docs(adr): accepted architecture decisions with verified APA 7th citations

[seonghobae]

Scope

Documentation-only consolidation of architecture decisions already implemented on protected main. The branch is synchronized through current main 1071176; it does not accept unmerged feature PRs as architecture evidence.

Accepted records

• ADRs 0001-0008 record the standalone workspace, optional JSON durability, external Coraza/CRS authority, RFC 5782-style zone export, fuzzing, threat-intel document ingest, localhost management boundary, and human-approved AI SOC enforcement.
• Existing ADR 0010 records adaptive contextual-orchestrator execution. ADR 0008 and the ADR index now reference that accepted contract without changing Wardnet enforcement ownership.
• PostgreSQL control-plane storage, embedded Coraza, authoritative Hickory DNS, live MISP/OpenCTI pulls, and automated LLM enforcement remain explicit follow-ups.

Evidence

• ADR index covers all 9 ADR files; all relative Markdown targets resolve.
• cargo test --locked --test adaptive_orchestrator_default passes.
• cargo test --locked --workspace passes: 118 tests.
• cargo fmt --check and git diff --check pass.
• Citations use APA 7 style and authoritative standards/project sources; the historical locator verification date remains recorded as 2026-08-25.

No product API or runtime behavior is introduced by this PR.

Summary by CodeRabbit

• 문서화
  • 독립형 Rust 게이트웨이와 재사용 가능한 핵심 로직의 운영 원칙을 문서화했습니다.
  • 선택적 JSON 상태 저장, 원자적 파일 갱신 및 손상 파일 처리 기준을 추가했습니다.
  • OWASP CRS 기반 WAF 감사, DNSBL zone 내보내기, 위협 인텔리전스 수집 방식을 정의했습니다.
  • 기본 로컬호스트 바인딩, 원격 관리 인증, 외부 TLS 요구사항을 명시했습니다.
  • AI SOC 지원은 자문으로 제한하고 enforcement에는 운영자 승인을 요구하도록 정리했습니다.
  • 퍼징·테스트 정책과 ADR 작성 및 관리 기준을 추가했습니다.

[coderabbitai]

Warning

Review limit reached

Next included review available in 9 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7b91ca2e-97e8-4757-a2b9-9cd1e599bc1b

📥 Commits

Reviewing files that changed from the base of the PR and between 95f2719 and 43369a8.

📒 Files selected for processing (4)

• docs/adr/0004-rfc-5782-style-dnsbl-zone-export.md
• docs/adr/0005-coverage-guided-fuzzing-untrusted-inputs.md
• docs/adr/0006-admin-token-threat-intel-document-ingest.md
• docs/adr/0008-ai-soc-assist-advisory-human-enforcement.md

📝 Walkthrough

Walkthrough

ADR 0001–0008과 ADR 디렉터리 README를 추가했다. standalone Rust 게이트웨이, JSON 상태 저장, WAF·DNSBL 정책, 위협 인텔리전스 수집, AI SOC 지원, 퍼징 및 원격 관리 기준을 문서화했다.

Changes

ADR 아키텍처 결정

Layer / File(s)	Summary
Standalone 구조와 상태 저장 docs/adr/0001-standalone-rust-gateway-workspace-core.md, docs/adr/0002-optional-json-state-standalone-durability.md, docs/adr/README.md	Cargo workspace 기반 standalone 게이트웨이, 선택적 연동, 엔드포인트 범위, 선택적 JSON 상태 저장 및 ADR 관리 규칙을 정의했다.
WAF, DNSBL 및 원격 관리 docs/adr/0003-owasp-crs-coraza-waf-authority.md, docs/adr/0004-rfc-5782-style-dnsbl-zone-export.md, docs/adr/0007-localhost-default-bind-remote-management.md	OWASP CRS·Coraza 감사 수집, RFC 5782 스타일 DNSBL zone 출력, localhost 기본 바인드 및 원격 관리 인증 정책을 정의했다.
위협 인텔리전스와 AI SOC 지원 docs/adr/0006-admin-token-threat-intel-document-ingest.md, docs/adr/0008-ai-soc-assist-advisory-human-enforcement.md	관리자 인증 기반 STIX·MISP·TAXII·OpenCTI 문서 수집과 사람 승인 기반 AI SOC 지원 범위를 정의했다.
신뢰할 수 없는 입력의 퍼징 docs/adr/0005-coverage-guided-fuzzing-untrusted-inputs.md	게이트웨이 요청, JSON 상태, 관리자 토큰 및 DNSBL 출력에 대한 4개 nightly fuzz 대상과 stable proptest 불변식을 정의했다.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: 🔵 Low · up to 95f27

This documentation-only PR does not change product APIs or runtime behavior, but four ADR statements need clarification to avoid recording incorrect or ambiguous contracts around fuzzing scope, DNS defaults, threat-intelligence fetching, and orchestration support. The bounded risk is operator or developer misunderstanding, so the PR is mergeable with explicit owner awareness and follow-up.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	PR 제목은 ADR 0001–0008과 README에 기록된 승인된 아키텍처 결정 및 APA 7 인용 정비라는 주요 변경을 정확히 요약합니다.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (9 skipped: 9 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch cursor/docs-adr-accepted-decisions-289d

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}