coulomb/repo-manager
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: close classification publisher handoff

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a053ff-1d6f-7fe2-ac1c-a6eb40a42a0c
This commit is contained in:
tegwick 2026-09-01 02:33:10 +02:00
parent fd624021ec
commit 55002b6fc9
2 changed files with 30 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

21
workplans/RMGR-WP-0013-repository-classification-publisher.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Repository classification projection publisher"
domain: infotech
repo: repo-manager
status: active
status: finished
owner: codex
topic_slug: infotech
created: "2026-09-01"
@ -102,7 +102,7 @@ accepted as one current generation. Evidence:
```task
id: RMGR-WP-0013-T05
status: progress
status: done
priority: medium
state_hub_task_id: "9dbdbcfc-f485-50fb-92b1-3e084563d276"
```
@ -111,13 +111,14 @@ Package the publisher runtime, document registry bootstrap and refresh, record
evidence, and hand the concrete endpoint/configuration to HUB-WP-0006-T06.
**Update (2026-09-01):** placement is resolved to the `railiance01` Core Hub
cluster. The publisher now uses a committed stable UUID-to-Forgejo registry,
reads each classification at the exact default-branch commit, and has a
digest-pinned, private ClusterIP deployment with constrained Forgejo HTTPS
egress. Live anonymous conformance accepts 114 public repositories and reports
the nine private `rapp-*` repositories as errors. Final admission therefore
waits only for a dedicated `read:repository` Forgejo token; reusing the
operator/admin PAT or another workload's token is explicitly disallowed.
cluster. Helm revision 24 now runs the digest-pinned publisher from a committed
stable UUID-to-Forgejo registry and reads each classification at the exact
default-branch commit through the private in-cluster Forgejo Service. Live
verification completes the full scan in 3.45 seconds, accepts 114 public
repositories, and reports the nine private `rapp-*` repositories as bounded
errors. Final admission is handed to `RAPPCOREHUB-WP-0003-T04`, which waits for
a dedicated `read:repository` Forgejo identity; reusing the operator/admin PAT
or another workload's token is explicitly disallowed.
## Acceptance
@ -125,4 +126,4 @@ operator/admin PAT or another workload's token is explicitly disallowed.
- [x] The output validates as contract 1.0.0 without hub-core coercion
- [x] Pages cannot be mixed across snapshots or page sizes
- [x] Invalid source state cannot replace hub-core's last accepted generation
- [ ] Runtime and deployment handoff are documented and reproducible
- [x] Runtime and deployment handoff are documented and reproducible