DESIGN_READY_FOR_OPERATOR_REVIEW: StarIntel deployment configuration and trusted extension boundary #192

New issue

Open

opened 2026-09-02 17:26:15 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-02 17:26:15 +00:00

Owner

Design-review transaction for Auto-Research #191 and lost-rob0t/starintel-server#38.

The canonical design will preserve the repaired Nix OCI/Compose deployment and define the residual boundary between validated data-only runtime configuration, runtime secret references, and explicitly trusted executable Lisp startup extensions.

It will include RED-first slices for deterministic config normalization, unknown/unsafe setting rejection, consistent VALUE/VALUE_FILE handling, secret redaction, and observed TLS/base-path/runtime behavior.

Implementation authorization remains PENDING / AWAITING_OPERATOR_APPROVAL. Design readiness, publication, issue state, or machine review cannot authorize implementation.

Design-review transaction for Auto-Research #191 and `lost-rob0t/starintel-server#38`. The canonical design will preserve the repaired Nix OCI/Compose deployment and define the residual boundary between validated data-only runtime configuration, runtime secret references, and explicitly trusted executable Lisp startup extensions. It will include RED-first slices for deterministic config normalization, unknown/unsafe setting rejection, consistent `VALUE`/`VALUE_FILE` handling, secret redaction, and observed TLS/base-path/runtime behavior. **Implementation authorization remains PENDING / AWAITING_OPERATOR_APPROVAL.** Design readiness, publication, issue state, or machine review cannot authorize implementation.