# `mgf-hrb` — scope policy

## §1 In scope (SP-01)
- the **Python client SDK + operator CLI** for the hardware resource broker: connect over the unix
  socket, claim/release/revoke/recover leases, inspect/dump/audit, and the `hrb` CLI (scan/info/doctor/explain).

The boundary: **the Python client + CLI above the socket; the Zig broker is below it (separate repos).**

## §2 Out of scope (SP-02)
| Not here | Why | Where instead |
|---|---|---|
| The broker daemon / lease engine / capability core | Zig, below the socket | `mgf-hrb-cap/kabi/model/rt` (Zig) |
| Privileged hardware arbitration | kernel/privileged | the Zig broker + privileged helper |
| A GUI | the SDK + CLI ship here; a GUI is an app | `hrb-app` (the three-layer split) |
| Policy engine | eventual, broker-side | the broker / a policy sibling |

## §3 Scope-creep gate (SP-03)
A PR MUST answer: (1) is it Python client/CLI surface (else it's Zig-broker work, out)? (2) does it keep
the SDK UI-free (import-linter) + the socket transport bounded/deadlined? (3) consumer demand? Any "no" blocks it.

## §4 Adjacent scope (SP-04)
Adjacent: a richer CLI, an async client, a shm data-plane client. Promote on a documented demand signal.

## §5 Alternatives for out-of-scope needs (SP-05)
Broker internals → the Zig repos; GUI → `hrb-app`; privileged ops → the broker's privileged helper.

## §6 Revisiting scope (SP-06)
Revisited at every **MAJOR** boundary; re-affirms the client-only / UI-free / socket-bounded invariants.


## Boundary — verified ownership (generated)

> Generated from the fleet-wide import matrix — the **verified** ownership boundary (who is the SOLE importer of each third-party dep across the whole federation). Regenerate with `fleet_ownership_audit.py --inject`; CI-gated against code drift by `--check`. **Do not hand-edit the block below.**

<!-- BEGIN BOUNDARY (generated by mgf-standard/scripts/fleet_ownership_audit.py --inject; do not hand-edit) -->
- **Owns (sole third-party importer, fleet-verified):** — (no exclusive third-party dep; domain/seam owner)
- **Federation deps (imports):** `mgf.common`, `mgf.hrb`
<!-- END BOUNDARY -->
