Close the runbook-tutorials workplans: statuses, backlog with qualified tasks, documents refreshed (RBT-WP-0009-T03, T07)
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Tests / tests (push) Waiting to run
Work Records / validate (push) Waiting to run

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 295952@bnt-lap001
Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477
This commit is contained in:
tegwick 2026-09-29 21:45:24 +02:00
parent 2967ebb929
commit 1398b8f95a
15 changed files with 119 additions and 37 deletions

View file

@ -4,7 +4,7 @@ type: workplan
title: "Runbook pack specification and validator"
domain: infotech
repo: runbook-tutorials
status: active
status: finished
flavor: implementation
owner: claude
topic_slug: stack

View file

@ -4,7 +4,7 @@ type: workplan
title: "Local runbook UI"
domain: infotech
repo: runbook-tutorials
status: active
status: finished
flavor: implementation
owner: claude
topic_slug: stack
@ -49,12 +49,13 @@ posture, works without JavaScript frameworks.
```task
id: RBT-WP-0004-T03
status: todo
status: cancel
priority: medium
state_hub_task_id: "a33cbd52-8759-583f-a2f0-8ab926569346"
```
`rtut run <pack>` walking the same run record in the terminal, for hosts
Cancelled 2026-09-29 (RBT-WP-0009): the run records are usable from the CLI for v0.1 packs (`rtut run ...`), and a terminal walk-through for v0.2 is not
needed to close this workplan. It is kept as RBT-WP-0006-T05. Original scope: `rtut run <pack>` walking the same run record in the terminal, for hosts
without a browser.
## Evidence view and export

View file

@ -4,7 +4,7 @@ type: workplan
title: "Legacy adapter and console migration"
domain: infotech
repo: runbook-tutorials
status: active
status: finished
flavor: implementation
owner: claude
topic_slug: stack

View file

@ -4,7 +4,7 @@ type: workplan
title: "Execution mode and multi-repo pack index"
domain: infotech
repo: runbook-tutorials
status: active
status: backlog
flavor: implementation
owner: claude
topic_slug: stack
@ -16,8 +16,9 @@ state_hub_workstream_id: "35196f02-7cb9-5706-9529-1cba9c736058"
## Goal
Later capabilities, deliberately not started: opt-in execution of steps, and
discovery of packs across the estate.
**Backlog (2026-09-29).** Later capabilities, deliberately not started, each waiting for a decision from Bernd: opt-in execution of steps (auto-pilot),
discovery of packs across the estate, a runbook-aware feedback assistant, dependencies between runbooks, a terminal walk-through, the v0.3 design
that closes the gaps in `docs/console-mapping.md`, and an optional security and code review. Nothing here blocks the finished runbook-tutorials workplans.
## Opt-in, audited step execution
@ -77,3 +78,41 @@ state_hub_task_id: "acd969c3-3bd4-5953-9f9a-8ad8c5d8e380"
Packs declare `requires_packs` with a required result (exercised, or a named gate
passed), instead of deeper nesting (v0.2 caps nesting at three levels). Needs a decision
on how a pack in another repo is identified and trusted.
## Terminal walk-through
```task
id: RBT-WP-0006-T05
status: wait
needs_human: true
blocking_reason: "Needs a decision whether hosts without a browser justify it; the CLI already covers v0.1 runs (moved from RBT-WP-0004-T03)."
priority: low
```
`rtut run <pack>` walking a run in the terminal, for hosts without a browser. v0.2 runs can be driven from the engine and the UI, not yet from a terminal.
## v0.3: close the console gaps
```task
id: RBT-WP-0006-T06
status: wait
needs_human: true
blocking_reason: "Needs a decision to start a v0.3 design: conditional applicability (G1), longer horizons (G2), gate recheck (G3), value predicates (G4), local-only attributes (G5), outputs feeding later members (G7). G6 is T01."
priority: medium
```
The gaps in `docs/console-mapping.md`. Closing G1, G3 and G7 is also the precondition for extracting the console's engine parts and for modeling the
security bootstrap as a project (the cancelled RBT-WP-0005-T04).
## Security and code review
```task
id: RBT-WP-0006-T07
status: wait
needs_human: true
blocking_reason: "Optional follow-up agreed with Bernd on 2026-09-29: the workplans close without it. Needs a decision when to run it."
priority: medium
```
Run the security review and the code review over the engine and the UI: it serves files (artefacts, records), writes YAML (projects, attribute sets),
uses `shell=True` for operator-confirmed verify commands, and takes form input on localhost. Also first execution of `.forgejo/workflows/tests.yaml` on a real runner.

