fred
e3b0375211
docs(hierarchy): revision 9 — complete the runner's importer enumeration (terra r8 F10)
...
ci/woodpecker/pr/ci Pipeline was successful
The 'one live importer' claim was false: the measured production importer
set of the db migration runner has four members (Gateway database module
via the barrel, storage Postgres adapter, fleet-backlog and gateway-verify
CLI commands via literal dynamic import). The enumeration example now
names all four, the import analysis resolves literal dynamic import()
routes, and a non-literal dynamic import of the db package fails the
assertion. Injection-only consumers (schema-check) have no import edge.
2026-08-26 19:31:09 -05:00
fred
f07b4c73b1
docs: hierarchy schema revision 8 — re-export-aware import analysis, per-module importer enumeration (terra F9 residual)
ci/woodpecker/pr/ci Pipeline is pending
2026-08-26 19:18:11 -05:00
fred
bf3bd6c477
docs: hierarchy schema revision 7 — infrastructure register for legitimate non-hierarchy raw execution (terra F9)
ci/woodpecker/pr/ci Pipeline was canceled
2026-08-26 19:09:00 -05:00
fred
5c1e8d290e
docs: hierarchy contract revision 6 — three-prong wording, allowlist composition rules, honest detection scope (terra r5 F7/F8)
ci/woodpecker/pr/ci Pipeline is pending
2026-08-26 19:02:11 -05:00
fred
e32d77e5a1
docs: hierarchy contract revision 5 — raw-execution prong closes dynamic-identifier evasion (terra r4 F7)
ci/woodpecker/pr/ci Pipeline is pending
2026-08-26 18:55:08 -05:00
fred
dcf4220823
docs: hierarchy schema contract revision 4 (terra r3 residual F7: raw-SQL literal prong)
ci/woodpecker/pr/ci Pipeline is pending
2026-08-26 18:48:13 -05:00
fred
f5e3165ea5
docs: hierarchy schema contract revision 3 (terra r2 residuals F4, F7)
ci/woodpecker/pr/ci Pipeline is pending
2026-08-26 18:43:00 -05:00
fred
ee8c593858
docs: hierarchy schema contract revision 2 (terra review findings 1-9)
...
ci/woodpecker/pr/ci Pipeline was canceled
- tenancy-FK exemption: canonical workspace_id is the one permitted
business->class reference; all other forms forbidden with control test
- record class = 4 node tables + hierarchy_grants per A1 8.1.2
- grant uniqueness via UNIQUE NULLS NOT DISTINCT (or 6 partial indexes);
NOT NULL on role/granted_by/name/slug
- grant FK delete actions split: target cascade, principal RESTRICT
- audit parity: REQ-AUD-001 guarantees, same-transaction outbox,
deletion-safe snapshot linkage, cascade coverage, rollback witness
- roll-up never-a-write restored to full A1 strength (no canonical writes)
- ownership invariant completed via contract 2; both-sides transfer rule
marked new policy; legacy premise corrected
- corrected cardinality witness (one-parent-per-child + sibling control)
- provenance fixes: REQ-MIG-001 attribution dropped, projects table
described accurately, D8-rank-1 claim removed
2026-08-26 18:29:53 -05:00
fred
7ef620cda7
docs: hierarchy schema contract (S2 contract 1, D2)
...
ci/woodpecker/pr/ci Pipeline was canceled
Turns PRD D2/D13 and kanban-SOT Amendment A1 into a concrete schema
contract: companies/estates/platform_projects/workspaces with NOT NULL
RESTRICT parent chains (chain uniqueness by construction), per-parent slug
scoping, hierarchy_grants attachment shape (vocabulary deferred to
contract 2), transfer as single audited parent-FK update requiring
both-sides authority, no owner columns (ownership = grants), fail-closed
bottom-up deletion, Gateway-only mutation path, and a verification matrix
with real-Postgres constraint witnesses.
2026-08-26 18:10:45 -05:00
fred
49b7943420
fix(gateway): scope /api/teams endpoints to team membership ( #1428 ) ( #1429 )
ci/woodpecker/push/publish Pipeline is pending
2026-08-26 22:45:54 +00:00
fred
19e16bd44f
ci: publish web+appservice sha images on next ( #1407 ) ( #1427 )
ci/woodpecker/push/publish Pipeline was canceled
2026-08-26 22:42:03 +00:00
jason.woltje
3bd490c080
Merge pull request 'docs: north-star PRD rewrite (D1-D14), ROADMAP, kanban SOT Amendment A1' ( #1425 ) from docs/prd-north-star-rewrite into next
...
ci/woodpecker/push/publish Pipeline was successful
Reviewed-on: #1425
2026-08-26 16:57:16 +00:00
fred
4b448109dd
docs/prd: address independent review findings 1-10 (fidelity, A1 record class + carve-out, roadmap completeness)
ci/woodpecker/pr/ci Pipeline was successful
2026-08-25 23:20:40 -05:00
fred
bc1149c15e
docs: north-star PRD rewrite (D1-D14), ROADMAP.md, kanban SOT Amendment A1
...
ci/woodpecker/pr/ci Pipeline was successful
- docs/PRD.md: Part I product north star authored from ratified decisions
D1-D14; Part II preserves all active workstream contracts verbatim
(KBN-101, FCM #758 , FCOM #766 , TESS, #756 , MOS-PORT, #1150 , #1174 , #1194 ,
RI #1275 , M1). Referenced anchors unchanged.
