Joseph Magly
b192577b54
Capture the brownfield architecture and its relationship to the project vision.\n\n- add the current-state SAD and five retrospective ADRs\n- classify vision vectors against implementation evidence\n- record requirements, risks, gates, and construction handoff
639 B
639 B
ADR-003 — Enforce Scope and Approval Below Model Reasoning
Status: Accepted (retrospective)
Date: 2026-07-20
Context
Models and target content are nondeterministic and may suggest unsafe or off-scope actions. The arsenal performs real operations.
Decision
Target scope, egress containment, exact-origin credentials, and dangerous-tool approvals are enforced in deterministic target/arsenal/runtime paths, not solely in prompts.
Consequences
Prompt compromise does not automatically authorize execution. Every new network/tool adapter must carry and test these controls; bypasses are release-blocking defects.