View file

@ -4,7 +4,7 @@ type: workplan
title: "Engine v0.2: graph, datapoint states and gates"
domain: infotech
repo: runbook-tutorials
status: active
status: finished
flavor: implementation
owner: claude
topic_slug: stack

View file

@ -4,7 +4,7 @@ type: workplan
title: "Runbook maturity, projects and idempotency"
domain: infotech
repo: runbook-tutorials
status: active
status: finished
flavor: implementation
owner: claude
topic_slug: stack
@ -130,12 +130,13 @@ template picker that instantiates a project.
```task
id: RBT-WP-0008-T09
status: todo
status: done
priority: medium
state_hub_task_id: "54749c4e-69d8-54ee-a1f7-5e9f781a9053"
```
Replace the "Record pack as exercised" click and the `exercise_status` field with derived maturity; migrate the packs.
Done 2026-09-29 (RBT-WP-0009-T01): the click, `apply_exercise` and `exercise_update` are removed, the field is deprecated and ignored, and the shipped packs no longer carry it.
Original scope: replace the "Record pack as exercised" click and the `exercise_status` field with derived maturity; migrate the packs.
## Templates as products: auto-confirm and auto-pilot on a project

View file

@ -4,13 +4,14 @@ type: workplan
title: "Finalize the runbook-tutorials workplans"
domain: infotech
repo: runbook-tutorials
status: active
status: finished
flavor: implementation
owner: claude
topic_slug: stack
created: "2026-09-29"
updated: "2026-09-29"
depends_on: [RBT-WP-0002, RBT-WP-0004, RBT-WP-0005, RBT-WP-0006, RBT-WP-0007, RBT-WP-0008]
depends_on: [RBT-WP-0002, RBT-WP-0004, RBT-WP-0005, RBT-WP-0007, RBT-WP-0008]
state_hub_workstream_id: "53103733-880f-58cc-a330-4b86375b20ad"
---
## Goal
@ -29,6 +30,7 @@ backlog and do only a small JSON export.
id: RBT-WP-0009-T01
status: done
priority: high
state_hub_task_id: "298ba5c8-cd8c-5d0c-afdc-cd2c41b67774"
```
Done 2026-09-29. `exercise_status` mixed three things (RBT-WP-0008). Maturity, derived from run history, replaces it. Remove the "Record pack as
@ -42,6 +44,7 @@ Also found and fixed while doing it: the CLI had no tests, and `rtut list` crash
id: RBT-WP-0009-T02
status: done
priority: high
state_hub_task_id: "14b17a9b-c3a3-5291-9328-e90c99caea49"
```
Done 2026-09-29. Declare the dependencies (`pyproject.toml`: PyYAML, jsonschema, pytest) so a fresh checkout can run; add `rtut check` (packs, attribute
@ -54,11 +57,12 @@ runner** (no way to trigger one from here); check its first execution.
```task
id: RBT-WP-0009-T03
status: todo
status: done
priority: medium
state_hub_task_id: "fec1fc82-c686-524f-861f-ba0881f9408b"
```
Refresh `SCOPE.md` (it still says "bootstrap"), add a `docs/README.md` index, note in the specs that v0.1 and v0.2 changes from here on
Done 2026-09-29. Refresh `SCOPE.md` (it still says "bootstrap"), add a `docs/README.md` index, note in the specs that v0.1 and v0.2 changes from here on
become a new version, update the capability entry, and make the workplan statuses true (RBT-WP-0007 finished, RBT-WP-0002-T07 done,
RBT-WP-0006 and NK-WP-0011 to backlog).
@ -68,6 +72,7 @@ RBT-WP-0006 and NK-WP-0011 to backlog).
id: RBT-WP-0009-T04
status: done
priority: medium
state_hub_task_id: "f6f2e2b2-7872-5565-9960-609a790b5356"
```
Done 2026-09-29, closing RBT-WP-0004-T04: a closed run's (and project run's) record can be downloaded as JSON from its page; an open run is
@ -79,6 +84,7 @@ refused (409). Added `rtut seal <file>` so an exported record can be verified an
id: RBT-WP-0009-T05
status: done
priority: high
state_hub_task_id: "d90789fc-0497-5caa-979e-53289d20afc4"
```
Done 2026-09-29. Verdict: the structure maps, the behaviour does not fully; seven gaps (G1 to G7) are the v0.3 candidates. `docs/console-mapping.md`: map the security bootstrap console's 6 stages, 14 gates, roles, subsystems, integrations, 12 artefacts
@ -91,6 +97,7 @@ RBT-WP-0005-T03, records the decision to keep the console as a permanent legacy
id: RBT-WP-0009-T06
status: done
priority: high
state_hub_task_id: "ca96aae8-bac5-5170-971f-d4b06e1ff252"
```
Done 2026-09-29 (net-kingdom commit 90112f3). `nk.ssh-certificates`, `nk.openbao-operating-path` and `nk.protected-system-flex-auth` become v0.2 packs with actors, datapoints,
@ -104,11 +111,12 @@ Bernd's (NK-WP-0044-T05).
```task
id: RBT-WP-0009-T07
status: todo
status: done
priority: high
state_hub_task_id: "32408947-03bc-58cb-b57b-cb2ee097a3bc"
```
Set every status to what is true, move terminal mode and the evidence work that is not done to the backlog with the decisions written
Done 2026-09-29. Set every status to what is true, move terminal mode and the evidence work that is not done to the backlog with the decisions written
down, archive the finished workplans, sync State Hub, and record a progress event. Work that needs Bernd's own environment
(NK-WP-0044-T05 attended runs, NK-WP-0009 T03-T05, the external STS issuer for T02) stays in net-kingdom and is named there.