- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys. - Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations. - Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.
		
			
				
	
	
	
		
			1000 B
		
	
	
	
	
	
	
	
			
		
		
	
	
			1000 B
		
	
	
	
	
	
	
	
30 Oct 2025 — Governance rules anchor consolidated
What changed
- Published 
docs/devops/contracts-and-rules.mdcapturing the Sprint 33 governance rules:- API Gateway remains a proxy; Policy Engine composes overlays/simulations.
 - AOC ingestion persists upstream truth only (no merge/deduplicate logic).
 - Graph platform standardised on Graph Indexer + Graph API (Cartographer retired).
 
 - Updated backlog hygiene note (
docs/backlog/2025-10-cleanup.md) and archived the Cartographer handshake plan to point at the new graph platform. - Logged the rules in 
ops/devops/TASKS.mdanddocs/implplan/SPRINTS.md, removing duplicate references to Cartographer as an active service. 
Reviewers / acknowledgements
- Platform Leads (DevOps + Graph) confirmed the retirement of Cartographer in favour of Graph Indexer + Graph API.
 - Policy Engine Guild acknowledged the proxy-only Gateway posture and downstream overlay ownership.
 
See DEVOPS-RULES-33-001 for the owning task.