Inventory quartet and initial leases

2025-12-17 15:54:20 +00:00
parent 44edf6734b
commit 901444a6d5
21 changed files with 291 additions and 0 deletions
--- a/10-inventory/hosts/op-console-mac/README.md
+++ b/10-inventory/hosts/op-console-mac/README.md
@@ -0,0 +1,16 @@
+# op-console-mac
+
+## Purpose
+
+Console host used to run `op-core-vm`.
+
+## Trust boundary
+
+- The host is a console, not a source of trust.
+- Critical actions happen only inside `op-core-vm`.
+- No long-lived secrets are kept on the host if avoidable.
+
+## References
+
+- Doctrine: `00-doctrine/operator-charter.md`
+- Lease: `20-identity/leases/op-console-mac.md`