diff --git a/docs/PRD.md b/docs/PRD.md index d394144c..1139634d 100644 --- a/docs/PRD.md +++ b/docs/PRD.md @@ -215,22 +215,22 @@ docs/plans/2026-08-30_containerization.md. ## 12. Decision registry -| ID | Decision (short form) | -| --- | ------------------------------------------------------------------------------------------------------------------ | -| D1 | Open-source, AI-first, self-hosted platform for agentic management + life OS | -| D2 | Hierarchy company→estate→project→workspace→kanban; bubble-up; granular RBAC | -| D3 | Standalone vs Enterprise; one-way conversion; per-user brains + Vault required in Enterprise; federation deferred | -| D4 | Re-runnable, extensible, per-mode onboarding wizards | -| D5 | North star = this rewrite of docs/PRD.md; stack docs/ = product SSOT | -| D6 | Only product-relevant material migrates from brains; operational records stay and link | -| D7 | Spec-inventory sweep launched immediately (executed; INPUTS baseline frozen by operator ruling T2, 2026-08-25) | -| D8 | webUI sits over official framework tooling; CLI primary | -| D9 | Not a hosted business; company = organizational separation for one operator | -| D10 | better-auth is the account system of record; external IdPs via OIDC | -| D11 | Small v1 slice; ALL phases on the documented roadmap from day one | -| D12 | HARD RULE: webUI never bypasses tooling; missing tool ⇒ build the tool first | -| D13 | workspace_id stays the hard isolation unit; hierarchy is parent structure above; kanban SOT amended, not rewritten | -| D14 | Sensitive profile data in the user's own brain only; postgres holds structure/consent/pointers | +| ID | Decision (short form) | +| --- | ------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------- | +| D1 | Open-source, AI-first, self-hosted platform for agentic management + life OS | +| D2 | Hierarchy company→estate→project→workspace→kanban; bubble-up; granular RBAC | +| D3 | Standalone vs Enterprise; one-way conversion; per-user brains + Vault required in Enterprise; federation deferred | +| D4 | Re-runnable, extensible, per-mode onboarding wizards | +| D5 | North star = this rewrite of docs/PRD.md; stack docs/ = product SSOT | +| D6 | Only product-relevant material migrates from brains; operational records stay and link | +| D7 | Spec-inventory sweep launched immediately (executed; INPUTS baseline frozen by operator ruling T2, 2026-08-25) | +| D8 | webUI sits over official framework tooling; CLI primary | +| D9 | Not a hosted business; company = organizational separation for one operator | +| D10 | better-auth is the account system of record; external IdPs via OIDC | +| D11 | Small v1 slice; ALL phases on the documented roadmap from day one | +| D12 | HARD RULE: webUI never bypasses tooling; missing tool ⇒ build the tool first | +| D13 | workspace_id stays the hard isolation unit; hierarchy is parent structure above; kanban SOT amended, not rewritten | +| D14 | Sensitive profile data in the user's own brain only; postgres holds structure/consent/pointers | | D15 | Tiered containerized deployment: compose standalone tier (five-point v1 bar) + phase-gated k8s enterprise tier; registry-only image source | 2026-08-30 containerization lane; plan docs/plans/2026-08-30_containerization.md | The full decision texts are recorded in the operator decision log (USC estate diff --git a/docs/plans/2026-08-30_containerization.md b/docs/plans/2026-08-30_containerization.md index 9a9c016f..0b2ca598 100644 --- a/docs/plans/2026-08-30_containerization.md +++ b/docs/plans/2026-08-30_containerization.md @@ -35,6 +35,7 @@ Tiered deployment, additive to the existing architecture: ## Phases ### Phase A — blessed standalone compose + - A1 Compose service definitions for gateway + appservice joining the existing infra compose (profiles: `dev` keeps today's behavior; `stack` adds the app tier), with health checks and dependency order. @@ -48,6 +49,7 @@ Tiered deployment, additive to the existing architecture: - Acceptance: the five-point NORTH-STAR bar measured live. ### Phase B — component completion + - Interface assumption (velma verdict A1, P5-RM-005/006): in-stack dogfood agents inherit SEAT-GRADE identity — credential-slot isolation, wrapper-first enforcement, no privileged coordination @@ -58,12 +60,14 @@ Tiered deployment, additive to the existing architecture: dogfood agent, watch/comms surfaces inside the deployment. ### Phase C — CI/CD parity + - Publish pipeline is the only image source (already true); add the deployment-side pull/upgrade path (compose pull + migrate + restart = next iteration); document the promotion flow next -> registry -> deployment. ### Phase D — coordinator integration (GATED) + - Gate (velma verdict C2): blocked until the checkpoint-and-lease child of the guides-proposed control-plane refactor — core + WU-P1-CHECKPOINT (schema, freshness, incarnation, clean-replacement resume; D57-D60 @@ -79,9 +83,11 @@ Tiered deployment, additive to the existing architecture: containerization consumes the coordination contract, never defines it. ### Phase E — enterprise tier + - k8s manifests/Helm for the same set; phase-gated on Phase A holding. ### Absorbed M4 remainder + - M4-3 pivot: KBN-101 foundation first (per ruling R6), then expand DDL. - M4-5: lands inside Phase B/C where natural. - M4-6 (composes M4-1+M4-4): last, as designed.