ORGREF-WP-0002-T01 done: visibility policy fully decided

Packages private; the founder holds T01 and T08, an agent drives the rest.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5457@bnt-lap001
Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012
This commit is contained in:
tegwick 2026-10-08 18:59:02 +02:00
parent 8fe5db8567
commit 218df303e8
2 changed files with 8 additions and 10 deletions

View file

@ -1,7 +1,6 @@
# Forge visibility policy (ORGREF-WP-0002-T01)
Status: **partly decided** (founder, 2026-10-08). Points 1, 2, 4, 5 and 6 are
decided. Point 3 and the plan's owner are open.
Status: **decided** (founder, 2026-10-08). All six points and the plan's owner.
## 1. The forge is private, with no anonymous access — decided
@ -55,9 +54,9 @@ repository. The baseline is the Unix home directory's public folder:
component). This plan only needs the forge to be closable without breaking
the Hall's PR edge.
## 3. Packages follow their repository: private — open
## 3. Packages follow their repository: private — decided
Proposed: one node-level registry login (k3s `registries.yaml`, read-only package
One node-level registry login (k3s `registries.yaml`, read-only package
identity) for all 43 workloads; one ArgoCD credential template for the
`coulomb/` repositories; job tokens in CI; package-read tokens for PyPI and npm.
@ -122,6 +121,7 @@ Suggested first repository for step 2: `rapp-openbao` or `railiance-hosts`
T03 scans public history and drives rotations in parallel. It does not block
the waves.
## Owner — open
## Owner — decided
Proposed: the founder holds T01 and T08; an agent drives the rest.
The founder holds T01 (this policy) and T08 (approval of each production wave).
An agent drives the rest of ORGREF-WP-0002.