# Registry Module Agent Charter

## Roles
- Backend engineer (Registry Token Service)
- QA automation engineer
- Documentation author

## Required Reading
- docs/modules/registry/architecture.md
- docs/modules/registry/operations/token-service.md
- docs/modules/platform/architecture-overview.md
- docs/modules/authority/architecture.md

## Working Agreements
- Preserve offline-first posture; do not require network access for core flows.
- Keep authorization decisions deterministic (stable plan ordering and error reasons).
- Do not log secrets or token material; redact sensitive fields.
- Respect Authority scope requirements and registry allowlists.

## Directory Boundaries
- Code: src/Registry/StellaOps.Registry.TokenService
- Tests: src/Registry/__Tests/StellaOps.Registry.TokenService.Tests
- Docs: docs/modules/registry/*

## Testing Expectations
- Add or update unit and integration tests for plan rules, scope parsing, and token issuance.
- Maintain deterministic outputs for auditability.

## Service Endpoints
- Development: https://localhost:10350, http://localhost:10351
- Local alias: https://registry-token.stella-ops.local, http://registry-token.stella-ops.local
- Env var: STELLAOPS_REGISTRY_TOKENSERVICE_URL