coulomb/zone-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Correct the rapp count: eight declarations, not nine

Browse source 
An inflated count in a document whose subject is accuracy.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-08-20 07:21:02 +02:00
parent 26e3490c9b
commit de2d8e2dda
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
workplans/ZONE-WP-0001-security-zone-model.md
View file

@ -337,7 +337,7 @@ it.** T02 concluded no registry carries a join key. That was too strong; it was
derived from ops-warden's catalog alone, which is the one place a workload
declaration would *not* live.
`rapp-*/declarations/rapp.yaml` is the workload declaration surface. **Nine**
`rapp-*/declarations/rapp.yaml` is the workload declaration surface. **Eight**
rapps declare `workload_identity` (`name`, `principal`, `service_account`,
`tenant`) together with `data_classification`, `criticality`
(`low`/`medium`/`high`/`critical`), `readiness_state`, and `bound_reefs`.
@ -366,7 +366,7 @@ blocking unknown:
2. **Vocabulary mismatch.** rapps declare `public`, which `dataclass_floor` does
not map. `rapp-policy-nexus` is `public` today, so the floor cannot grade it.
One of the two vocabularies must move; canon owns `DataClassification`.
3. **Coverage is partial.** Nine workloads are declared; ops-warden's catalog
3. **Coverage is partial.** Eight workloads are declared; ops-warden's catalog
yields ~17 distinct path identities. The unmatched remainder is the
interesting set — it is where a lane exists for something that is not a
declared workload at all.