138 commits

Author	SHA1	Message	Date
tegwick	e7f615be38	docs: realign WP-0029 and boundaries with canon and nexus owners ... Review ACTIVITY-WP-0029 against info-tech-canon, policy-nexus, and State Hub retirement: activity-core keeps schedule and ops_run; repo-manager owns consistency; hub-core owns progress ports. Mark WP-0026 finished. Refresh INTENT, SCOPE, and repo-boundary.	2026-08-18 10:27:29 +02:00
tegwick	3a8fe6585a	chore(consistency): record ACTIVITY-WP-0030 hub IDs ... Write back the workplan and task UUIDs from fix-consistency so the daily SBOM catch-up plan stays indexed in WORK-RECORDS.md.	2026-08-18 09:52:20 +02:00
tegwick	c415e3e0bd	docs(ACTIVITY-WP-0030): propose daily bounded SBOM catch-up ... Child of CUST-WP-0062. Replace the weekly stale-repo task flood with a daily sbom-nexus catch-up that updates N oldest SBOMs (default 3).	2026-08-18 09:49:04 +02:00
tegwick	5c606f791a	chore(consistency): record ACTIVITY-WP-0029 hub IDs ... Write back the workplan and task UUIDs from fix-consistency so the proposed hub-port alignment plan stays indexed in WORK-RECORDS.md.	2026-08-18 09:44:45 +02:00
tegwick	05424965d8	docs(ACTIVITY-WP-0029): propose hub port and schedule alignment ... Parent prj-state-hub-retirement SHR-WP-0001 stream S5.	2026-08-09 21:22:55 +02:00
tegwick	9f4993d9e7	docs: mark activity CLI v1 implemented (WP-0028)	2026-08-06 13:07:38 +02:00
tegwick	01ba1865ce	feat(activity): repo-scoped automation review CLI (WP-0028) ... Ship the activity console script for consumer-repo morning review: list, status, runs, deliverables, inbox, checkpoint, and ack. Offline-first with git + local defs; enriches from ops API and State Hub. Multi-source trust matrix never reports did-not-run when git has the artefact. Adds target_repo filter on GET /ops/automations.	2026-08-06 13:05:46 +02:00
tegwick	1789c535c5	docs+workplan: activity CLI for repo-scoped automation review ... Rigorous review of the review-CLI concept; rename to activity, lock offline- first multi-source design, and open ACTIVITY-WP-0028 for implementation.	2026-08-06 11:02:57 +02:00
tegwick	4e605a6839	fix(edge): retry+degrade side-effect POSTs; finish ACTIVITY-WP-0027 ... Consistency sweep and recently-on-scope retry transient 502/503/504 then return a degraded context snapshot instead of thrashing Temporal. Document edge-relay resilience. Retire Binky dual-clock host timers after claim-loop smoke.	2026-08-05 17:53:00 +02:00
tegwick	0161b470d8	workplan: ACTIVITY-WP-0027 progress — T01–T05,T08 done ... llm-connect host ClusterIP path live; ops UI artefact links deployed. T06 edge-relay soft-fail and T07 Binky timer retirement remain.	2026-08-05 17:26:04 +02:00
tegwick	d22b57f087	workplan: ACTIVITY-WP-0027 llm-connect access + run artefacts in ops UI ... Capture post-FI-cutover reliability caveats: durable host llm-connect for rein-aharness, and operator review of deliverables from activity.coulomb.social without SSH.	2026-08-05 16:00:55 +02:00
tegwick	792d0b9f21	Mark ACTIVITY-WP-0026-T07 done after railiance ops_run smoke. ... Migration 0007 applied; FI trigger produced ops_run; claim-loop completed succeeded; claim-loop user service running on railiance01.	2026-08-03 21:24:48 +02:00
tegwick	6ce77a72bb	Document ACTIVITY-WP-0026-T07 railiance deploy checklist. ... Add deploy-ops-run-queue-railiance.md (image, migrate 0007, smoke, dual-path residual), wire OPS_RUN_* into runtime ConfigMap, and cross-link runbook/README. T07 stays open until prod smoke is executed.	2026-08-03 19:30:00 +02:00
tegwick	15eb3a2066	Implement ACTIVITY-WP-0026 ops_run claim queue (T01–T06). ... Add durable claimable ops_runs table, emit dual-write on TaskSpec, REST claim/lease/complete/fail API, ops status visibility, and consumer docs aligned with ACT-ADR-005. T07 railiance rollout remains deploy-side.	2026-08-03 19:22:50 +02:00
tegwick	a145cc4027	chore(consistency): sync workplan hub IDs [auto follow-up]	2026-08-03 19:16:50 +02:00
tegwick	d1e24348c3	Accept ACT-ADR-005 and open ACTIVITY-WP-0026 for ops_run claim queue. ... Split ops runs (claimable DB) from development work records (repo + State Hub), ban default Forgejo queueing for automation, and stack WP-0026 with rein-aharness and issue-core follow-ups. Forgejo-only forge language; no Gitea product path.	2026-08-03 18:51:37 +02:00
