From 218df303e8f697bc6ff90de49b45c3fd9003f94b Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 8 Oct 2026 18:59:02 +0200 Subject: [PATCH] ORGREF-WP-0002-T01 done: visibility policy fully decided Packages private; the founder holds T01 and T08, an agent drives the rest. Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012 --- decisions/forge-visibility-policy.md | 12 ++++++------ ...ORGREF-WP-0002-forge-closure-netkingdom-access.md | 6 ++---- 2 files changed, 8 insertions(+), 10 deletions(-) diff --git a/decisions/forge-visibility-policy.md b/decisions/forge-visibility-policy.md index 80395e0..9216c00 100644 --- a/decisions/forge-visibility-policy.md +++ b/decisions/forge-visibility-policy.md @@ -1,7 +1,6 @@ # Forge visibility policy (ORGREF-WP-0002-T01) -Status: **partly decided** (founder, 2026-10-08). Points 1, 2, 4, 5 and 6 are -decided. Point 3 and the plan's owner are open. +Status: **decided** (founder, 2026-10-08). All six points and the plan's owner. ## 1. The forge is private, with no anonymous access — decided @@ -55,9 +54,9 @@ repository. The baseline is the Unix home directory's public folder: component). This plan only needs the forge to be closable without breaking the Hall's PR edge. -## 3. Packages follow their repository: private — open +## 3. Packages follow their repository: private — decided -Proposed: one node-level registry login (k3s `registries.yaml`, read-only package +One node-level registry login (k3s `registries.yaml`, read-only package identity) for all 43 workloads; one ArgoCD credential template for the `coulomb/` repositories; job tokens in CI; package-read tokens for PyPI and npm. @@ -122,6 +121,7 @@ Suggested first repository for step 2: `rapp-openbao` or `railiance-hosts` T03 scans public history and drives rotations in parallel. It does not block the waves. -## Owner — open +## Owner — decided -Proposed: the founder holds T01 and T08; an agent drives the rest. +The founder holds T01 (this policy) and T08 (approval of each production wave). +An agent drives the rest of ORGREF-WP-0002. diff --git a/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md b/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md index e5e5e67..ba2b258 100644 --- a/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md +++ b/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md @@ -6,7 +6,7 @@ domain: infotech repo: prj-forgejo-org-refactor status: active flavor: implementation -owner: worsch +owner: claude-code topic_slug: railiance created: "2026-10-08" updated: "2026-10-08" @@ -93,9 +93,7 @@ separate review, not something the flip repairs. ```task id: ORGREF-WP-0002-T01 -status: wait -needs_human: true -blocking_reason: "The founder decides the visibility policy, the public allowlist and whether an interim lockdown runs before the integration." +status: done priority: high state_hub_task_id: "6387cb32-dd73-5ee0-b51e-d4aea475bcca" ```