f020178c15
A1 install path → go install (D-115) A2 engine enum → reuse kyverno, distinguish by ruleId KJ_ prefix (D-116) A3 checkov/wiz signatures unchanged; meta-policies consume merged PCR list (D-117) A4 NOVA_TAG_NAMING kept + kyverno-json mirror + tagging-rules-agree meta-policy (D-118) A5 critical-override kept as defense-in-depth behind declarative meta-policy (D-119) A6 kyverno-json is deterministic not AI; is_configured guard ensures platform functions without it (D-120) ---ci--- project: acdl phase: 0 milestone: v1.25 status: clarify ---/ci---