6 Commits

Include renames

Author	SHA1	Message	Date
mosaic-coderandClaude Opus 4.8	354b695362	style(kbn): prettier-format KBN-101 Envelope A SSOT docs (format:check clean) ... Apply repo prettier (3.8.1, .prettierrc) to the KBN-101 Envelope A contract docs so CI `format:check` passes. Formatting-only: - Whitespace, markdown table pipe/column alignment, separator-dash widths, emphasis-marker normalization (`*italic*` -> `_italic_`). - One content-neutral fix required for prettier idempotency: the KBN-101-06 row's `*future*` italic clashed with the literal underscore in `SCM_RIGHTS` in the same cell, making prettier non-idempotent (it oscillated `SCM_RIGHTS`<->`SCM*RIGHTS`). Dropped that single italic marker; the word "future" and every value are preserved. Verified: no normative value/word/glob/path/number or table cell VALUE changed in any of the 5 files (exhaustive substantive-char-stream + per-cell equality vs the pre-format snapshot). All anchored contract edits (rc.20 block, CONNECT allowlist, secret matrix + PROVISIONAL-CONVENTION annotations, §7 manifest, SHARED rc.20 entry, RATIFIED preamble) intact. Only INDEX/DB-ROLE-SPLIT/ ENVELOPE-A changed; MISSION-MANIFEST/SHARED-CONTRACT already conformant. Co-Authored-By: Claude Opus 4.8 <[email protected]> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-25 18:40:58 -05:00
mosaic-coderandClaude Opus 4.8	86e00e1757	docs(kbn): mark rung DSN Vault subpaths PROVISIONAL-CONVENTION (Mos touch-up) ... Per Mos ruling: do not silently freeze the inferred Vault subpaths for the two new rung DSN secrets. Annotate the §5 secret-matrix rows for `.../database/runtime-user` and `.../database/runtime-orchestrator` as PROVISIONAL-CONVENTION — exact subpaths TO-CONFIRM against the live Vault layout at KBN-101-03/-05 implementation. The secret NAMES remain envelope-fixed; only the subpath is provisional. Annotation-only; no other edits. Co-Authored-By: Claude Opus 4.8 <[email protected]> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-25 18:18:06 -05:00
mosaic-coderandClaude Opus 4.8	e4de82a5b1	feat(kbn): land KBN-101 Envelope A v6 (rc.20) — declarative sink-RBAC + RLS write-source (Form A) ... Form A apply-in-place amendment of the frozen native-kanban SSOT, ratifying the converged KBN-101 Envelope A v6 (rc.20): declarative sink-RBAC + per-role connection-selection + RLS WITH CHECK/USING write-source + FORCE ROW LEVEL SECURITY + sink-resident task_status_write_override table on `tasks`. Contract-doc only — no code, no CI fixture, no KBN-100 file/row invention. Files: - KBN-101-DB-ROLE-SPLIT.md: §4 role table (+4 rung rows), role-table F2 note, §4 L176 CONNECT allowlist (+2 logins; "either"->"any of the three" + NB-5 inline grants), §4 closing rc.20 block + frozen-invariant note, §5 secret matrix (+2 rung DSN rows), §7 manifest (+KBN-101-10 row, +,10 dep edges on -02/-03/-05/-06/-08, closing-sentence clause). - SHARED-CONTRACT.md: rc.6 + rc.5 "Non-effect" pointer clauses; new ### 1.0.0-rc.20 changelog entry. - MISSION-MANIFEST.md: §10 change-control audit-trail note. - INDEX.md: index row for the ratified envelope doc. - KBN-101-ENVELOPE-A.md (new): converged v6 envelope text, verbatim, marked RATIFIED / part of the frozen SSOT as of this PR. Ratification lineage: Jason B1 ruling (2026-07-20T23:08Z) + Mos OPTION A + Mos Q1 (TIER-LEVEL) + Mos Q2 (RLS WITH CHECK, two mandatory conditions) + Gate A (a11a1e2c) + Gate B (a6aac2cd). HALT-clear per envelope §0-§1. Co-Authored-By: Claude Opus 4.8 <[email protected]> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-25 18:13:20 -05:00
jason.woltje	c593a15ef8	docs(kbn): freeze KBN-101 database role split contract (#774)	2026-07-15 13:34:29 +00:00
jason.woltje	2e2280070a	docs(#753): clear KBN-010 threat and schema gate (#765)	2026-07-14 21:46:44 +00:00
jason.woltje	49e8a54105	docs(#751): Publish native Kanban/SOT canon (#752)	2026-07-14 17:08:09 +00:00