diff --git a/docs/development/ENGINEERING_PLATFORM_ROADMAP.md b/docs/development/ENGINEERING_PLATFORM_ROADMAP.md index dfb7a2c8..a899649c 100644 --- a/docs/development/ENGINEERING_PLATFORM_ROADMAP.md +++ b/docs/development/ENGINEERING_PLATFORM_ROADMAP.md @@ -1,5 +1,33 @@ # Engineering Platform Roadmap +## HOB-EP01 project discovery — protected implementation, 2026-10-14 + +The selected [Workspace project-discovery producer](../engineering/WORKSPACE_PROJECT_DISCOVERY_READ_V1.md) +is qualified on protected EP2.3.120 main +`c3d4e8161598adb92aa21a40aaa903df591c6c3a` after normal protected PR355. +[Delivery/Finalization record](WORKSPACE_PROJECT_DISCOVERY_READ_V1_DELIVERY.md) +binds current source/tree/wheels, actual installed2559 tests, strict changed-file +line coverage, independent complete Quality/Security and all11 owning CI jobs. +Only bounded authenticated B8R/CENTRAL discovery/topology reads and finite +revocable Workspace READ grants are selected. No scanner/second registry, +project create/adopt, generic IAM, user-data migration or live installation. + +The same sole ARCHITECT_2 / LANE_2_WORK continues ordinary nonempty NO_BUMP +Finalization with its own reviews/checks/protected merge, then NEW exact-final-main +installed HTTP/readback/cleanup and immutable qualified L4 handoff under +`L2-L4-HOB-EP01-VERIFIED-LINK-V1-20261012`. These remaining gates are PENDING; +source-qualified or initial installed proof is not full HOB closure. Scope and +operational budgets stay unchanged; actual consumption is retained without an +administrative cycle maximum under decision6161548467. + +R34, r33, r43/r44 and GP remain CLOSED. The dated r34 entries below retain their +original observed stage and historical failures; they are not executable work +or a reopening. HOB-EP01's activation6161548467 supersedes its historical wait +markers. L4's complete GUI, L1 installer and L3 are not producer prerequisites. +TDE observe is reported separately as actual FAILED, with unsuppressed open +maintenance signals; a green nonblocking workflow is not TDE-qualified PASS. + + ## Current r34 protected source delivery and NO_BUMP Finalization — 2026-10-13 [ACK and one-time documentary correction47 booking](https://github.com/pcvantol/forge/issues/142#issuecomment-6154663253): diff --git a/docs/development/WORKSPACE_PROJECT_DISCOVERY_READ_V1_DELIVERY.md b/docs/development/WORKSPACE_PROJECT_DISCOVERY_READ_V1_DELIVERY.md new file mode 100644 index 00000000..96fbf2c1 --- /dev/null +++ b/docs/development/WORKSPACE_PROJECT_DISCOVERY_READ_V1_DELIVERY.md @@ -0,0 +1,159 @@ +# Workspace project discovery HOB-EP01 delivery + +**PROTECTED IMPLEMENTATION QUALIFIED / ORDINARY FINALIZATION.** +New exact-final-main installed HTTP/readback/cleanup and immutable handoff remain +PENDING until their actual terminal receipts; this is not full HOB-EP01 closure. + +Assignment `L2-WORKSPACE-PROJECT-DISCOVERY-READ-V1-20261012`. +Decision `L2-HOB-EP01-ACTIVATE-CONTINUE-TO-DOD-20261014`. +JOIN `L2-L4-HOB-EP01-VERIFIED-LINK-V1-20261012`. +Same sole `ARCHITECT_2 / LANE_2_WORK` source writer and session. +Base `b2befba67174deb9061134e668549c75c57a14b7` (EP2.3.119). +Implementation branch `codex/hob-ep01-project-discovery-v1`; PR355. +Package PATCH2.3.120; ordinary nonempty Finalization is NO_BUMP. +R34/r33/r43/r44/GP remain closed; their histories, proofs and budgets are distinct. + +## Selected producer boundary + +Read only the existing B8R/CENTRAL projects, authority/child repositories and +permitted bounded attachment availability. No second register/scanner/identity, +project creation/adoption/execution, provider or real-user installation. +The owner contract is WORKSPACE_PROJECT_DISCOVERY_READ_V1.md and the shipped +closed workspace-project-discovery-v1.schema.json, contract1.0/schema75. +Two authenticated GET routes and ordinary finite issue/status/revoke CLI. +Separate readscope binds EP/Workspace instances, consumer/audience, explicit +projects/fields and validity. Private cursor signing key conveys no authority. +Unsupported journal modes are rejected without switching the existing store. +Noncreating snapshots reauthenticate and fence the final publication; missing, +denied and corrupt source are not healthy empty results. No published paths, +bearers, verifiers or host metadata. Owner ledger writes remain separate from +zero-domain-effect GET proof. + +## Exact candidate and actual evidence + +Frozen source c218460aac7cf362598c11048f9f09df4706f375, tree +a74597dbf76fa83c1de4535ab611034de9a41505; official installed Mac wheel SHA256 +6f11b9e3d658c6af7f995346b578815803e3fe6b91d830884ce3f83312209f53. +Source/wheel/current