From cef16f3d77ff0f7f50a59b527df805bace09ff0c Mon Sep 17 00:00:00 2001 From: ProtocolWarden <32967198+ProtocolWarden@users.noreply.github.com> Date: Tue, 16 Jun 2026 01:03:16 -0400 Subject: [PATCH] chore(custodian): opt into CAP1 enforcement Enforce that the capability this repo owns resolves here (registry via the existing cross_repo sibling). Part of the capability-plane population follow-up; PlatformManifest's capability-refs gate adds this repo to its owning set. Co-Authored-By: Claude Opus 4.8 --- .console/log.md | 9 +++++++++ .custodian/config.yaml | 5 +++++ 2 files changed, 14 insertions(+) diff --git a/.console/log.md b/.console/log.md index 6997cd9..2553654 100644 --- a/.console/log.md +++ b/.console/log.md @@ -1,4 +1,13 @@ # Log +## 2026-06-16 — Opt into CAP1 enforcement (repo_graph_projection) + +Added `audit.capabilities.enforce: true` so Custodian's CAP1 verifies the +capability RepoGraph owns (`repo_graph_projection` → cli `repograph`) resolves +here. Registry located via the existing `cross_repo.platform_manifest_repo` +sibling. Enforced by PlatformManifest's capability-refs gate (RepoGraph added to +its owning set) + this repo's pre-push. Negative control: breaking the ref fails +CAP1 here. + ## 2026-06-15 — Capability plane charter (docs) Added `docs/capability-plane-charter.md` (indexed in docs/README.md) — the diff --git a/.custodian/config.yaml b/.custodian/config.yaml index cf0fb2d..cb8c81d 100644 --- a/.custodian/config.yaml +++ b/.custodian/config.yaml @@ -5,6 +5,11 @@ tests_root: tests audit: reconcile_enforce: true + # CAP1 — enforce that capabilities owned by RepoGraph (repo_graph_projection) + # resolve here. Registry is located via the existing cross_repo sibling below. + capabilities: + enforce: true + cross_repo: platform_manifest_repo: ../PlatformManifest