mosaicstack/stack
21
0
Fork 1
Code Issues 338 Pull Requests 13 Actions Packages Projects Releases 15 Wiki Activity

feat(kbn): land KBN-101 Envelope A v6 (rc.20) — declarative sink-RBAC + RLS write-source (Form A) #902

Merged
Ghost merged 3 commits from feat/kbn-101-envelope-a-formA into main 2026-07-25 23:58:19 +00:00
Conversation 3 Commits 3 Files Changed 5
+443 -40
3 Commits
Author SHA1 Message Date
mosaic-coderandClaude Opus 4.8 354b695362 style(kbn): prettier-format KBN-101 Envelope A SSOT docs (format:check clean)
ci/woodpecker/pr/ci Pipeline was successful
Details 
Apply repo prettier (3.8.1, .prettierrc) to the KBN-101 Envelope A contract
docs so CI `format:check` passes. Formatting-only:

- Whitespace, markdown table pipe/column alignment, separator-dash widths,
  emphasis-marker normalization (`*italic*` -> `_italic_`).
- One content-neutral fix required for prettier idempotency: the KBN-101-06
  row's `*future*` italic clashed with the literal underscore in `SCM_RIGHTS`
  in the same cell, making prettier non-idempotent (it oscillated
  `SCM_RIGHTS`<->`SCM*RIGHTS`). Dropped that single italic marker; the word
  "future" and every value are preserved.

Verified: no normative value/word/glob/path/number or table cell VALUE changed
in any of the 5 files (exhaustive substantive-char-stream + per-cell equality
vs the pre-format snapshot). All anchored contract edits (rc.20 block, CONNECT
allowlist, secret matrix + PROVISIONAL-CONVENTION annotations, §7 manifest,
SHARED rc.20 entry, RATIFIED preamble) intact. Only INDEX/DB-ROLE-SPLIT/
ENVELOPE-A changed; MISSION-MANIFEST/SHARED-CONTRACT already conformant.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb
 2026-07-25 18:40:58 -05:00
mosaic-coderandClaude Opus 4.8 86e00e1757 docs(kbn): mark rung DSN Vault subpaths PROVISIONAL-CONVENTION (Mos touch-up)
ci/woodpecker/pr/ci Pipeline failed
Details 
Per Mos ruling: do not silently freeze the inferred Vault subpaths for the two
new rung DSN secrets. Annotate the §5 secret-matrix rows for
`.../database/runtime-user` and `.../database/runtime-orchestrator` as
PROVISIONAL-CONVENTION — exact subpaths TO-CONFIRM against the live Vault
layout at KBN-101-03/-05 implementation. The secret NAMES remain envelope-fixed;
only the subpath is provisional. Annotation-only; no other edits.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb
 2026-07-25 18:18:06 -05:00
mosaic-coderandClaude Opus 4.8 e4de82a5b1 feat(kbn): land KBN-101 Envelope A v6 (rc.20) — declarative sink-RBAC + RLS write-source (Form A)
ci/woodpecker/pr/ci Pipeline was canceled
Details 
Form A apply-in-place amendment of the frozen native-kanban SSOT, ratifying
the converged KBN-101 Envelope A v6 (rc.20): declarative sink-RBAC + per-role
connection-selection + RLS WITH CHECK/USING write-source + FORCE ROW LEVEL
SECURITY + sink-resident task_status_write_override table on `tasks`.

Contract-doc only — no code, no CI fixture, no KBN-100 file/row invention.

Files:
- KBN-101-DB-ROLE-SPLIT.md: §4 role table (+4 rung rows), role-table F2 note,
  §4 L176 CONNECT allowlist (+2 logins; "either"->"any of the three" + NB-5
  inline grants), §4 closing rc.20 block + frozen-invariant note, §5 secret
  matrix (+2 rung DSN rows), §7 manifest (+KBN-101-10 row, +,10 dep edges on
  -02/-03/-05/-06/-08, closing-sentence clause).
- SHARED-CONTRACT.md: rc.6 + rc.5 "Non-effect" pointer clauses; new
  ### 1.0.0-rc.20 changelog entry.
- MISSION-MANIFEST.md: §10 change-control audit-trail note.
- INDEX.md: index row for the ratified envelope doc.
- KBN-101-ENVELOPE-A.md (new): converged v6 envelope text, verbatim, marked
  RATIFIED / part of the frozen SSOT as of this PR.

Ratification lineage: Jason B1 ruling (2026-07-20T23:08Z) + Mos OPTION A +
Mos Q1 (TIER-LEVEL) + Mos Q2 (RLS WITH CHECK, two mandatory conditions) +
Gate A (a11a1e2c) + Gate B (a6aac2cd). HALT-clear per envelope §0-§1.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb
 2026-07-25 18:13:20 -05:00