coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare scoped GitOps adoption and tested immutable image releases
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 7s
Details
Build and Publish Container Image / build-and-push (push) Successful in 2m18s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3
This commit is contained in:
tegwick 2026-09-27 13:50:16 +02:00
parent 5d5ee84d70
commit c12a8fbcfb
12 changed files with 2585 additions and 731 deletions
Download patch file Download diff file Expand all files Collapse all files

21
workplans/ACTIVITY-WP-0041-gitops-adoption.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Remove recurring deployment exceptions through governed GitOps adoption"
domain: infotech
repo: activity-core
status: ready
status: active
owner: codex
topic_slug: activity-core
created: "2026-09-27"
@ -22,7 +22,7 @@ e5dd02cb-b5b2-45c8-a600-748ea2ffd31b and does not change estate policy.
```task
id: ACTIVITY-WP-0041-T01
status: todo
status: progress
priority: high
state_hub_task_id: "fadce2e0-67c8-5dab-98cc-3a08d466a39f"
```
@ -44,7 +44,7 @@ server-dry-run the proposed managed set; no unintended spec change or pruning.
```task
id: ACTIVITY-WP-0041-T02
status: wait
status: progress
priority: high
state_hub_task_id: "af09865d-8cc9-5571-9c34-20ae679a1e4e"
```
@ -94,3 +94,18 @@ kubectl apply or a fresh founder exception. Failure recovers through the declare
rollback path. Human involvement is limited to the agreed monthly policy review.
GLAS-WP-0012/HFACT-WP-0001 readiness remains a separate prerequisite for automated
pattern editing; completing this plan does not imply that executor is admitted.
## Implementation authorization and scope — 2026-09-27
The founder explicitly requested implementation of these actionable tasks. This
supersedes the earlier wait for adoption authorization; it does not waive the
24-hour healthy observation period or invent an unattended release credential.
RPF-WP-0048 owns the scoped AppProject/child adoption. Nine runtime resources are
reconciled to live state with an empty client diff and successful server dry-run;
Jobs/custody/infrastructure are excluded. See docs/gitops-release.md.
Image CI now tests before publishing full-commit tags/digests with pinned build
inputs. Local container tests passed. Registry publication/readback must still be
observed. The image-only promotion validator has negative fixtures for widened
authority, stale/missing evidence, non-digest references and incomplete soak.
It is not a credential issuer or proof of an admitted unattended executor.