1793903f5e
Real traffic showed the first enforcement pass blocking core assistant faculties: skills listing and the sandboxed Python classified as unknown external side effects, browsing denied by default, with no approval surface in the chat flow. Enforcement returns to observe-only fleet-wide while the approvals UX and default grants are reworked, and the capability map now tells the truth about the real toolset: the Python sandbox is internal shell work, skills/todo/clarify/vision are reads, browsing is network (medium), image generation writes an artifact through the trusted broker. Unknown tools remain fail-closed. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
titan-iac
Flux-managed Kubernetes desired-state config for bstein.dev.
Canonical source URL:
ssh://git@scm.bstein.dev:2242/atlas/titan-iac.git
Scope
This repo contains cluster configuration consumed by Flux:
- platform/infrastructure manifests
- service manifests and kustomizations
- operational scripts for render/reconcile workflows
Apply model
I use Git + Flux as the source of truth and avoid manual in-cluster edits for durable changes.