From bc474c1cd692fb6576c8beb2e1e50946b1236f1b Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 8 Oct 2026 18:55:14 +0200 Subject: [PATCH] ORGREF-WP-0002-T01: point 4 decided (Telegram images uploaded by the adapter) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012 --- decisions/forge-visibility-policy.md | 17 ++++++++++------- ...F-WP-0002-forge-closure-netkingdom-access.md | 5 ++++- 2 files changed, 14 insertions(+), 8 deletions(-) diff --git a/decisions/forge-visibility-policy.md b/decisions/forge-visibility-policy.md index 13334cc..cd5a170 100644 --- a/decisions/forge-visibility-policy.md +++ b/decisions/forge-visibility-policy.md @@ -1,7 +1,7 @@ # Forge visibility policy (ORGREF-WP-0002-T01) -Status: **partly decided** (founder, 2026-10-08). Points 1 and 2 are decided. -Points 3–6 and the plan's owner are open. +Status: **partly decided** (founder, 2026-10-08). Points 1, 2 and 4 are decided. +Points 3, 5 and 6 and the plan's owner are open. ## 1. The forge is private, with no anonymous access — decided @@ -61,12 +61,15 @@ Proposed: one node-level registry login (k3s `registries.yaml`, read-only packag identity) for all 43 workloads; one ArgoCD credential template for the `coulomb/` repositories; job tokens in CI; package-read tokens for PyPI and npm. -## 4. Telegram post images — open +## 4. Telegram post images — decided -Proposed: the fluid-telegram adapter fetches the image with a read identity and -uploads it to Telegram, so no image URL needs to be public. Under point 2 the -alternative is the publisher's public target (the Hall's coulomb.social space) -once it exists. +The fluid-telegram adapter fetches each image with a read identity and uploads +it to Telegram, so no image URL needs to be public (fluid-telegram +FT-WP-0001-T14). + +A public assets location will come later, deliberately: a specific asset +repository and store with creator and trust management. It is **not** improvised +now, and Telegram images do not wait for it. ## 5. Interim lockdown — open diff --git a/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md b/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md index 9c340dd..d819dab 100644 --- a/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md +++ b/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md @@ -126,7 +126,10 @@ access, and public codebases go to a separate location. Publication is a per-repo `public/` folder of symlinks only, projected outward by a shared publisher with sanitization, withdrawn by renaming the folder. Hall of Helix stays a published PR edge, tied to coulomb.social spaces as projections of -repos. Points 3-6 and the owner are still open. +repos. Point 4 decided: the adapter uploads Telegram images itself +(fluid-telegram FT-WP-0001-T14); a dedicated public asset store with creator and +trust management comes later, not now. Points 3, 5 and 6 and the owner are +still open. ```task id: ORGREF-WP-0002-T02