noneditable runtime195-product-byte equality independently +verified by complete Quality and Security. Forty current targeted installed +HTTP/authority/schema/migration/lifetime regressions PASS, not a full suite. +First ordinary installed service21 CLI/HTTP records belongs to39a/4d8/wheelcbd, +not this frozen source or a future final-main; it admitted the initial small chain. + +Current local full installed suite2559/3619.624s/OK/one existing macOSskip, +natural exit0 and no remaining own coverage/HTTP workers. Original full JSON +SHA256 a44921d4ba9871911201c12706a8fa4754fee614c9a7db54a8de8843a8ca007b; +no union with previous evidence. All166 measured shipped Python modules meet +existing combined>=80.20%, minimum80.3203661327%, aggregate85.0462988531%. +Strict changed executable-line counts: central reset1280/1523=84.04464872%; +platform version82/90=91.11111111%; discovery235/253=92.88537549%; +server3937/4694=83.87302940%; each strictly>80.2%. Both independent reviewers +recompute original JSON/native diff and actual stop, not rounded combined values. + +The later owning installed-location check rejected the Mac runtime above because +its noneditable site-packages directory was physically below the ignored checkout +`tmp` directory. That original failure is retained; the actual functional suite +and byte equality are not retrospectively claimed to pass the outside-checkout +location gate. A new standalone runtime in `/private/tmp` installs the same +official candidate wheel without editable/source imports. The unchanged owning +version/location check now passes. Final-main qualification must use this +outside-checkout layout and new final-main wheel, with separate receipts. + +Current owning CI38547636168 all11jobsSUCCESS: full installed coverage2559/ +3509.198s/OK/two existing Ubuntu skips; independent166module combined check. +Hosted synthetic mergeaa5db4df76b32d431ba14387cc65349a51cb0709 has the exact +reviewedtreea74597d, but a distinct hostedwheel3e56c6340c524bc3ea0ac3d8aa9d6547dbc28519eff91f16f209212878c8fc0a. +Validate3native and102coupled regressions, whole2577tests/3543.323s/Ubuntu2, +P-TRANSPORT3x2, parallelAction16, repositoryauthority8, actual Genesis/Managed +E2E, owning Postman and downstreamTrustedDelivery evidence all PASS. Four +normal browser shards, exact JavaScript coverage/localization and existing +external gates SUCCESS; unchanged GoldenRegression baselineSKIP is not PASS. + +Complete independent exact-source Quality and Security both APPROVE normal +protected implementation delivery. Immutable report SHA256 values: + +- Quality: 69393f7abcb8eb5b9371293da0971b766fe966539c78f55e1ba1b221a768f16d. +- Security: b0e0bf6f2e6672474dfff1d67926fb70e57ada1c71035a44562400d5f2caf7b6. + +[PR355](https://github.com/pcvantol/engineering-platform/pull/355) was normally +protected squash merged at2026-10-14T12:31:26Z to +c3d4e8161598adb92aa21a40aaa903df591c6c3a. Native Git and GitHub readback both +confirm treea74597dbf76fa83c1de4535ab611034de9a41505 equals the reviewed tree. +Exact-head match, existing protection and Owner AuthorizationSUCCESS retained; +no admin bypass. The implementation branch/history remain preserved. + +Ordinary nonempty NO_BUMP Finalization uses the same writer on +codex/hob-ep01-project-discovery-finalization-v1, actual basec3d4e816. Its own +exact reviews/checks/protected merge and NEW exact-final-main producer proof +remain pending; no future artifact or outcome is claimed here. + +## Preserved failures and corrections + +Original malformed/future freshness, WAL late-revocation/publication and +fixture-lifetime regressions retained. Round1 repairs admitted independently. +Round2 fixes actual Postman generator/request/grant/schema binding and five +empty-pre75 historical fixture shape errors. Its minimal Postman lifetime repair +uses non-daemon handler joins/server_close before successcleanup; unknown stop +retains fixture and both original request/cleanup errors. Actual original gap +reproduced with live handler/open socket after fixture deletion; two current real +handler/unknown-stop tests pass with setup ownership protected. + +Fullcycle1 local interrupted: no terminal suite/coverage/PASS. CI38539955153 +terminal2557tests/5historicalERRORs/2platformSKIPs plus browser4colorFAIL; +raw originals retained. The color cause remains UNKNOWN and diagnostics did not +reproduce it. Fullcycle2 f43/38545862893 had normal4shards+JScoverageSUCCESS, +then superseded/cancelled for review-required helper repair; not completePASS. +Fullcycle3 current frozen candidate