feat(identifiers): prepare verified cutover batches
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d
This commit is contained in:
parent
bdf3af19e2
commit
5e14d09bdf
10 changed files with 3097 additions and 0 deletions
|
|
@ -44,6 +44,13 @@ rmgr identifier preflight --root /path/to/fleet
|
|||
rmgr identifier migration-plan --root /path/to/fleet --output uuid-migration.json
|
||||
rmgr identifier migration-verify --plan uuid-migration.json
|
||||
rmgr identifier migration-verify --plan uuid-migration.json --repo repo-manager
|
||||
rmgr identifier migration-batch-plan \
|
||||
--plan uuid-migration.json \
|
||||
--repo whynot-design \
|
||||
--output batch.json
|
||||
rmgr identifier migration-batch-verify \
|
||||
--plan uuid-migration.json \
|
||||
--batch batch.json
|
||||
```
|
||||
|
||||
`migration-plan` is non-mutating. Its versioned JSON output preserves every
|
||||
|
|
@ -61,6 +68,13 @@ repository. `--repo` verifies one atomic apply unit, so unrelated fleet churn
|
|||
does not invalidate a stable repository. A new plan is required for each unit
|
||||
whose authoritative source drifts.
|
||||
|
||||
`migration-batch-plan` converts selected atomic units into a bounded approval
|
||||
package. Each selected repository must still match the planned Git HEAD, have a
|
||||
clean worktree, exactly match its configured upstream, and use a non-retired
|
||||
origin. The batch records these facts and its own SHA-256 seal, but always emits
|
||||
`apply_authorized: false`. An explicit decision must cite that batch hash before
|
||||
any database or file mutation.
|
||||
|
||||
Activation and applying a bulk migration remain separate governed steps.
|
||||
Publishing or planning this function does not retroactively rewrite existing
|
||||
identifiers. `--namespace` remains an explicit override for a foreign/forked
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue