Issues

• a reservation's identity is tier-qualified, and the gate resolves the bot before it judges [ADR-155 unit 10/10, pending fleet question #101]

  SocialGouv/iterion#2980 · Filter by author devthejo opened on Nov 3, 2026

• sandbox: Run.Command's env contract lives in the seam's doc, with a class guard over the seam's callers

  SocialGouv/iterion#2979 · Filter by author devthejo opened on Nov 3, 2026

• secret boundary: native auto-memory LOAD and conversation replay are model-read texts the boundary does not cover

  🔒 secu
  SocialGouv/iterion#2978 · Filter by author devthejo opened on Nov 3, 2026

• a refusal that names the reserve, and the one end-to-end witness [ADR-155 unit 9/9]

  SocialGouv/iterion#2976 · Filter by author devthejo opened on Nov 3, 2026

• the chart exposes reservable execution capacity (and prod stays the operator's) [ADR-155 unit 8/9]

  SocialGouv/iterion#2975 · Filter by author devthejo opened on Nov 3, 2026

• per-pool in-flight ceiling: MaxAckPending stops being one fleet-wide int [ADR-155 unit 7/9]

  SocialGouv/iterion#2974 · Filter by author devthejo opened on Nov 3, 2026

• the meter carries the workload, armed only on a fleet verified to write it [ADR-155 unit 6/9]

  SocialGouv/iterion#2973 · Filter by author devthejo opened on Nov 3, 2026

• the credential pool becomes an arbitrated capacity tier, by per-reservation opt-in [ADR-155 unit 5/9]

  SocialGouv/iterion#2972 · Filter by author devthejo opened on Nov 3, 2026

• the runner is held to the lowered policy: stamp the effective cap on the RunMessage [ADR-155 unit 4/9]

  SocialGouv/iterion#2971 · Filter by author devthejo opened on Nov 3, 2026

• capacity sweep: the reconcile net that makes an outstanding counter crash-safe [ADR-155 unit 3/9]

  SocialGouv/iterion#2970 · Filter by author devthejo opened on Nov 3, 2026

• launch gate: the three budgetfloor axes allocate at admission instead of counting [ADR-155 unit 2/9]

  SocialGouv/iterion#2969 · Filter by author devthejo opened on Nov 3, 2026

• capacityledger: the allocation primitive as a leaf package, with both twins under one conformance suite [ADR-155 unit 1/9]

  SocialGouv/iterion#2968 · Filter by author devthejo opened on Nov 3, 2026

• P5: the broker credential, pod side (after the operator's verdict) [ADR-154 unit 8/8]

  SocialGouv/iterion#2967 · Filter by author devthejo opened on Nov 3, 2026

• P5: the pool egress proxy — variant 2 of the netproxy seam, out of the pod (after the operator's verdict) [ADR-154 unit 7/8]

  SocialGouv/iterion#2966 · Filter by author devthejo opened on Nov 3, 2026

• P5: the pool's namespace, its RBAC and its standing egress policy (after the operator's verdict) [ADR-154 unit 6/8]

  SocialGouv/iterion#2965 · Filter by author devthejo opened on Nov 3, 2026

• the pool's gateway host becomes registry data — a static projection, not a third truth [ADR-154 unit 5/8]

  SocialGouv/iterion#2964 · Filter by author devthejo opened on Nov 3, 2026

• P4-b: pin the invariant that a pool pod holds no key material [ADR-154 unit 4/8]

  SocialGouv/iterion#2963 · Filter by author devthejo opened on Nov 3, 2026

• iterion_dlq_depth_by_pool joins the unlabelled gauge [ADR-154 unit 3/8]

  SocialGouv/iterion#2962 · Filter by author devthejo opened on Nov 3, 2026

• the pool admin surface reaches the CLI [ADR-154 unit 2/8]

  SocialGouv/iterion#2961 · Filter by author devthejo opened on Nov 3, 2026

• P2: the mapping route refuses a cutover while the team's runs are alive [ADR-154 unit 1/8]

  SocialGouv/iterion#2960 · Filter by author devthejo opened on Nov 3, 2026

• model boundary: an MCP tool's ToolDef.Description/InputSchema reaches the model without crossing the secret boundary (#2845 item 5 residual)

  🔒 secusource:agent
  SocialGouv/iterion#2946 · Filter by author devthejo opened on Nov 3, 2026

• sandbox(kubernetes): the exec env leaves the pod-side argv — a per-exec env file owned by the driver (#2845 item 2, kubernetes half)

  🔒 secusource:agent
  SocialGouv/iterion#2945 · Filter by author devthejo opened on Nov 3, 2026

• runtime: the ordered per-element collection, keyed on element identity

  ✨ featuresource:agent
  SocialGouv/iterion#2944 · Filter by author devthejo opened on Nov 3, 2026

• dsl: a fan_out_each whose template reaches no convergence point warns at compile time

  ✨ featuresource:agent
  SocialGouv/iterion#2943 · Filter by author devthejo opened on Nov 3, 2026

• dsl,runtime: a fan_out_each declares max_expansion, refused before any branch starts

  ✨ featuresource:agent
  SocialGouv/iterion#2942 · Filter by author devthejo opened on Nov 3, 2026