- docs/archive/PRD-v0.1.md: v0.1.0 beta PRD body archived verbatim with
supersession header.
- docs/ROADMAP.md: all phases P0-P5 present from day one per D11
(P2-P5 as explicit placeholders).
- docs/requirements/native-kanban-sot.md: Amendment A1 (D13) - hierarchy
parentage + RBAC chain above workspaces; sections 1-7 untouched.
2026-08-25 22:23:07 -05:00
orch-01
089953a7cf
ci: enable turbo remote cache on trusted publish events ( #1424 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: orch-01 <[email protected]
2026-08-25 18:32:55 +00:00
ops-deploy-01
7b25be22e9
fix( #1394 ): recover-token headless — dual path (--email flag + piped stdin) with documented precedence ( #1423 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: ops-deploy-01 <[email protected]
2026-08-25 16:14:56 +00:00
ops-deploy-01
4e3d179e61
fix( #1390 ): gateway uninstall headless — --yes/--remove-data; non-TTY without consent fails loud ( #1422 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: ops-deploy-01 <[email protected]
2026-08-25 16:00:17 +00:00
ops-deploy-01 and orch-01
ae58482b72
fix( #1392 ): review-285 N1+N2 follow-up — env has no config authority in schema-check; verification throws fatal at install ( #1421 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: ops-deploy-01 <[email protected]
2026-08-25 15:08:04 +00:00
code-infra-01
b2d40dada0
fix( #1391 ): boot-time ValidationPipe metatype self-check — fail loud at startup ( #1419 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: code-infra-01 <[email protected]
2026-08-25 14:01:24 +00:00
code-be-02 and orch-01
d30a4cce00
feat(git-tools): consume .mosaic/repo.json declarations in compat mode (T51 WP5b) ( #1416 )
...
ci/woodpecker/push/publish Pipeline failed
Co-authored-by: code-be-02 <[email protected]
2026-08-25 12:55:40 +00:00
veronica and orch-01
4cd280e48d
feat(tools/git): grant-reviewer.sh org-team reviewer grant with fail-closed read-back ( #1415 ) ( #1417 )
...
ci/woodpecker/push/publish Pipeline failed
Co-authored-by: veronica <[email protected]
2026-08-25 02:30:33 +00:00
code-infra-01 and orch-01
8738a03893
fix( #1395 ): accounts.issuer column + credential-only backfill — password auth on fresh installs ( #1401 )
...
ci/woodpecker/push/publish Pipeline failed
Co-authored-by: code-infra-01 <[email protected]
2026-08-25 01:19:29 +00:00
code-be-01 and orch-01
04a01be992
ci(publish): serialize workspace-consuming image builds after publish-next-npm ( #1411 ) ( #1412 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: code-be-01 <[email protected]
2026-08-25 01:18:02 +00:00
veronica and orch-01
812e2df1da
fix( #1408 ): mosaic-agent@ condition arms on either home shape ( #1410 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: veronica <[email protected]
2026-08-25 01:17:15 +00:00
veronica and orch-01
8c292fb32f
fix( #1408 ): legacy-socket launch guard + seat launch.sh preference ( #1409 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: veronica <[email protected]
2026-08-25 00:49:27 +00:00
code-be-01 and orch-01
f45928c311
fix(ci): restore workspace manifests after publish pin transform ( #1404 ) ( #1405 )
...
ci/woodpecker/push/publish Pipeline failed
Co-authored-by: code-be-01 <[email protected]
2026-08-25 00:08:40 +00:00
ops-deploy-01 and orch-01
4d24ae8618
fix( #1392 ): hash-ledger migrations + install-time schema verification ( closes #1392 , closes #1402 ) ( #1403 )
...
ci/woodpecker/push/publish Pipeline failed
Co-authored-by: ops-deploy-01 <[email protected]
2026-08-24 23:11:50 +00:00
code-be-01 and orch-01
d790572e2e
ci(publish): pin next-channel @mosaicstack deps to exact same-pipeline builds ( #1389 ) ( #1400 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: code-be-01 <[email protected]
2026-08-24 23:05:37 +00:00
code-be-01 and orch-01
d7b1dd9601
test(git-tools): wrapper-guard harness distinguishes tool failure from drift (#1380-FF) ( #1388 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: code-be-01 <[email protected]
2026-08-24 21:43:09 +00:00
code-be-01 and orch-01
0db2d19a22
feat(framework): mosaic doctor structure-anchor provisioning check (T51 WP0b) ( #1379 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: code-be-01 <[email protected]
2026-08-24 20:15:08 +00:00
code-be-01 and orch-01
8eb7e6354e
fix(fleet): resolve-then-validate symlink guard + framework helper resolution ( #1380 ) ( #1383 )
...
