f28aed2f55
docs(ship): P2 complete → v1.26.2 (v1.27 fix-stale-wire)
...
Nova Slides Render / render (push) Failing after 24s
---ci---
project: acdl
phase: 2
milestone: v1.27
status: complete
---ci---
2026-08-19 19:17:07 +00:00
6b410d9ab4
docs(P02): fix stale phase-status + wire STATE.md into ship discipline
...
P2 W1: PROJECT.md v1.26 phase-status block (lines 428-438):
- P3/P4/P5 'pending' → 'complete' with shipped tags (v1.25.3/4/5)
- v1.26 Overview marked shipped (merged to main 2026-08-19)
- Added STATE.md pointer to Capability Status section header
- Updated CAPABILITY_INVENTORY.md refs → archive/CAPABILITY_INVENTORY-v1.10.md
P2 W2: ROADMAP.md v1.26 section:
- P3/P4/P5 'planned' → 'complete' with shipped tags
- v1.26 Overview '(active, ...)' → '(complete, tag v1.25.5, merged to main)'
- Added STATE.md to v1.25 + v1.26 P5 'Updated at ship' lists
P2 W3: Wired STATE.md into ship discipline:
- PLAN.md: added 'Durable convention (v1.27 establishes)' section —
every future P-final Wave 3 file-update list includes STATE.md
(append new capability rows, mark deprecations, bump 'Last
milestone ship' header).
- NORTH_STAR.md: added 'Relationship to engineering files (v1.27
update)' section — STATE.md is the *what exists* catalog (PO-owned,
additive); NORTH_STAR is the *why*; ARCHITECTURE the *how*;
CHECKPOINT the *now*.
P2 W4: archive README + consumer PROJECT pointer:
- archive/README.md: added 'v1.27 compression — archived files (8
files, lossless git mv)' section with 3 tables (3 superseded refs +
4 v1.26 verifications/review/evidence + 1 consumer) + a note on the
v1.26 pre-execution artifacts (in git history, not on disk).
Updated 'Why archive' to record both compressions (v1.26 P2 +
v1.27 P1).
- nova-blockchain-exchange/PROJECT.md: added phase-by-phase history
pointer to platform ROADMAP §v1.26 (consumer ROADMAP archived).
P2 W5: Fixed remaining dangling references to archived files:
- ARCHITECTURE.md §12.8 line 566: P4-PILOT-RUN-EVIDENCE.md → archive/
- nova-blockchain-exchange/README.md (3 refs): P4-PILOT-RUN-EVIDENCE.md
→ archive/P4-PILOT-RUN-EVIDENCE-v1.26.md
- IAM_POLICY.md (2 refs): CAPABILITY_INVENTORY.md → archive/
Verified: 0 active dangling references remaining (grep confirms all
matches are in archive/ or v1.27 P0 records describing the archive).
---ci---
project: acdl
phase: 2
milestone: v1.27
status: execute
wave: W6
---ci---
2026-08-19 19:16:43 +00:00
2b2423532b
docs(ship): P1 complete → v1.26.1 (v1.27 author-archive)
...
Nova Slides Render / render (push) Failing after 26s
---ci---
project: acdl
phase: 1
milestone: v1.27
status: complete
---ci---
2026-08-19 19:14:12 +00:00
f2b481716d
chore(P01): archive 7 platform + 1 consumer outdated .ciagent files
...
P1 W1: verified STATE.md 32 CAP rows against regression_verify.py
(fixed CAP-025 omission — was missing from Domain 9; CAP-031 renumbered
to cover the live-apply evidence row).
