Files
alkssh/tasks/architecture/oq-09-env-request-allowlist.md
T
glm-5.3-flash 644269b258 docs(architecture): scaffolding + ADR-001 (alk/ssh ALPN pin, Proposed)
- decisions/001: pins alk/ssh to one contract — raw vanilla-SSH byte
  stream, endpoint = SshAdapter::handle; payload-blind relay restated
  per alkcall ADR-042; phase 1 serves edge termination only; relay/
  browser legs stay compatible by construction (consumers deferred,
  OQ-01). Status Proposed — ledger-rule-1 acceptance pending review.
- open-questions.md: 13 OQs seeded from POC findings (3 resolved by
  evidence: username disposition, vault role split, reconnect policy;
  4 deferred with blockers: relay consumer, cert auth, env allowlist,
  sftp/alkfs); deferred/failed trackers filed under tasks/architecture/
  for each deferred(scope) OQ (taskgraph validate: 4/4 valid)
- README.md index: current state, doc table, planned docs, lifecycle
2026-10-26 06:11:42 +00:00

937 B

id, name, status, depends_on, scope, risk, impact, level, tags
id name status depends_on scope risk impact level tags
architecture/oq-09-env-request-allowlist OQ-09 tracker — env_request allowlist use case pending
single trivial isolated research
deferred-oq
external-trigger

Description

External-trigger tracker for OQ-09 — whether a consuming assembly ever wants a wire-supplied env allowlist on session channels (deferred(scope)). Decline-by-default is standing posture.

Work

Transition check only: when a concrete use case requiring wire-supplied environment variables arrives, mark this task completed and move OQ-09 to open in open-questions.md for an allowlist-shape design pass.

Verification

  • OQ-09 status in open-questions.md matches this task's state.

References

  • docs/architecture/open-questions.md (Theme D)

Out of scope

Any allowlist design.

Summary

Filled on completion.