Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834
105 lines
2.4 KiB
Markdown
105 lines
2.4 KiB
Markdown
---
|
|
id: SBOM-WP-0002
|
|
type: workplan
|
|
title: "Deploy and cut over SBOM Nexus production authority"
|
|
domain: infotech
|
|
repo: sbom-nexus
|
|
status: ready
|
|
owner: codex
|
|
topic_slug: infotech
|
|
created: "2026-08-22"
|
|
updated: "2026-08-22"
|
|
parent_workplan: CUST-WP-0062
|
|
related:
|
|
- SBOM-WP-0001
|
|
- CUST-WP-0062
|
|
- ACTIVITY-WP-0030
|
|
- STATE-WP-0079
|
|
- RMGR-WP-0008
|
|
---
|
|
|
|
# Deploy and cut over SBOM Nexus production authority
|
|
|
|
## Goal
|
|
|
|
Deploy SBOM Nexus with managed PostgreSQL, import and reconcile State Hub
|
|
history, move callers through reversible compatibility stages, and prove the
|
|
bounded daily catch-up before retiring State Hub SBOM ownership.
|
|
|
|
## Deploy dark with managed PostgreSQL
|
|
|
|
```task
|
|
id: SBOM-WP-0002-T01
|
|
status: todo
|
|
priority: high
|
|
```
|
|
|
|
Provision database credentials through the governed route, migrate schema,
|
|
deploy the API without callers, and capture health plus backup/restore evidence.
|
|
|
|
## Synchronize repository projections
|
|
|
|
```task
|
|
id: SBOM-WP-0002-T02
|
|
status: todo
|
|
priority: high
|
|
```
|
|
|
|
Populate active repository identity and host checkout paths from Repo Manager.
|
|
Verify fleet totals and catch-up ordering without performing ingest.
|
|
|
|
## Import and reconcile State Hub history
|
|
|
|
```task
|
|
id: SBOM-WP-0002-T03
|
|
status: wait
|
|
priority: high
|
|
```
|
|
|
|
Depends on T01/T02. Back up the empty target, run the idempotent importer, and
|
|
retain an exact reconciliation report before any caller switch.
|
|
|
|
## Cut over State Hub compatibility façade
|
|
|
|
```task
|
|
id: SBOM-WP-0002-T04
|
|
status: wait
|
|
priority: high
|
|
```
|
|
|
|
Depends on T03 and the State Hub child change. Move reads then writes behind
|
|
reversible flags; retarget dashboard, MCP, CLI, summary, DoI, and onboarding.
|
|
|
|
## Retarget Repo Manager scanner interface
|
|
|
|
```task
|
|
id: SBOM-WP-0002-T05
|
|
status: wait
|
|
priority: medium
|
|
```
|
|
|
|
Depends on dark deployment. Preserve CLI usability while removing competing
|
|
SBOM product authority and pinning the Nexus contract.
|
|
|
|
## Enable bounded Activity Core ingest
|
|
|
|
```task
|
|
id: SBOM-WP-0002-T06
|
|
status: wait
|
|
priority: high
|
|
```
|
|
|
|
Depends on T03/T04 and `ACTIVITY-WP-0030`. Enable no more than N ingests/skips
|
|
per fire with zero spawned catch-up tasks.
|
|
|
|
## Stabilize and retire legacy ownership
|
|
|
|
```task
|
|
id: SBOM-WP-0002-T07
|
|
status: wait
|
|
priority: medium
|
|
```
|
|
|
|
Capture two successful daily fires and a zero-flood Monday window. Record the
|
|
retention decision, then retire State Hub SBOM ownership after the stabilization
|
|
window without deleting historical data implicitly.
|