Some checks failed
ci/woodpecker/pr/ci Pipeline failed
Per Mos ruling: do not silently freeze the inferred Vault subpaths for the two new rung DSN secrets. Annotate the §5 secret-matrix rows for `.../database/runtime-user` and `.../database/runtime-orchestrator` as PROVISIONAL-CONVENTION — exact subpaths TO-CONFIRM against the live Vault layout at KBN-101-03/-05 implementation. The secret NAMES remain envelope-fixed; only the subpath is provisional. Annotation-only; no other edits. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb