git:20260602.7d2bfe5 to git:20260604.c61c112

7 added, 4 removed. Audit A to A.

---

name: openapi-graph

- description: OpenAPI front example; a graph whose step turns an OpenAPI operation into a governed tool call.

+ description: OpenAPI front example; a graph whose step turns an OpenAPI operation into a sealed tool result.

---

# OpenAPI graph

A single-step graph that drives the OpenAPI external-adapter sub-skill. The

runtime routes the graph step's `external-adapter` source through the

source-adapter registry to the external-adapter executor, which spawns the

- adapter under the governed sandbox. The adapter resolves an OpenAPI operation

- into a concrete HTTP request and the runtime seals it.

+ declared adapter process. The adapter resolves an OpenAPI operation

+ into a concrete HTTP request and the runtime seals it. Its manifest declares a

+ network sandbox intent because the adapter performs the outbound fetch.

This is the concrete proof that the core runs from other specs, not just MCP.

- Run the inline harness with `runx harness examples/openapi-graph`.

+ Run `examples/openapi-graph/run.sh` to start the local fixture endpoint and fail

+ hard unless the graph state proves the GET executed and returned the expected

+ pet payload.