feat(#830): revoke leases across compaction lifecycle

This commit is contained in:
ms-lead-reviewer
2026-07-18 01:43:01 -05:00
parent 06b17e7cd8
commit 66b1e0a077
21 changed files with 819 additions and 47 deletions

View File

@@ -6,6 +6,7 @@
- [Broker operations](guides/lease-broker-operations.md) — protected paths, startup, fail-closed recovery posture, distinct-principal deployment, and residual risk.
- [Lease-broker security notes](architecture/lease-broker-security.md) — identity, whole-class authorization, threat boundaries, and coordinator review requirements.
- [Whole mutator-class gate](architecture/mutator-class-gate.md) — default-deny policy, revoke-first/promote-last state machine, TTL, runtime adapters, and T-B/T-C assurance boundary.
- [Compaction revocation lifecycle](architecture/compaction-revocation.md) — Claude/Pi observer matrix, same-PID generation rollover, failure fencing, and the named bounded residual stale window.
## CLI and skill management