[adrianwebb]

Outcome

Add the API-owned native Cordis container provider and bounded generated service definition. The server root is the separately reviewed #619.

Work authority

• Work item / Issue: feat: Build Task 3B native installed API composition #617
• Proposal / decision: Approved Task 3B architecture, feat: prepare Task 3B installed composition and durable host root platform#713
• Assignment / checkpoint: Maintainer-directed Task 3B review and integration in this Codex chat.
• Actor: Codex for @adrianwebb
• Human authority: @adrianwebb authorized restoration per proposal: restore existing trusted committer policy to cordis #620, review, fixes and merge into cordis; all issues stay open.
• Agent / capacity provider: Codex / OpenAI
• Exact base ref: cordis 8b19a12
• Exact head ref: feature/617-task3b-installed-composition fecbaf0

Contributor mode:

• Agent-authored under human authority

Plan

Owner documentation → outside-in built-program tests → native class provider → owner and installed verification → review and cordis integration.

Changes and commits

Public container provider, native provide/inject fields and exact owner-generated service metadata. Includes restored cordis policy without modifying its approved identities. README links survive task-branch cleanup. Runtime server/authentication routes remain in #619.

Verification

• Owner strict check, build and 3 unit/integration/built-program smoke tests passed this review.
• Current verify CI passed.
• Current base-owned authorization and metadata validation passed.
• Container behavior exercised in the real installed PostgreSQL/Keycloak/API/Caddy/HTTPS browser scene (289 prior assertions). The new missing-application HTTP regression applies to feat: compose authenticated installed API and request roots (#617) #619 and is addressed there before its integration.

Risk and rollback

The qualified profile is Ubuntu 26.04 x64/local Unix Docker. No production or legacy service changes. Revert through a new reviewed issue-linked cordis PR if necessary. Test cleanup validates fixture installation labels before removing its resources.

Completion summary

Container slice reviewed; current CI passes against the restored trusted base. #621 restored exactly the already-approved policy blob b1a687db754ee2fac141919e6c63052d12bf2812. This runtime PR passes normal admission and uses no bootstrap exception. The server follow-up and parent installed gate remain separate. Issues remain open until release.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.

Part of #617

[adrianwebb]

Current verify and PR-template validation pass. Hold integration on #620: the base-owned AGPL authorization check cannot find .github/approved-committers.json at exact cordis base 72e410a. Existing legacy policy blob b1a687db754ee2fac141919e6c63052d12bf2812 already lists adrianwebb. Its separately reviewed exact-byte restoration/trusted first admission is proposed, not performed; feature-head data cannot authorize itself.

[adrianwebb]

Review complete for the bounded container slice at fecbaf0. Native declaration/service projection and program tests are consistent; current owner verification (3 tests), normal base-owned authorization and metadata validation pass. Includes unchanged restored policy and durable documentation links. The HTTP missing-application regression is scoped to the separate #619 server slice and must pass there before integration. Merging this container slice into cordis under the maintainer's explicit instruction; #617 and #620 remain open.