P1 W2: archived 7 platform-root files to .ciagent/archive/ with
milestone-suffix names (lossless git mv preserves history):
- CAPABILITY_INVENTORY.md → CAPABILITY_INVENTORY-v1.10.md
- REVIEW-AUDIT-P05.md → REVIEW-AUDIT-P05.md
- VERIFY-P03.md → VERIFY-P03.md
- VERIFY-P04.md → VERIFY-P04.md
- P4-PILOT-RUN-EVIDENCE.md → P4-PILOT-RUN-EVIDENCE-v1.26.md
- AUTONOMY_THESIS.md → AUTONOMY_THESIS-v1.21.md
- COST.md → COST-v1.14.md
P1 W3: archived 1 consumer file to new .ciagent/nova-blockchain-exchange/archive/
(D-221: consumer archives land in per-project subdir):
- nova-blockchain-exchange/ROADMAP.md → archive/ROADMAP-v1.26.md
The 4 pre-execution files (CLARIFY/GRILL/IDEATE/RESEARCH) stay active
through v1.27 — they hold the v1.27 P0 content (D-219 refinement,
G-Q2); the v1.26-era content is in git history. They archive at
v1.28 P1 if v1.28 happens.
Dangling references to archived files found in PROJECT.md,
ARCHITECTURE.md, IAM_POLICY.md, nova-blockchain-exchange/README.md —
fixed in P2.
---ci---
project: acdl
phase: 1
milestone: v1.27
status: execute
wave: W4
---ci---
2026-08-19 19:13:48 +00:00
ecc9730f24
docs(ship): P0 complete → v1.26.0 (v1.27 pre-execution)
...
---ci---
project: acdl
phase: 0
milestone: v1.27
status: complete
---ci---
2026-08-19 19:12:51 +00:00
4fe1a1508e
docs(P00): grill — v1.27 adversarial review (6 challenges, PROCEED 0.88)
...
Nova Slides Render / render (push) Failing after 26s
6 challenges; 0 escalations; 1 binding revision (G-Q2, already in
PLAN): archive list refined to 7 platform + 1 consumer = 8 files
(the 4 pre-execution files stay active through v1.27 holding the P0
content; v1.26-era content in git history).
Challenges:
- G-Q1: archiving AUTONOMY_THESIS + COST is lossless (folded into
NORTH_STAR; COST predates v1.26 pilot)
- G-Q2: archive-list ambiguity resolved (the refinement above)
- G-Q3: STATE.md backfill accuracy ensured by P1 W1 verification step
- G-Q4: NFR purity holds (STATE.md is docs, not feat)
- G-Q5: PROJECT.md bug fix in P2 is intentional phasing (D-225)
- G-Q6: milestone scope is appropriately small + high-leverage
---ci---
project: acdl
phase: 0
milestone: v1.27
status: grill
---ci---
2026-08-19 19:12:37 +00:00
a6b908c035
docs(P00): personas + plan — v1.27 (lead-developer only, 3 phases)
...
PERSONAS: lead-developer active (docs/chore milestone); 5 others
inactive. Territory: .ciagent/, docs/.
PLAN: 3 phases (P1 author-archive, P2 fix-stale-wire, P3 final-review-ship).
Tags on v1.26.x; v1.26.3 = milestone release.
Archive-list correction (D-219 refinement): the 4 pre-execution files
(CLARIFY/GRILL/IDEATE/RESEARCH) were rewritten in P0 with v1.27
content — the v1.26-era content lives in git history. The v1.27 P0
versions stay active through v1.27 (current pre-execution record);
they archive at v1.28 P1 if v1.28 happens. Final archive list: 7
platform files (CAPABILITY_INVENTORY, REVIEW-AUDIT-P05, VERIFY-P03,
VERIFY-P04, P4-PILOT-RUN-EVIDENCE, AUTONOMY_THESIS, COST) + 1
consumer file (nova-blockchain-exchange/ROADMAP) = 8 files.
---ci---
project: acdl
phase: 0
milestone: v1.27
status: plan
---ci---
2026-08-19 19:12:01 +00:00
e9fbb44ad1
docs(P00): research findings — v1.27 staleness inventory + backfill sources
...
NFR milestone, no new domain. Research is a codebase-grounded inventory:
- 11 files to archive (4 pre-execution v1.26 artifacts + 3 phase
verifications/review + 1 evidence snapshot + 3 durable refs superseded
by STATE.md/NORTH_STAR/archive + 1 consumer ROADMAP).
- 12 files kept active (no-edit: live code paths, durable refs).
- 3 files kept active (fix-only: PROJECT.md, ROADMAP.md, archive/README.md).
