[NaveCohenMonday]

Task-ID: 33.03.33

Summary

Assistant-only staging must start its trusted identity bootstrap without selecting it from a static image list. Add an operator-owned sidecar command that applies independently of the workload image; its default remains disabled.

Related Issue

Directly requested by Nave for Story 33.03. The Globster fork has issues disabled; Workspace Task 33.03.33 records the authorized user story and acceptance criteria. No upstream issue or configuration change is required.

Changes

• Add optional process_bootstrap / Helm supervisor.processBootstrap; reject combined topology, simultaneous legacy-map configuration and invalid commands.
• Prefer the configured operator command without consulting the workload image. Tenant workload input cannot supply the command.
• Preserve RuntimeDefault seccomp, disabled privilege escalation and the existing temporary CHOWN/SETUID/SETGID/SETPCAP startup grant. Trusted admitted bootstrap code must discard all capabilities before workload execution.
• Update gateway configuration, compute architecture and the cluster troubleshooting skill. Existing deployments retain their disabled default and legacy behavior.

Testing

• mise run pre-commit passes.
• Full mise run --skip-tools ci passes with a clean Go lint cache (the shared cache initially referenced another checkout).
• All 224 Kubernetes driver tests pass.
• All 64 Helm gateway configuration tests pass; rendered operator configuration parses as TOML and contains no bootstrap image map.
• Managed Kind startup through workload-gateway with the released v0.2.1 ARM assistant: 1 GiB Bound PVC, one Pod/two containers, operator bootstrap, runtime UID 1000 and worker UID 1001, zero capabilities, no-new-privileges and seccomp enforced. Live TOML contains no bootstrap image map. This startup fixture uses nonfunctional local-only credentials and does not claim an LLM turn.
• Local gateway candidate uses the current cross-compiled binary with a cached compatible assistant base after the canonical distroless download returned 503; maintained publication retains its canonical Dockerfile/default base.

Checklist

• Conventional commit and DCO signoff.
• Architecture and public configuration documentation updated.
• Default off; production adoption is outside this change.