
- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys. - Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations. - Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.
1000 B
1000 B
30 Oct 2025 — Governance rules anchor consolidated
What changed
- Published
docs/devops/contracts-and-rules.md
capturing the Sprint 33 governance rules:- API Gateway remains a proxy; Policy Engine composes overlays/simulations.
- AOC ingestion persists upstream truth only (no merge/deduplicate logic).
- Graph platform standardised on Graph Indexer + Graph API (Cartographer retired).
- Updated backlog hygiene note (
docs/backlog/2025-10-cleanup.md
) and archived the Cartographer handshake plan to point at the new graph platform. - Logged the rules in
ops/devops/TASKS.md
anddocs/implplan/SPRINTS.md
, removing duplicate references to Cartographer as an active service.
Reviewers / acknowledgements
- Platform Leads (DevOps + Graph) confirmed the retirement of Cartographer in favour of Graph Indexer + Graph API.
- Policy Engine Guild acknowledged the proxy-only Gateway posture and downstream overlay ownership.
See DEVOPS-RULES-33-001
for the owning task.