tegwick	fee89c4ea1	Finish ACTIVITY-WP-0025 after NK-WP-0021 group allowlist. ... Close T06: LLDAP activity-core-operators and Authelia domain rules are live in net-kingdom. Mark the workplan finished, update G10/runbook/SSO design with membership pointers, and clear residual handoff notes.	2026-07-22 17:47:57 +02:00
tegwick	652e799969	Link WP-0025 T06 residual to net-kingdom intakes NK-IN-0001/0002. ... Point residual and ops-sso-access design at the file-backed work records in net-kingdom rather than informal coordination notes.	2026-07-22 10:47:25 +02:00
tegwick	91353df7d0	Finish WP-0025 SSO cutover except group allowlist residual. ... Mark T03–T05 and T07–T08 done after live Authelia/TLS verification, prefer SSO principal in ops UI copy and audits, and document break-glass port-forward. Leave T06 waiting on net-kingdom LLDAP/Authelia group rules.	2026-07-22 10:23:36 +02:00
tegwick	54431db583	Use temporal.coulomb.social for Temporal UI SSO host ... Prefer clean short hostname temporal.coulomb.social instead of activity-temporal.coulomb.social for Ingress, CORS, and ops UI links.	2026-07-22 01:17:52 +02:00
tegwick	f885697e96	Activate ACTIVITY-WP-0025: Authelia SSO ingress for ops and Temporal UI ... Mark workplan active. Add Traefik ForwardAuth middleware and Ingress manifests for activity.coulomb.social and activity-temporal.coulomb.social. Prefer Authelia SSO identity for ops mutations; document DNS gate and fleet pattern (docs/ops-sso-access.md).	2026-07-22 00:47:29 +02:00
tegwick	7e71c0c837	chore: hub IDs for ACTIVITY-WP-0025 after fix-consistency	2026-07-22 00:33:34 +02:00
tegwick	7761acf86a	Link Temporal UI from ops console; propose SSO access WP-0025 ... Add nav/deep link to Temporal Web UI (configurable URL, default 127.0.0.1:8080 for port-forward). Document dual port-forward and draft ACTIVITY-WP-0025 for Keycloak SSO ingress without port-forward.	2026-07-22 00:30:17 +02:00
tegwick	71027f0a67	Implement ACTIVITY-WP-0024 operator automation console ... Add /ops REST inventory, status, runs, and fail-closed operator-token mutations (trigger, enable/disable, pause/unpause) with audit trail. Ship thin HTML UI at /ops/ui, runbook/k8s access docs, and contract tests.	2026-07-21 23:51:39 +02:00
tegwick	81d350de71	chore: hub IDs for ACTIVITY-WP-0024 after fix-consistency ... Write back state_hub_workstream_id and task ids from C-06 registration.	2026-07-21 23:44:10 +02:00
tegwick	86bb550c7a	Add ACTIVITY-WP-0024 operator automation console workplan ... Propose API-first ops console: status/inventory/runs REST, fail-closed operator token, Run now + pause controls, then thin UI. No cron edit or public Ingress in MVP.	2026-07-21 23:42:15 +02:00
tegwick	21d46927f6	Finish ACTIVITY-WP-0023: ESO FORGEJO_TOKEN and gap dispositions ... Ship ExternalSecret actcore-forgejo-admin and multi-policy ESO token bootstrap so weekly prune credentials refresh without bootstrap inject. Disposition issue-core path A and MarkiTect ROS as external owners; close workplan finished.	2026-07-21 23:19:10 +02:00
tegwick	4f5399df84	Implement ACTIVITY-WP-0022/0023: safe sink default and gap closures ... Default ISSUE_SINK_TYPE to state-hub (no silent Forgejo issues), hard-fail prune apply without live-images protection, refresh-live-images script, disable TaskExecutor stub by default, and document consumer/sink contracts.	2026-07-21 21:40:08 +02:00
tegwick	5c7a90ce7c	chore: write back hub IDs for ACTIVITY-WP-0023	2026-07-21 21:20:52 +02:00
tegwick	e73575dcd6	Refresh SCOPE.md intent gap analysis; add ACTIVITY-WP-0023 ... Document production posture after WP-0020/0021, list INTENT↔practice gaps G1–G10, and open a workplan for gap closure plus operational follow-ups.	2026-07-21 21:19:47 +02:00
tegwick	a35997878b	Finish ACTIVITY-WP-0020: enable weekly Forgejo package prune ... First apply deleted 38 stale versions; enable schedule with live-images protection file for worker pods without kubectl; restore path for live state-hub tags after an unprotected worker apply.	2026-07-21 19:20:42 +02:00
tegwick	bd1c993405	Finish ACTIVITY-WP-0021: state-hub sink default + deploy verification ... Record railiance01 one-shot evidence (Binky/SBOM/triage COMPLETED), keep ISSUE_SINK_TYPE=state-hub until Forgejo PAT rotation, and re-read sink env at factory call time.	2026-07-21 07:33:03 +02:00
