- decisions/001: pins alk/ssh to one contract — raw vanilla-SSH byte stream, endpoint = SshAdapter::handle; payload-blind relay restated per alkcall ADR-042; phase 1 serves edge termination only; relay/ browser legs stay compatible by construction (consumers deferred, OQ-01). Status Proposed — ledger-rule-1 acceptance pending review. - open-questions.md: 13 OQs seeded from POC findings (3 resolved by evidence: username disposition, vault role split, reconnect policy; 4 deferred with blockers: relay consumer, cert auth, env allowlist, sftp/alkfs); deferred/failed trackers filed under tasks/architecture/ for each deferred(scope) OQ (taskgraph validate: 4/4 valid) - README.md index: current state, doc table, planned docs, lifecycle
937 B
937 B
id, name, status, depends_on, scope, risk, impact, level, tags
| id | name | status | depends_on | scope | risk | impact | level | tags | ||
|---|---|---|---|---|---|---|---|---|---|---|
| architecture/oq-09-env-request-allowlist | OQ-09 tracker — env_request allowlist use case | pending | single | trivial | isolated | research |
|
Description
External-trigger tracker for OQ-09 — whether a consuming assembly ever wants a wire-supplied env allowlist on session channels (deferred(scope)). Decline-by-default is standing posture.
Work
Transition check only: when a concrete use case requiring wire-supplied environment variables arrives, mark this task completed and move OQ-09 to open in open-questions.md for an allowlist-shape design pass.
Verification
- OQ-09 status in
open-questions.mdmatches this task's state.
References
docs/architecture/open-questions.md(Theme D)
Out of scope
Any allowlist design.
Summary
Filled on completion.