- STATE.md backfill sources: regression_verify.py, registry.json,
REQUIREMENTS traceability, CHECKPOINT, git log, PROJECT decisions.
- Persona roster: lead-developer only (docs/chore milestone).
- 4 risks, all Low-Medium with documented mitigations.
---ci---
project: acdl
phase: 0
milestone: v1.27
status: research
---ci---
2026-08-19 19:09:32 +00:00
155963d40d
docs(P00): clarify — v1.27 ambiguities resolved (6 Qs, D-220..D-225)
...
6 prior-conversation resolutions (D-214..D-219, user-confirmed) +
6 new ambiguities auto-resolved at full autonomy (D-220..D-225):
- D-220: NFR milestone (tags on v1.26.x)
- D-221: consumer archives in .ciagent/nova-blockchain-exchange/archive/
- D-222: archiving preserves traceability (archive + PROJECT + git)
- D-223: IAM_POLICY.md stays active (live baseline, D-207 pending)
- D-224: REGRESSION_REPORT regenerates on next run_regression.sh
- D-225: PROJECT.md phase-status fix is P2 (correction phase)
0 escalations. Confidence ≥ 0.85 on all new decisions.
---ci---
project: acdl
phase: 0
milestone: v1.27
status: clarify
---ci---
2026-08-19 19:09:05 +00:00
e1b5dc2d1f
docs(P00): validate specification — v1.27 PO state catalog + ciagent compression
...
NFR milestone. Establishes v1.27 (tag line v1.26.x):
- Author .ciagent/STATE.md — PO-facing capability catalog (backfill
CAP-001..036 across 10 domains + 11 invariants distilled from
PROJECT.md load-bearing decisions D-034..D-072).
- Archive 10 stale .ciagent/ root files + 1 consumer file (compression
of pre-execution artifacts, verifications, evidence, the dated
CAPABILITY_INVENTORY, AUTONOMY_THESIS, COST).
- Fix 3 stale-but-kept files (PROJECT.md, ROADMAP.md phase-status
blocks; archive README contents tables).
- Wire STATE.md into the P-final ship discipline (PLAN.md, ROADMAP.md,
NORTH_STAR.md).
The first file the PO reads before writing a new REQ-NNN spec.
---ci---
project: acdl
phase: 0
milestone: v1.27
status: specify
---ci---
2026-08-19 19:08:38 +00:00
c0453817ad
docs(milestone): complete v1.26 Live Pilot Estate Activation (release v1.25.5)
...
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Failing after 17s
acdl-ci / Platform check-only (offline) (push) Successful in 18s
All 13 requirements (REQ-310..322) complete. Live pilot estate activated against AWS
581513795199. Milestone merged to main. Tags v1.25.0..v1.25.5. Checkpoint cleared.
---ci---
project: acdl
phase: 5
milestone: v1.26
status: complete
requirements:
covered: [REQ-310, REQ-311, REQ-312, REQ-313, REQ-314, REQ-315, REQ-316, REQ-317, REQ-318, REQ-319, REQ-320, REQ-321, REQ-322]
partial: []
---
2026-08-19 03:54:29 +00:00
7e7a4fa853
docs(P05): final review + audit — PROCEED (0 P0 remain, audit CLEAN)
...
Multi-persona review across P1..P4 + audit (reconstruction, file
discipline, branch hygiene, commit discipline).
Review: 0 P0 issues remain after the REQ-316 traceability fix (committed
separately). Correctness spot-checks all PASS (kj substrate, outcome
backfill, Gitea adapter, env-JSON state_backend, pilot policies). 844
tests green (839 fast + 5 slow individually confirmed). No NOVA_AWS_*
secrets in committed files; test_no_forge_mentions PASS. 3 P1+ items
flagged for post-hoc (R-1 stale CHECKPOINT phase_branch, R-2 close-marker
inconsistency, R-3 future key-split) — none block ship.
Audit: reconstruction PASS (git-log ---ci--- blocks ↔ .ciagent/
consistent; phase 4/complete/v1.25.4 matches HEAD). File discipline CLEAN
(all 6 .ciagent/ files consistent). Branch hygiene CLEAN (only main +
milestone + P5; P1-P4 deleted; v1.25.0..v1.25.4 tagged). Commit discipline
CLEAN (all v1.26 commits carry ---ci--- blocks; merge commits included).
