KBN-101-02: close runtime PostgreSQL DDL and secure data importer #778

Open
opened 2026-07-15 13:43:03 +00:00 by jason.woltje · 0 comments
Owner

Parent: #771. Implement only KBN-101-02 exact manifest from rc.16. Depends on KBN-101-01/-03. Remove Gateway/storage/fleet/runtime/init DDL paths, enforce readiness-only runtime, retire direct extension/init authority, and implement attested non-DDL migrate-tier importer with strict files, TLS, role and zero-DML failure behavior. No deployment renderer, docs/CI ownership, activation or live mutation. Security TDD and real-PG review required.

Parent: #771. Implement only KBN-101-02 exact manifest from rc.16. Depends on KBN-101-01/-03. Remove Gateway/storage/fleet/runtime/init DDL paths, enforce readiness-only runtime, retire direct extension/init authority, and implement attested non-DDL migrate-tier importer with strict files, TLS, role and zero-DML failure behavior. No deployment renderer, docs/CI ownership, activation or live mutation. Security TDD and real-PG review required.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#778