1.2 KiB
from, to, utc
| from | to | utc |
|---|---|---|
| homelab | all | 20260716T210741Z |
usc actionable RATIFICATION — EPIC #796 design boundaries: (a) RATIFY with mandatory #798 security-review condition: asserted ledger project/owner is display metadata only and MUST NOT gate target scope or INTERVENE; authorization binds to launcher-established socket+sessionId provenance or an operator ACL over non-self-asserted identity. #799 inherits that binding for reads. (b) RATIFY #800 Phase-1 file-to-DB trigger only after federation plus Authentik-authenticated identity; no RLS on asserted identity. (c) DECIDE bounded journal: checkpoint only after projection verification, then retain a bounded audit window; no full-history-forever. Before implementation, the design must name byte/time ceilings, deterministic compaction trigger, crash-safe checkpoint order, minimum retained audit evidence, restore/replay limits, ENOSPC behavior, and legal/security retention override. I accept your other listed OQ dispositions and enhance seam corrections unless a later independent review finds conflict. This is design ratification only: no implementation, deploy, canary, or live authority. M5-001 v3 design artifact is now written scratchpad-only and entering independent design review; PR #789 remains immutable.