ops-warden/.claude/rules/repo-boundary.md at f493b0841f3adfea4b210730ecb1e77b2abac730

Archived

This repository has been archived on 2026-07-08. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

tegwick 9514ad914e WARDEN-WP-0004: repo hygiene and hub sync

Update SCOPE and README to reflect the shipped warden CLI, fill agent
rules for stack/architecture/boundary, archive finished workplans
0001–0003, and register WP-0004 in State Hub.

2026-06-17 07:33:49 +02:00

803 B

Raw Blame History

Repo boundary

This repo owns ops-warden only. It does not own:

Concern	Owner
Tunnel lifecycle, `cert_command` wiring in tunnels	`ops-bridge`
Host SSH principal files, force-command wrappers	`railiance-infra`
Vault/OpenBao cluster deployment and unseal ceremony	`railiance-platform`
Inter-Hub operator API keys, provider API keys (e.g. OpenRouter)	OpenBao / operator secret store
State Hub service code and consistency tooling	`state-hub`
Workstream coordination across custodian domain	`the-custodian`
Human admin SSH key generation	self-service (`ssh-keygen`)

ops-warden issues short-lived SSH certificates only. It is not a general secrets manager and must not store long-lived API keys in Git, State Hub, or workplans.

803 B Raw Blame History

Repo boundary

803 B

Raw Blame History