klieo-ops

Operational layer above klieo-core. Ships the primitives that turn a typed agent into a regulator-ready production deployment: supervisor (lifecycle + kill-switch), governor (capacity + rate-limit), gates (policy-as-code at the pre-effect boundary), escalation, worklog, four-eyes approval, and handoff.

v0.2 shipped supervisor + governor + gates plus cross-cutting (Redactor, Clock, TenantResolver, OpsRuntime builder, governed-egress helper, evidence verifier subset). v0.3 (Phase B) adds escalation, worklog, four-eyes, and handoff.

Out of scope

• Agent decision quality / bias / accuracy (EU AI Act Art 10, 15 — user-owned)
• Approver IdP vendor adapters (klieo-idp-okta, etc.) — trait surface ships; vendor adapter crates are operator-owned.
• HSM-backed signing vendor adapters — same.
• WORM physical storage (backend-impl choice)
• Trusted-time anchor (system clock default; RFC 3161 adapter optional)
• Cedar / OPA policy authoring (the bundle source is operator-owned)
• UI for any review flow (reference channel adapters only)
• GDPR Art 17 crypto-shred wrapper for EpisodicMemory (adapter-author responsibility per spec § 1.9; the Crypter port ships, the wrapper does not)
• BaFin MaRisk AT 9 outsourcing / TÜV conformance certification (OQ-6)
• PCI-DSS
• Multi-deployment Merkle prefix proof transfer
• Mid-step crash auto-resume + idempotency contract for effectful tools (OQ-1)
• Multi-region replication of episodic chain (OQ-2)

See the mdBook chapter for the full design rationale: docs/book/src/ops/intro.md.

License

MIT