feat(dns): capture registrar NS delegation in the portfolio (Authority + type-namespaced import IDs)#839

Merged

intel352 merged 11 commits into

mainfrom

feat/dns-delegation-portfolio

Jun 2, 2026

Commits on Jun 2, 2026

docs(dns): design + ADR 0047 — delegation in portfolio via Snapshot.Authority

intel352
and
claude
committed
docs(dns): design rev2 — fold adversarial findings (registrar+live NS, read model, fail-gate)

intel352
and
claude
committed
docs(dns): clarify I-1 wiring — Import dual-fetch (registrar+live), Read untouched

intel352
and
claude
committed
docs(dns): design rev3 — fold I-NEW-3 (key shape), I-NEW-4 (portfolio ownership), T-1 (test)

intel352
and
claude
committed
docs(dns): implementation plan — delegation portfolio (3 PRs, 6 tasks)

intel352
and
claude
committed
docs(dns): plan rev2 — fix C-1 (type-namespace import IDs) + C-2 (--format portfolio) + I-1/2/3

intel352
and
claude
committed
docs(dns): plan rev3 — derive snap.ID (no slash), drop unused domain_id, clarify o.Type advisory

intel352
and
claude
committed
chore: lock scope for dns-delegation-portfolio (alignment passed)
intel352
committed
feat(dns): merge infra.dns_delegation into Snapshot.Authority

intel352
and
claude
committed
fix(wfctl): type-namespace import-all state IDs to avoid cross-type overwrite

intel352
and
claude
committed
feat(dns): sanitize allow-lists Snapshot.Authority keys

intel352
and
claude
committed