docs: product horizons, approval policies and KAgent integration spec #13

Merged

ochenstarik-ui merged 1 commit from docs/product-horizons-and-integration into main

2026-08-09 12:07:56 +00:00

ochenstarik-ui commented

2026-08-06 12:51:02 +00:00

(Migrated from github.com)

New documents

docs/product-horizons.md — four horizons with hard exit criteria. A horizon closes as a whole; a criterion expressed in terms of actual system behaviour closes only by measurement on real topology, and green CI does not substitute for it. Includes the table of what was adopted from the vision document, what was deferred, and why.
docs/approval-policies.md — nine approval modes over today's binary confirmation, mapped onto the existing ProvisioningJob, TTL and execution-grant mechanisms. Records which operations may never fall below operator_reauth, and that CA rotation may never fall below two_person.
docs/integration-kagent.md — capability model split into read, request and never-grantable, where never-grantable means absent from the code path rather than disabled by configuration. Untrusted-executor invariant for KAgent Worker. SO_PEERCRED required on the discovery socket, reusing the measures already implemented in ProvisioningHelperServer. API designed against entities that exist today.

Updated

docs/security-model.md — untrusted executors on a Node; the public web-surface decision that must be recorded before that work starts; never-grantable capabilities.
docs/roadmap.md — stages 14-18 for the adopted scope, pinned to horizons.
README.md — links, with an explicit statement that the new documents describe target behaviour and that nothing in them is implemented.

Documentation only; no code, tests or workflows are touched.

🤖 Generated with Claude Code

Adopt the reviewed parts of the external vision document as repository specifications, and record the work-order gates that keep unimplemented subsystems from starting before their prerequisites are closed. ## New documents - `docs/product-horizons.md` — four horizons with hard exit criteria. A horizon closes as a whole; a criterion expressed in terms of actual system behaviour closes only by measurement on real topology, and green CI does not substitute for it. Includes the table of what was adopted from the vision document, what was deferred, and why. - `docs/approval-policies.md` — nine approval modes over today's binary confirmation, mapped onto the existing `ProvisioningJob`, TTL and execution-grant mechanisms. Records which operations may never fall below `operator_reauth`, and that CA rotation may never fall below `two_person`. - `docs/integration-kagent.md` — capability model split into read, request and never-grantable, where never-grantable means absent from the code path rather than disabled by configuration. Untrusted-executor invariant for KAgent Worker. `SO_PEERCRED` required on the discovery socket, reusing the measures already implemented in `ProvisioningHelperServer`. API designed against entities that exist today. ## Updated - `docs/security-model.md` — untrusted executors on a Node; the public web-surface decision that must be recorded before that work starts; never-grantable capabilities. - `docs/roadmap.md` — stages 14-18 for the adopted scope, pinned to horizons. - `README.md` — links, with an explicit statement that the new documents describe target behaviour and that nothing in them is implemented. Documentation only; no code, tests or workflows are touched. 🤖 Generated with [Claude Code](https://claude.com/claude-code)