prj-forgejo-org-refactor/history/2026-09-28-preparation.md

Authorized preparation — 2026-09-28

The user requested execution of preparation after the readiness review. This session implemented the read-only T01 inventory and T02 review draft. T03–T05 were not started, and the four-part entry gate and AGENTS.md were not changed. No repository/org/package transfer, credential grant or runtime change occurred.

Delivered

• Inventory collector and usage: paginated public forge metadata, State Hub reconciliation, local working-tree reference locations, two pinned remote-only source archives, per-file exclusions and paired snapshots.
• Taxonomy: CSV/JSON records for 153 known paths, stable IDs where observable, purpose/evidence, candidate steward/org, visibility preservation and per-repo unresolved access/ownership items.
• Fresh platform-owned deployable capture and validator output; additional project read-only export of runtime controller images and ArgoCD sources.
• A conservative migration cleanliness precheck and focused tests for secret-safe output, pagination, deterministic fixture scans and incomplete-input refusal.

Findings

Observation	Result
Public forge repos	141, all anonymously visible; pagination exhausted
Additional local paths not publicly listed	12; existence/IDs/privacy need authenticated confirmation
State Hub registered repos	143; not the same population as forge repos
Local non-coordinator Git checkouts scanned	150
Public repos scanned via pinned archives	forgejo-actions-probe and inter-hub-haskell
Literal source/archive references	2,133 + 27 = 2,160, excluding remote records
Proposed assignments	railiance 32; netkingdom 20; helixforge 59; binky 3; coulomb 4
Unresolved steward assignments	35; grouped for review in taxonomy/README.md
Fresh platform workload inventory	68 units; validation: 16 declarations, 52 errors, 10 warnings
Wider runtime inventory	132 controllers, 35 distinct coulomb image references, 6 Applications, 5 AppProjects
Paired normalized snapshots	Unequal; reference sets equal but five repositories changed revision/content

The source token inventory includes history, examples and planning records. Those occurrences are review candidates, not 2,160 asserted live breakages. The wider runtime export includes completed Jobs and control-plane controllers; its cardinality is not directly comparable with the filtered platform capture.

Evidence boundaries and blockers

The scanner has no local read errors. It explicitly excludes sensitive/encrypted, large and binary files, symlinks and gitlink directories; ignored files, other branches and external consumers need owner disposition. The coordinator excludes itself from the content scan to avoid self-reference. It remains in the repo matrix.

inventory/comparison.json records both retained snapshot hashes. Changes were observed in hall-of-helix, hub-core, net-kingdom, rapp-qonto and test-driver. Do not call that unchanged-fleet evidence, even though reference findings match.

The existing forge credential route's plan verdict was autonomous, but its actual exec request was denied by flex-auth HTTP 403 for caller authentication or system binding. No credential was retrieved. No alternate identity or Secret read was used. Anonymous package enumeration also failed. The inventory therefore makes no claim of private repo, package or effective-access completeness.

Decisions recorded:

• 5f3680fc-0cd5-4d27-ba39-59fbdd13313c: authenticated owner metadata export or restoration of the sanctioned caller binding, plus completeness evidence.
• 60c5767c-d510-4d13-9a24-d5d58485b7e5: matrix, unresolved stewards, actual teams and durable convention review.
• Existing e9aca79b-f167-4326-94cd-037dcea34cd2: circular rollback prerequisite; remains unresolved and is not waived by preparation authorization.

No messages or owner task assignments were sent. Existing owner work is linked from the inventory handoff table rather than copied into this coordination repo.

Acceptance and next actions

T01/T02 are waiting with substantive artifacts, not done. G1/G2 are not accepted. To close preparation: obtain authenticated metadata, adjudicate collector exclusions and cross-cluster/external consumers, repeat against an unchanged fleet, and settle stewards/targets/permissions with verified identities. The 35 unresolved rows are not permission to permanently retain those repos in coulomb.

The current live workload errors strengthen the reason to defer implementation. Coverage owners must resolve name drift/unclaimed workloads and the collector's universal-coverage gap; then the unchanged entry gate still requires applicable Git/package transfer rollback proof. No T03 exception is implied.

Validation: four focused unit tests passed; JSON/CSV consistency and whitespace checks passed. The cleanliness precheck exits 1 as expected with coverage, approval and assignment blockers, reporting 2,254 old-path candidates including remote records. That precheck is not full G6 runtime acceptance.