created: "2026-08-19"
updated: "2026-08-19"
state_hub_workstream_id: "a75c8c9c-c108-4831-8d72-4343cce49879"
---
# ZONE-WP-0001 — The security zone model
@ -68,6 +69,7 @@ machinery; it does not grow a second vocabulary beside it.
id: ZONE-WP-0001-T01
status: todo
priority: high
state_hub_task_id: "ea74316e-b711-4888-9b38-553ebc9ad856"
```
**Confirm ownership on the record, and say what publishes where.** This repo was
@ -84,6 +86,7 @@ for its own sake. Record the outcome either way.
id: ZONE-WP-0001-T02
status: todo
priority: high
state_hub_task_id: "f1016c71-ccb0-46a7-9143-e81c7ac34cad"
```
**Derive the zones from the real estate.** Walk ops-warden's 27 catalog lanes,
@ -109,6 +112,7 @@ Answer explicitly:
id: ZONE-WP-0001-T03
status: todo
priority: high
state_hub_task_id: "7f47b750-1ae4-467d-b3c4-064f4ec07dbd"
```
**Model stance and failure mode, per control per zone.** Enforced / advisory /
@ -124,6 +128,7 @@ Controls in scope at minimum: the flex-auth pre-sign gate (`policy.enabled`,
id: ZONE-WP-0001-T04
status: todo
priority: high
state_hub_task_id: "1c542ca5-2b82-4778-a3e4-c76e932423c9"
```
**Design the time-boxed exception — this is the load-bearing task.** A standing
@ -143,6 +148,7 @@ plainly and drop the runtime. That is a valid and cheaper outcome.
id: ZONE-WP-0001-T05
status: todo
priority: medium
state_hub_task_id: "f4556ca0-cb26-46ed-9351-d00270bd2309"
```
**Declaration format and conformance rule.** Follow `tenancy.yaml`: per-repo,
@ -154,6 +160,7 @@ observed — a zone that can be quietly widened is not a boundary.
id: ZONE-WP-0001-T06
status: todo
priority: medium
state_hub_task_id: "8a000c18-6ee7-4328-99c7-53c490435316"
```
**Draft the canon standard and offer it.** `security-zones_v0.1.md` for
@ -164,6 +171,7 @@ landing, as ops-warden's WP-0015 maturity model was.
id: ZONE-WP-0001-T07
status: todo
priority: medium
state_hub_task_id: "c7ea24df-8aa9-4ead-ba3a-033aa5201c21"
```
**Prove it on two consumers.** A model only its author honours is not adopted.