ci/woodpecker/push/publish Pipeline failed
Co-authored-by: code-be-01 <[email protected]
2026-08-24 19:39:13 +00:00
code-be-01 and orch-01
9014a510a9
ci(mosaic): repo-structure declaration CI gate (T51 WP5c) ( #1378 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: code-be-01 <[email protected]
2026-08-24 04:43:26 +00:00
code-be-01 and orch-01
974e4740ab
docs(mosaic): declare repo structure v2 (T51 WP2a) ( #1377 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: code-be-01 <[email protected]
2026-08-24 03:49:33 +00:00
orch-01
9cd6d39b71
fix(git-tools): pr-create API fallback resolves base from forge default branch (E4) ( #1376 )
ci/woodpecker/push/publish Pipeline was successful
2026-08-24 02:49:38 +00:00
code-be-01 and orch-01
143f925fd8
fix(git-tools): admin-gated --no-ci-expected merge assertion for CI-less repositories ( #1373 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: code-be-01 <[email protected]
2026-08-23 18:54:49 +00:00
fred and gate-merge-01
24294d3b77
fix(git-tools): issue-view shows comment bodies and names the real tea failure ( #1357 ) ( #1365 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: fred <[email protected]
2026-08-22 00:23:22 +00:00
veronica and gate-merge-01
24caeab057
fix(tmux): locate the REPL input box by shape, not by a Claude-only glyph ( #1363 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: veronica <[email protected]
2026-08-21 23:45:08 +00:00
fred and gate-merge-01
888a6ad29b
fix( #1356 ): tea login resolution fails closed on a declared git identity ( #1361 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: fred <[email protected]
2026-08-21 23:04:31 +00:00
fred
24462f460e
docs(git-wrappers): correct the stale --login fallback and document the test suite's identity split ( #1354 )
ci/woodpecker/push/publish Pipeline was successful
2026-08-21 14:42:36 +00:00
veronica and fred
a480ee83dc
docs(W4): document contract — stamp kind and status on 104 live docs ( #1350 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: veronica <[email protected]
2026-08-21 14:07:36 +00:00
fred
fd43ed5420
fix(git-wrappers): no --login must use the caller's own credential, not a guessed shared login ( #1352 )
ci/woodpecker/push/publish Pipeline was successful
2026-08-21 04:10:42 +00:00
fargo and fred
1d84bc3f3d
fix(fleet): lease-broker activation, symlink-safe unit placement, named launch refusal — Wall 6 ( #1292 ) ( #1297 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: fargo <[email protected]
2026-08-21 00:40:29 +00:00
fred
6306914965
fix(lease-broker): no lease held is a no-op success, not a denied transition ( #1339 )
ci/woodpecker/push/publish Pipeline was successful
2026-08-20 23:40:09 +00:00
fred
af43a7a63e
docs(fleet): tier the north star and declare the tier-0 operator surface ( #1337 )
ci/woodpecker/push/publish Pipeline was canceled
2026-08-20 23:05:34 +00:00
fred
ca97b885b0
fix( #808 ): never borrow a session identity for non-tmux senders ( #1335 )
ci/woodpecker/push/publish Pipeline was successful
2026-08-20 21:03:50 +00:00
code-infra-01
6db0bead44
fix( #1327 ): sentinel-managed PATH block, default-home-only profile writes ( #1330 )
...
ci/woodpecker/push/publish Pipeline failed
Co-authored-by: code-infra-01 <[email protected]
2026-08-20 20:20:33 +00:00
c671290d77
docs: define main/next branch model, sequencing, responsibilities, and merge process ( #1214 ) ( #1215 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: Ghost <>
2026-08-20 20:19:39 +00:00
code-infra-01 and fred
6a9b2cf6c1
fix(git-tools): pr-merge queue guard reads CI status from the BASE repo for fork PRs (B1) ( #1334 )
...
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: code-infra-01 <[email protected]
2026-08-20 20:18:59 +00:00
6bd93a621d
scratchpads: fleet identity/comms/mosaic-tree continuation record (2026-08-17) ( #1296 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: Ghost <>
2026-08-20 19:11:59 +00:00
e9485c3d96
docs(l0): parameterize hard gates on the project's integration trunk ( #1216 , Option A) ( #1217 )
...
ci/woodpecker/push/publish Pipeline was successful
Co-authored-by: Ghost <>
2026-08-20 18:38:18 +00:00
fred
fred
jason.woltje
orch-01
ops-deploy-01
code-infra-01
code-be-02andorch-01
veronicaandorch-01
code-be-01andorch-01
fargoandfred