freeze initial panda-rpki staging

migration/allowlist.toml

@@ -0,0 +1,77 @@
+schema_version = 1
+source_commit = "74cbebbd3334ac0063761c1a97a88ee000cc2a57"
+source_history_policy = "do-not-copy"
+license_status = "pending"
+verification_only = "defer-to-follow-up-backlog"
+
+[[entry]]
+source = "src/data_model/"
+destination = "crates/panda-rpki-validator/src/data_model/"
+classification = "replace"
+reason = "RPKI object and resource model copied without private repository coupling"
+
+[[entry]]
+source = "src/fetch/"
+destination = "crates/panda-rpki-validator/src/fetch/"
+classification = "replace"
+reason = "RRDP/rsync transport and replay input"
+
+[[entry]]
+source = "src/sync/"
+destination = "crates/panda-rpki-validator/src/sync/"
+classification = "replace"
+reason = "snapshot/delta synchronization orchestration"
+
+[[entry]]
+source = "src/validation/"
+destination = "crates/panda-rpki-validator/src/validation/"
+classification = "replace"
+reason = "RPKI path and signed-object validation"
+
+[[entry]]
+source = "src/parallel/"
+destination = "crates/panda-rpki-validator/src/parallel/"
+classification = "replace"
+reason = "sync and validation scheduling"
+
+[[entry]]
+source = "src/storage.rs and src/storage/"
+destination = "crates/panda-rpki-validator/src/storage.rs and crates/panda-rpki-validator/src/storage/"
+classification = "replace"
+reason = "state, repo-bytes and cache backend"
+
+[[entry]]
+source = "src/tools/rpki_daemon.rs and scripts/soak/run_soak.sh"
+destination = "crates/panda-rpki-validator/src/daemon.rs and scripts/runtime/run_validator.sh"
+classification = "replace"
+reason = "preserve normal run lifecycle and artifacts without old daemon/private paths"
+
+[[entry]]
+source = "docker/ours-rp-runtime.Dockerfile and scripts/docker/build_docker_runtime_image.sh"
+destination = "docker/validator-runtime.Dockerfile and scripts/docker/build_image.sh"
+classification = "replace"
+reason = "retain complete runtime/multi-arch delivery with new public boundary"
+
+[[entry]]
+source = "deploy/docker-installer/"
+destination = "(none in this component)"
+classification = "defer-private"
+reason = "multi-service installer, monitor and upgrade control plane"
+
+[[entry]]
+source = "src/verification_only.rs and verification-only scripts"
+destination = "(none in this component)"
+classification = "defer-private"
+reason = "explicitly deferred by product decision"
+
+[[entry]]
+source = "metrics, Prometheus/Grafana, Explorer, query, RTR, remote and experiment control"
+destination = "(none in this component)"
+classification = "drop"
+reason = "not part of the validator runtime closure"
+
+[[entry]]
+source = "(new) tests/compat/verify_run_abi.sh and tests/compat/compare_runs.py"
+destination = "tests/compat/"
+classification = "replace"
+reason = "component-side normal-run ABI and original/component canonical comparison harness"