feat(openshell): inventory explicitly selected policy documents

.well-known/agents-shipgate.json

@@ -309,9 +309,9 @@
   "attestation_schema_version": "0.5",
   "registry_schema_version": "0.4",
   "org_evidence_bundle_schema_version": "shipgate.org_evidence_bundle/v2",
-  "host_grants_inventory_schema_version": "0.7",
-  "host_grants_baseline_schema_version": "0.7",
-  "host_grants_drift_schema_version": "0.7",
+  "host_grants_inventory_schema_version": "0.8",
+  "host_grants_baseline_schema_version": "0.8",
+  "host_grants_drift_schema_version": "0.8",
   "trigger_catalog_schema_version": "0.4",
   "capability_standard_version": "0.5",
   "governance_benchmark_catalog_schema_version": "0.2",
@@ -525,9 +525,9 @@
     "org_governance": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/org-governance-schema.v0.1.json",
     "org_evidence_bundle": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/org-evidence-bundle-schema.v2.json",
     "registry": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/registry-schema.v0.4.json",
-    "host_grants_inventory": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-inventory-schema.v0.7.json",
-    "host_grants_baseline": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-baseline-schema.v0.7.json",
-    "host_grants_drift": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-drift-schema.v0.7.json",
+    "host_grants_inventory": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-inventory-schema.v0.8.json",
+    "host_grants_baseline": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-baseline-schema.v0.8.json",
+    "host_grants_drift": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-drift-schema.v0.8.json",
     "scenario": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/scenario-schema.v0.1.json",
     "checks_catalog": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/checks.json",
     "determinism_boundary": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/determinism-boundary.json",

benchmark/cold-start/census.py

@@ -67,6 +67,7 @@
     # review is as much part of the boundary as the host files it reads.
     "shipgate.yaml", ".agents-shipgate/*",
     "policies/*.shipgate.yaml", ".shipgate/agent-contract.json",
+    ".shipgate/openshell.json", "**/.shipgate/openshell.json",
 )
 
 #: Patterns whose files are host surface only when they carry particular

docs/agent-contract-current.md

@@ -820,7 +820,7 @@ Downstream repos generated with
 - Current attestation schema: `0.5` — [`docs/attestation-schema.v0.5.json`](attestation-schema.v0.5.json)
 - Current registry schema: `0.4` — [`docs/registry-schema.v0.4.json`](registry-schema.v0.4.json)
 - Current org evidence bundle schema: `shipgate.org_evidence_bundle/v2` — [`docs/org-evidence-bundle-schema.v2.json`](org-evidence-bundle-schema.v2.json)
-- Current host-grants inventory, baseline, and drift schemas: `0.7` — [`inventory`](host-grants-inventory-schema.v0.7.json), [`baseline`](host-grants-baseline-schema.v0.7.json), [`drift`](host-grants-drift-schema.v0.7.json)
+- Current host-grants inventory, baseline, and drift schemas: `0.8` — [`inventory`](host-grants-inventory-schema.v0.8.json), [`baseline`](host-grants-baseline-schema.v0.8.json), [`drift`](host-grants-drift-schema.v0.8.json). Version 0.8 adds selected OpenShell document facts; historical host schemas remain frozen. See [OpenShell support](openshell-support.md).
 - Current trigger catalog schema: `0.4` — [`docs/triggers.json`](triggers.json)
 - Current governance benchmark catalog schema: `0.2` — [`docs/governance-benchmark-catalog-schema.v0.2.json`](governance-benchmark-catalog-schema.v0.2.json)
 - Current governance benchmark result schema: `0.2` — [`docs/governance-benchmark-result-schema.v0.2.json`](governance-benchmark-result-schema.v0.2.json)

docs/host-boundary-support.md

@@ -15,6 +15,7 @@ and `audit --host`.
 
 | Adapter | Status | Repository surfaces | Static semantics |
 |---|---|---|---|
+| OpenShell | static inventory | root/nested `.shipgate/openshell.json` selecting arbitrary repository policy files | [Pinned policy schema 1 inventory](openshell-support.md), authored/effective-snapshot roles, explicit/defaulted fields and named read limits; runtime enforcement and freshness remain unverified |
 | Codex | first-class | `.codex/config.toml`, `.codex/hooks.json` | sandbox, approvals, network, MCP/app approvals, hooks |
 | Claude Code | first-class | `.claude/settings.json`, `.claude/settings.local.json`, `.mcp.json`, `CLAUDE.md`, Claude skills | permission modes/rules, sandbox/network, additional paths, MCP restrictions, plugins and their marketplaces (`extraKnownMarketplaces`), hooks |
 | Cursor | first-class | `.cursor/cli.json`, `.cursor/mcp.json`, `.cursor/rules/**` | Shell/Read/Write rules, MCP declarations, instruction trust roots |