tegwick	60d344e465	workplan: propose ACTIVITY-WP-0022 IssueSink no-default-Forgejo policy ... Filed from issue-core ISSUE-WP-0004-T05 / CUST-WP-0060 item 6. Default IssueSink must not silently create Forgejo issues for internal findings. Registered in state-hub via fix-consistency (UUIDs written back).	2026-07-21 04:22:18 +02:00
tegwick	98e8aa83bd	Implement ACTIVITY-WP-0021 production automation reliability ... Root-cause IssueSink 503 (dead Forgejo PAT on issue-core), add state-hub task sink path B, log runs before emit, harden sync_schedules, deterministic SBOM/triage reports, DB probe thrash fix, and prod automation-status helper.	2026-07-21 04:21:55 +02:00
tegwick	1209ff6973	chore: write back hub IDs for ACTIVITY-WP-0021 and WORK-RECORDS index ... fix-consistency C-06 registered the workplan and nine tasks; C-33 regenerated the work-record index.	2026-07-21 04:11:07 +02:00
tegwick	5afd2f347d	Add ACTIVITY-WP-0021 production automation reliability workplan ... Captures the Sunday–Monday railiance01 schedule review: IssueSink 503s, Binky cutover failures, edge-relay/ROS issues, silent daily triage, sync_schedules bug, and DB restart thrash — with tasks to fix and verify.	2026-07-21 04:09:57 +02:00
tegwick	01f42993ef	ACTIVITY-WP-0020-T07 done: multi-cluster dry-run clean, evidence recorded ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 15:25:58 +02:00
tegwick	aed1437608	ACTIVITY-WP-0020-T07: dry-run via warden lane instead of PAT file drop ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 14:27:24 +02:00
tegwick	8e74932db5	ACTIVITY-WP-0020-T07: multi-cluster protection mechanism + cluster census ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 13:54:59 +02:00
tegwick	fbce4ea94c	ACTIVITY-WP-0020 T07: live-tag protection implemented (partial — multi-cluster) ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 14:45:43 +02:00
tegwick	4ceadfef0e	chore(consistency): write state-hub id into ACTIVITY-WP-0020-T07 [auto] ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 02:51:22 +02:00
tegwick	8ae85742fb	ACTIVITY-WP-0020: dry-run clean after tool fix; add T07 protection gate ... Dry-run now works (tool bug fixed in railiance-platform@6f7ca31): 29 candidates, 0 errors. Enable/apply blocked on new T07 — protection scan misses activity-core & state-hub live tags; extend to source protected tags from live cluster before apply. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 02:50:21 +02:00
tegwick	e4d6222d22	fix(context): use repo-scoping /scope/context endpoint ... Cherry-picked from stale branch codex/wp-0012-scope-context (9709692). main was still calling the old /repos/{slug}/scope path; repo-scoping now serves GET /repos/{slug}/scope/context (web_api/app.py:1449). Includes the resolver test and consistent workplan-doc updates. Test: 2 passed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-13 23:19:50 +02:00
tegwick	5b6d9f4e95	feat(automation): weekly Forgejo package prune shell resolver (WP-0020) ... Add forgejo_package_prune query, weekly activity-definition (disabled), State Hub evidence sink support for shell sources, and runbook notes.	2026-07-12 11:35:04 +02:00
tegwick	a853cd3118	workplan: ACTIVITY-WP-0020 weekly Forgejo package prune (retain 3) ... Policy-driven OCI/PyPI/npm/generic pruning via activity-core shell resolver and railiance-platform forgejo-package-prune command.	2026-07-12 10:53:05 +02:00
tegwick	92a5408156	docs(WP-0015): record railiance01 beachhead deploy evidence ... Note Forgejo image main-1cf949b live on cluster, relay health/cache warm-up, and bridge retirement. Overnight triage proof remains the open stabilization check.	2026-07-09 01:34:04 +02:00
tegwick	cdbe4de2bf	feat(railiance): adopt state-hub edge relay beachhead for WP-0015 ... Deploy actcore-statehub-edge-relay, point STATE_HUB_URL at it, retire the bespoke state-hub bridge, and accept edge-relay queued write receipts in report and ops evidence sinks.	2026-07-09 01:04:27 +02:00
tegwick	f171bb037a	Add weekly coding retro dry-run scheduler script ... Wire ACTIVITY-WP-0008 dry-run helper and update retro activity definition, runbook, and workplan notes.	2026-07-09 00:29:25 +02:00
tegwick	bad91099e8	CUST-WP-0055 T07: add archive workplan terminology grandfather note	2026-07-08 20:26:34 +02:00
tegwick	1a2e0770c1	docs(workplan): align ACTIVITY-WP-0009 closeout with ESO deployment ... Update T02 and closeout notes to reflect ExternalSecret-managed ISSUE_CORE_API_KEY rather than a manual secret patch step.	2026-07-08 00:29:08 +02:00