uses unchanged owning thresholds and all +mandatory regressions. No r34 browser/CSS/assertion rewrites or retry waiver. +Cumulative2corrections/4full cycles counted (three candidate cycles plus the +actual automatic protected-main CI38564455565, still running at Finalization +start), no new administrative cap/reset; +installed service attempts counted separately with retained original identities. +Old r34 test-result trees were intentionally hard-deleted only under explicit +user storage disposition; remaining original logs/databases/reviews and active +HOB evidence retained. Missing historical bytes are not reconstructed. + +## Source availability and preserved refs + +Source availability was restored through supported existing iCloud downloads; +no source replacement or second writer. After protected merge, fetch reported +an existing invalid-name iCloud conflict ref for the closed r34 branch. Its +original41-byte ref and commitfb96d0d remain untouched; zlib/native Git confirm +the commit object is intact. The original valid branch77d59a8 remains. New +mainc3d4e816 and its exact reviewed tree were received and independently read +natively and through GitHub; Finalization branches directly from that verified +commit. Stale origin/main is explicitly not used as current authority. No ref +delete, history rewrite, lock removal or replacement clone. + +## Finalization and exact-final-main qualification + +This delivery record, current roadmap entry and producer contract form the +ordinary nonempty documentary Finalization. No product/version changes. +After its own exact reviews/checks/protected merge, build/install a NEW official +wheel from exact final-main and record its native source/tree/wheel/package +identity, real ordinary synthetic installed HTTP/readback, targeted authority/ +attachment/cursor/expiry/race guards and actual stop/cleanup. Those future bytes +and outcomes must be recorded separately in immutable #142/#208 receipts; never +transfer the candidate or initial small-chain PASS to final-main. + +## Qualified L4 handoff and limits + +Only LINK-capability selects this producer under the existing JOIN; existing +Forge pins stay unchanged. Topology revision/snapshot are64hex SHA256 strings, +not integer/source/artifact digests. Closed schema, exact instance/scope and +consumer request/document/epoch checks apply before accepting a late response. +On409rediscover; revoked/unavailable removes link readiness. No Console, +submission/admin bearer, SQL/CLI consumer fallback or cached positive identity. + +Provide final source/tree/wheel/schema hashes, actual sanitized HTTP outcomes, +issuer/revocation/readscope/compatibility and safe synthetic owning setup/stop +instructions in immutable qualified handoff. The local isolated installed +producer suffices; no production EP update, live usergrant or GUI prerequisite. +Current candidate TDE observe38547636315 assessment/qualification both exit2; +policyFAIL (source86540>75000, repository maximum complexity319>30); +coverage inputUNAVAILABLE with collectionexit1, not zero. The three new module +HIGH complexity signals (13/20/31, regressionUNKNOWN) remain OPEN and +unsuppressed. Independent Quality records separate nonblocking maintenance +risks, no additionally established functional/security defect. TDE FAILED is +reported separately from blocking source/installed/CI acceptance; the green +nonblocking workflow is not qualifiedPASS. diff --git a/docs/engineering/WORKSPACE_PROJECT_DISCOVERY_READ_V1.md b/docs/engineering/WORKSPACE_PROJECT_DISCOVERY_READ_V1.md index d97bdf4b..3d2d91f9 100644 --- a/docs/engineering/WORKSPACE_PROJECT_DISCOVERY_READ_V1.md +++ b/docs/engineering/WORKSPACE_PROJECT_DISCOVERY_READ_V1.md @@ -3,7 +3,12 @@ Assignment: `L2-WORKSPACE-PROJECT-DISCOVERY-READ-V1-20261012`. JOIN: `L2-L4-HOB-EP01-VERIFIED-LINK-V1-20261012`. -**Implementation candidate, not yet a qualified handoff.** Schema75 adds one +**Protected implementation qualified; exact-final-main handoff pending.** +[Delivery and ordinary Finalization](../development/WORKSPACE_PROJECT_DISCOVERY_READ_V1_DELIVERY.md) +records the exact source, actual installed tests, strict coverage, independent +reviews and protected PR355. Final-main installed/readback/cleanup and the +immutable JOIN handoff remain separate required evidence, not an inherited +candidate PASS. Schema75 adds one separate security ledger. Existing B8R project/repository/attachment rows remain the sole logical/physical topology; no new project register or identity exists. Contract version1.0 is additive and does not widen existing credentials.