myxce/.kiro/steering
Rongsong Shen 7fe9b22381
docs(spec): discovery briefs for job status detail, job cleanup, sandbox execution and RBAC persistence
New specs from /kiro-discovery (2026-09-28/29), added to roadmap.md:
- job-status-detail-display: show pending reasons and reserved-vs-used
  resources in REST and xcecli. Requirements generated (7 requirements).
- scheduler-alter-pend-reasons: keep a pending reason for every alternative
  resreq (per-alternative JobPendReason) and fix the obj->reason leak.
- controller-job-cleanup: primary-only sweep that removes finished jobs past
  a configurable retention, via a replicated WAL removal fact.
- application-profile: admin-defined application profiles (execution mode,
  launch type, env, resource defaults) chosen per job, with app:use/app:view
  RBAC. Queues and profiles stay orthogonal.
- job-sandbox-execution / job-sandbox-multinode: run jobs in a systemd
  DynamicUser sandbox behind a pluggable execution backend.
- rbac-persistence: make RBAC changes made through the API survive an
  apiserver restart (closes the security.md gap).

roadmap.md also records the scheduler-sim-diagnostics info job update and a
security item: remote-task units appear to run as root (found by code
reading).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-09-29 08:57:31 +00:00
..
api-standards.md docs: OpenWolf pointer cleanup + redirect-hint checklist item (bug-1700 lesson) 2026-08-27 08:27:17 +00:00
build-deployment.md docs(xce-harness-component): document harness in root CLAUDE.md and build-deployment.md 2026-09-14 07:45:26 +00:00
config-design.md save status 2026-07-21 08:24:44 +00:00
error-handling.md update documents 2026-08-10 17:51:51 +08:00
ha-async-io.md docs: sync skills and steering docs with bug-1562..1566 findings 2026-08-17 10:21:25 +00:00
persistence.md docs: formalize save/restore field-completeness as a standing invariant 2026-08-27 08:59:48 +00:00
product.md update documents 2026-08-10 17:51:51 +08:00
resource-accounting.md docs(resource-accounting): explain why admission control doesn't query live 2026-08-31 07:28:00 +00:00
roadmap.md docs(spec): discovery briefs for job status detail, job cleanup, sandbox execution and RBAC persistence 2026-09-29 08:57:31 +00:00
scheduler-driver-equivalence.md docs(scheduler): correct stale bug-1611 status and driver-equivalence steering 2026-09-19 14:01:09 +00:00
security.md docs: save scheduler-snapshot-job-allocation and xce-test-cli-ux spec docs, sync OpenWolf state 2026-08-28 06:30:37 +00:00
structure.md docs(xce-harness-component): list harness in structure.md 2026-09-14 07:56:15 +00:00
tech.md feat(eliminate-frontend-makefile): task 3.3 - update live documentation (11 files) 2026-09-03 14:22:54 +00:00
testing.md feat(eliminate-frontend-makefile): task 3.3 - update live documentation (11 files) 2026-09-03 14:22:54 +00:00