chore(spec): adopt the spec sync: registry parity and ADR cross-references

Add R-DNS-04, R-DNS-05 and R-SEC-04 to the requirement mirror and tag the L0 tests that verify them. Align the R-ENV and R-UPD-02 summaries with the amended requirements. Point the VPN egress docs at ADR-0020; the drafted "ADR-0016" number went to the Cloudflare Tunnel. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-08 22:47:54 -06:00
1 parent 50c8719b12
commit 8cd5ab2e41
@@ -22,8 +22,11 @@ metadata:
  labels:
    conformance.home.k3s/R-NET-01: "true"
    conformance.home.k3s/R-NET-02: "true"
+    conformance.home.k3s/R-DNS-04: "true"
+    conformance.home.k3s/R-DNS-05: "true"
+    conformance.home.k3s/R-SEC-04: "true"
  annotations:
-    conformance.home.k3s/requirements: "R-NET-01, R-NET-02"
+    conformance.home.k3s/requirements: "R-NET-01, R-NET-02, R-DNS-04, R-DNS-05, R-SEC-04"
    conformance.home.k3s/layer: "L0"
    conformance.home.k3s/scope: "whole-repo"
    conformance.home.k3s/safety-critical: "true"
@@ -105,8 +105,9 @@ metadata:
  labels:
    conformance.home.k3s/R-DNS-02: "true"
    conformance.home.k3s/R-DNS-03: "true"
+    conformance.home.k3s/R-DNS-05: "true"
  annotations:
-    conformance.home.k3s/requirements: "R-DNS-02, R-DNS-03"
+    conformance.home.k3s/requirements: "R-DNS-02, R-DNS-03, R-DNS-05"
    conformance.home.k3s/layer: "L0"
    # WHOLE-REPO SCOPE — this invariant quantifies over every ServiceDefinition in catalog/, every
    # HTTPRoute in apps/wave-* and platform/* and runbooks/, and every external-dns-annotated
@@ -20,8 +20,9 @@ metadata:
  name: pihole-lan-names
  labels:
    conformance.home.k3s/R-DNS-03: "true"
+    conformance.home.k3s/R-DNS-04: "true"
  annotations:
-    conformance.home.k3s/requirements: "R-DNS-03"
+    conformance.home.k3s/requirements: "R-DNS-03, R-DNS-04"
    conformance.home.k3s/layer: "L0"
    conformance.home.k3s/scope: "whole-repo"
    conformance.home.k3s/safety-critical: "true"