Architecture Decision Records

• ADR 0000 · Record architecture decisions
• ADR 0001 · kube-rs stack + CalibanTask CRD API
• ADR 0002 · Reconcile CalibanTask → agent-sandbox Sandbox (+ per-task SA & NetworkPolicy)
• ADR 0003 · The caliband launch contract (daemon args + workspace init)
• ADR 0004 · Workspace CRD + CalibanTask resolve-and-pin
• ADR 0005 · Operator owns infrastructure, prospero owns agent lifecycle, caliban owns its contract
• ADR 0006 · Unattended permission posture is authorized by Workspace policy