hub-core/workplans/HUB-WP-0009-extension-conformance-gaps.md
repo-manager b2f430ffb1
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / pytest-smoke (push) Failing after 1s
repo.work.assign_missing_identifiers
source: repo-manager
reason: deterministic projection registration

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a053ff-1d6f-7fe2-ac1c-a6eb40a42a0c
2026-08-31 21:30:17 +02:00

2.5 KiB

id type title domain repo status owner topic_slug created updated origin origin_ref related state_hub_workstream_id
HUB-WP-0009 workplan Complete the hub-extension conformance profile infotech hub-core proposed codex custodian 2026-08-31 2026-08-31 residual OPS-WP-0003
HUB-WP-0004
HUB-WP-0005
OPS-WP-0003
0d6e94f3-fd15-5f57-af41-60f0b862da5e

Complete the hub-extension conformance profile

Goal

Turn the deliberately open Tier-2 checks in helixforge.hub-extension/0.1.0 into executable framework evidence without making an extension repository implement hub-core policy. OPS-WP-0003 passed the current C1/C3/C4/C5/C6/C8 profile; this residual owns C2, C7, C9, and C10.

Add registry resolution evidence

id: HUB-WP-0009-T01
status: todo
priority: medium
state_hub_task_id: "0702bd43-146e-5f5d-9bf3-81ae4a367afb"

Implement C2 against the public registry/discovery contract, including missing, ambiguous, and stale registrations. Keep repository and capability authority in their owner systems and make registry audit history queryable.

Enforce raw-port configuration policy

id: HUB-WP-0009-T02
status: todo
priority: medium
state_hub_task_id: "427a663c-fbd5-55c8-9889-6946a5072932"

Implement C7 so production configuration cannot bypass named ports or silently enable overlapping authorities. Cover policy allow, deny, and unavailable behavior without embedding credentials in fixtures.

Prove dependency-aware readiness

id: HUB-WP-0009-T03
status: todo
priority: high
state_hub_task_id: "41476950-bb3f-5fc3-8d44-bea3d851e5f9"

Implement C9 for every enabled port and compatibility group. Readiness must fail when its required database, policy, registry, or owner projection is unavailable while unrelated disabled groups remain non-blocking.

Add contract-version negotiation

id: HUB-WP-0009-T04
status: todo
priority: medium
state_hub_task_id: "90849a2d-c3ac-5fca-b86f-88cef2803957"

Implement C10 using descriptor min/max versions and explicit incompatibility responses. Include the 0.1 compatibility adapter and ensure future versions do not silently accept a contract they cannot interpret. Record tenant-isolation coverage separately if it still exceeds this profile.

Acceptance

  • C2, C7, C9, and C10 are automated and fail closed
  • The conformance report distinguishes unsupported from pass/fail
  • Ops Hub's canonical owner package passes the expanded profile
  • Any tenant-isolation residual has its own live owner record