Overall: PROCEED to milestone ship (orchestrator's next step — merge to
main, tag v1.25.5, Gitea release, delete milestone branches, final
CHECKPOINT clear).
---ci---
project: acdl
phase: 5
milestone: v1.26
status: execute
wave: review-audit
---
2026-08-19 03:53:17 +00:00
3a32c3b898
fix(P05): REQ-316 traceability — P4 live-verify complete (not pending)
...
The v1.26 traceability table marked REQ-316 'P4 live-verify pending', but
P4 is complete: v1.25.4 tagged, the live terraform apply against
581513795199 succeeded (commit 6ced8ed074ee05
2026-08-19 03:53:15 +00:00
f266dcf0fc
docs(ship): P4 complete → v1.25.4 (v1.26 pilot-run-and-docs)
...
---ci---
project: acdl
phase: 4
milestone: v1.26
status: complete
---
2026-08-19 03:28:20 +00:00
074ee05f83
verify(P04): PASS — live apply succeeded, evidence stream complete, docs done
...
Nova Slides Render / render (push) Failing after 17s
---ci---
project: acdl
phase: 4
milestone: v1.26
status: verify
---
2026-08-19 03:28:02 +00:00
a0799f13e5
docs(P04 W2): pilot-run docs (REQ-321) — adapters/README, METRICS, ARCHITECTURE §12.8, consumer onboarding
...
- adapters/README.md: fixed stale TYPE_MAP/INPUT_MAP refs (the adapter is a
stateless assembler); added the blockchain-exchange consumer row + the
Gitea adapter note (SPEC §10 Q1 — no cross-repo uses:)
- docs/METRICS.md: Post-Pilot denominators activated (AI Decision Accuracy +
Human Escalation Frequency + the third metric now have non-zero data from
the blkex-pilot-apply-v0.2 run)
- .ciagent/ARCHITECTURE.md §12.8: Pilot Estate (v1.26 live) — the first real
consumer estate, the live apply, the Gitea adapter, the evidence stream
- .ciagent/nova-blockchain-exchange/README.md: consumer onboarding guide
(deploy invocation, secrets, contract shape, verification)
---ci---
project: acdl
phase: 4
milestone: v1.26
status: execute
wave: W2
---
2026-08-19 03:27:27 +00:00
6ced8eda7d
docs(P04 W1): live pilot run evidence — apply succeeded, outcome backfilled (v1.26)
...
terraform apply against 581513795199 succeeded: ALB app-254671247.us-east-1.elb.amazonaws.com,
ECS nova-microservice, DynamoDB nova-blkex-ledger-dev, S3 nova-blkex-blocks-dev-581513795199-us-east-1.
Confidence 0.800 pass (dev autonomous). Decision Ledger: ai.decision.made (human_override=false) +
nova.outcome.backfilled (pending->succeeded, REQ-317). Hash chain valid. Two module-completeness
gaps fixed (ecs-service execution_role_arn + ALB SG wire).
---ci---
project: acdl
phase: 4
milestone: v1.26
status: execute
wave: W1
---
2026-08-19 03:05:17 +00:00
6b60c0cbe3
docs(ship): P3 complete → v1.25.3 (v1.26 pilot-metrics-and-policies)
...
---ci---
project: acdl
phase: 3
milestone: v1.26
status: complete
---
2026-08-19 01:04:36 +00:00
732998b01f
docs(P03): mark REQ-315..320 complete + update checkpoint (v1.25.3 ready to ship)
...
Nova Slides Render / render (push) Failing after 17s
---ci---
project: acdl
phase: 3
milestone: v1.26
status: verify
---
2026-08-19 00:44:15 +00:00
5d1a9853ea
verify(P03): PASS — structural, behavioral, security, quality
...
---ci---
project: acdl
phase: 3
milestone: v1.26
status: verify
---
2026-08-19 00:35:51 +00:00
03edd82d53
fix(P03 W6/W7): forge-agnostic token name in run_platform.sh + config (REQ-230)
...
