From 86bc2ccfd3dccccb739ffe14c6b62a7b8157eb90 Mon Sep 17 00:00:00 2001 From: "glm-5.3-flash" Date: Mon, 26 Oct 2026 12:09:25 +0000 Subject: [PATCH] docs(architecture): ADR-001 accepted (alk/ssh ALPN pin) --- docs/architecture/README.md | 2 +- docs/architecture/decisions/001-alkssh-alpn-pin.md | 11 +++++------ 2 files changed, 6 insertions(+), 7 deletions(-) diff --git a/docs/architecture/README.md b/docs/architecture/README.md index c61d4f3..1ce8187 100644 --- a/docs/architecture/README.md +++ b/docs/architecture/README.md @@ -35,7 +35,7 @@ below are being written. No implementation until specs reach | ADR | Title | Status | |---|---|---| -| [ADR-001](decisions/001-alkssh-alpn-pin.md) | The `alk/ssh` ALPN pin — edge-termination contract for `SshAdapter` | Proposed | +| [ADR-001](decisions/001-alkssh-alpn-pin.md) | The `alk/ssh` ALPN pin — edge-termination contract for `SshAdapter` | Accepted | | [ADR-004](decisions/004-auth-dispositions.md) | Auth dispositions — publickey-only, fail-closed, fingerprint identity | Accepted | | [ADR-005](decisions/005-at-rest-key-custody.md) | At-rest key custody — vault-wrapped OpenSSH-PEM, decrypt-at-use | Accepted | diff --git a/docs/architecture/decisions/001-alkssh-alpn-pin.md b/docs/architecture/decisions/001-alkssh-alpn-pin.md index 5e26b7e..cf1b2e3 100644 --- a/docs/architecture/decisions/001-alkssh-alpn-pin.md +++ b/docs/architecture/decisions/001-alkssh-alpn-pin.md @@ -1,5 +1,5 @@ --- -status: draft +status: reviewed last_updated: 2026-10-26 --- @@ -7,11 +7,10 @@ last_updated: 2026-10-26 ## Status -**Proposed** — 2026-10-26. Pending review sign-off; once Accepted this -is a one-way door (ledger rule 1: ALPN registry entries are stable — -"once published, does not change"). Acceptance marks the pin for the -family ledger; the first consumer is alkforge (family ADR-003 -decision 4: the pin lands before alkforge becomes the consumer). +**Accepted** — 2026-10-26. One-way door (ledger rule 1: ALPN registry +entries are stable — "once published, does not change"). The first +consumer is alkforge (family ADR-003 decision 4: the pin lands before +alkforge becomes the consumer). ## Context