build: adopt staged work-record generation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
This commit is contained in:
tegwick 2026-10-19 11:33:57 +02:00
parent 19b65d5b31
commit c89364d262
5 changed files with 32 additions and 3 deletions

View file

@ -0,0 +1 @@
{"version":1,"repo_slug":"policy-nexus"}

View file

@ -0,0 +1,8 @@
# Explicit opt-in recipe; no environment files or external make includes.
CUSTODIAN_SOURCE ?= /home/worsch/the-custodian
GENERATED_REPO_SLUG ?= policy-nexus
.PHONY: generated-work-records generated-work-records-check
generated-work-records:
python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_SLUG)"
generated-work-records-check:
python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_SLUG)" --check

View file

@ -36,3 +36,10 @@ image-build: release-check
--target local-artifact \ --target local-artifact \
--build-arg VCS_REVISION=$$(git rev-parse HEAD) \ --build-arg VCS_REVISION=$$(git rev-parse HEAD) \
--tag $(IMAGE_REF) . --tag $(IMAGE_REF) .
# CUST-WP-0079-T05: staged-source generation; hook uses the isolated recipe.
.PHONY: generated-work-records generated-work-records-check
generated-work-records:
$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records
generated-work-records-check:
$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records-check

View file

@ -41,3 +41,16 @@ The build-mode guardrail implementation is available as source; public release
acceptance remains tracked in `PNEX-WP-0006`. That record requires founder batch acceptance remains tracked in `PNEX-WP-0006`. That record requires founder batch
publication disposition and resolution of the source inventory gate. Source publication disposition and resolution of the source inventory gate. Source
availability and passing local checks do not establish live publication. availability and passing local checks do not establish live publication.
## Staged work-record generator adoption
The tracked `.generated-work-records.json` opts this repository into the shared
pre-commit generation lane. `make generated-work-records` uses the isolated
`.generated-work-records.mk` recipe and the Custodian adapter to render from
staged Markdown with the existing State Hub renderer. `make
generated-work-records-check` verifies the staged result without writes.
Unstaged source edits are preserved; unstaged generated-file edits and unresolved
conflicts stop the commit. The existing generated-only guard and secret scan
remain in place. This adoption covers WORK-RECORDS.md only; other owner indexes
retain their own generators. It makes no schedule or public-release change.

View file

@ -12,7 +12,7 @@
| workplan | PNEX-WP-0003 | finished | — | workplans/PNEX-WP-0003-adr-review-cleanup-publish.md | | workplan | PNEX-WP-0003 | finished | — | workplans/PNEX-WP-0003-adr-review-cleanup-publish.md |
| workplan | PNEX-WP-0004 | finished | — | workplans/PNEX-WP-0004-fleet-standards-publication-and-ci-source-auth.md | | workplan | PNEX-WP-0004 | finished | — | workplans/PNEX-WP-0004-fleet-standards-publication-and-ci-source-auth.md |
| workplan | PNEX-WP-0005 | finished | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md | | workplan | PNEX-WP-0005 | finished | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md |
| workplan | PNEX-WP-0006 | ready | — | workplans/PNEX-WP-0006-build-mode-change-authorization.md | | workplan | PNEX-WP-0006 | blocked | — | workplans/PNEX-WP-0006-build-mode-change-authorization.md |
| workplan | POLICY-NEXUS-WP-0001 | finished | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md | | workplan | POLICY-NEXUS-WP-0001 | finished | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md |
| task | PNEX-WP-0002-T01 | done | — | workplans/PNEX-WP-0002-arc42-architecture-collection.md | | task | PNEX-WP-0002-T01 | done | — | workplans/PNEX-WP-0002-arc42-architecture-collection.md |
| task | PNEX-WP-0002-T02 | done | — | workplans/PNEX-WP-0002-arc42-architecture-collection.md | | task | PNEX-WP-0002-T02 | done | — | workplans/PNEX-WP-0002-arc42-architecture-collection.md |
@ -36,8 +36,8 @@
| task | PNEX-WP-0005-T01 | done | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md | | task | PNEX-WP-0005-T01 | done | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md |
| task | PNEX-WP-0005-T02 | done | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md | | task | PNEX-WP-0005-T02 | done | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md |
| task | PNEX-WP-0005-T03 | done | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md | | task | PNEX-WP-0005-T03 | done | — | workplans/PNEX-WP-0005-security-layer-v08-publication.md |
| task | PNEX-WP-0006-T01 | todo | — | workplans/PNEX-WP-0006-build-mode-change-authorization.md | | task | PNEX-WP-0006-T01 | wait | — | workplans/PNEX-WP-0006-build-mode-change-authorization.md |
| task | PNEX-WP-0006-T02 | todo | — | workplans/PNEX-WP-0006-build-mode-change-authorization.md | | task | PNEX-WP-0006-T02 | wait | — | workplans/PNEX-WP-0006-build-mode-change-authorization.md |
| task | POLICY-NEXUS-WP-0001-T01 | done | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md | | task | POLICY-NEXUS-WP-0001-T01 | done | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md |
| task | POLICY-NEXUS-WP-0001-T02 | done | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md | | task | POLICY-NEXUS-WP-0001-T02 | done | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md |
| task | POLICY-NEXUS-WP-0001-T03 | done | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md | | task | POLICY-NEXUS-WP-0001-T03 | done | — | workplans/POLICY-NEXUS-WP-0001-permanent-publication-surface.md |