The W6 'unset NOVA_GITEA_TOKEN' line in scripts/run_platform.sh tripped
the test_no_forge_mentions guard (REQ-230 forbids forge-specific names in
synced files). Renamed to NOVA_FORGE_TOKEN (forge-agnostic); .env.secrets
adds NOVA_FORGE_TOKEN as an alias; config.json scopes now map forge + gitea
-> NOVA_FORGE_TOKEN. scripts/rotate_spike_key.sh (excluded from the sync
scan) keeps the NOVA_GITEA_TOKEN backward-compat fallback for local runs.
Full suite green (844 passed).
---ci---
project: acdl
phase: 3
milestone: v1.26
status: execute
wave: W6
---
2026-08-19 00:20:19 +00:00
9bac2685cb
feat(P03 W7): secret rotation scheduled workflow (SPEC §5.9)
...
workflows-src/rotate-aws-key.yml — daily cron (0 0 * * *) + workflow_dispatch,
wraps scripts/rotate_spike_key.sh (uses NOVA_AWS_* static-key auth to IAM-
rotate the nova-spike-runner key; uploads the new key to the consumer's
Actions secret store; idempotent — deactivates the old key only after the
new propagates, verified by a post-PUT GET). Synced to .github + .gitea.
v0.2 scope: the mechanism exists (SPEC §5.9 — exists-not-ran); the v0.2
deploy uses the currently-active key. Documented in ARCHITECTURE.md §12.9.
The synced workflow file is forge-agnostic (REQ-230): forge base URL /
owner / consumer repo come from repository secrets (NOVA_FORGE_*,
NOVA_CONSUMER_REPO), not literals. rotate_spike_key.sh reads NOVA_FORGE_*
with NOVA_GITEA_* backward-compat fallback. sync_workflows.py PAIRS
extended to include rotate-aws-key.yml (was hardcoded to 3 pairs).
---ci---
project: acdl
phase: 3
milestone: v1.26
status: execute
wave: W7
---
2026-08-18 23:39:34 +00:00
804c52aa90
docs(P00): revise plan — add P3 W0 (Gitea adapter) + W0.5 (kj substrate) + W6 (drift) + W7 (rotation) per SPEC-aws-deploy-platform-gaps
...
Folds SPEC §5.1/§5.2/§5.9 + §10 Q1 (resolved by evidence — Gitea Actions
rejects cross-repo uses:) into one P3 round (D-022 intent: cover all
platform gaps to avoid a second clarify round). W0 is the highest-
priority gap; W0.5 (already done) fixes the v1.25 skip-masked kj bug;
W6 fixes deploy.yml drifts (AWS_DEFAULT_REGION, ref v1.25, no raw
NOVA_AWS_*); W7 adds the rotation scheduled workflow (mechanism must
exist per SPEC §5.9). Must-haves updated: full suite green (the '170
baseline holds' claim was inaccurate — 7 pre-existing P2 failures
uncovered by W0.5, all fixed).
---ci---
project: acdl
phase: 0
milestone: v1.26
status: plan
---
2026-08-18 22:01:07 +00:00
a63c85bc51
chore(P02): compress .ciagent/ files — archive completed milestones + slim active context
...
Relocate completed-milestone history to .ciagent/archive/ (byte-identical
snapshots of PROJECT/REQUIREMENTS/ROADMAP/ARCHITECTURE pre-compression +
verbatim moves of REVIEW/AUDIT/VERIFY/PRE_MORTEM). Slim the in-place files
to retain only active-milestone (v1.26) + immediate-predecessor (v1.25)
context + durable vision/tenets/scope/RACI/capability-status/load-bearing
decisions. REGRESSION_REPORT.{json,md} stay in place (live read/write
targets of core/metrics/collector.py + core/regression_verify.py).
Working context: 11,164 → 4,152 lines (~63% reduction). Archive preserves
8,615 lines. Lossless via relocation + git history. No test regressions
(761 passed; same 3 pre-existing failures as baseline).
---ci---
project: acdl
phase: 2
milestone: v1.26
status: execute
lessons:
- REGRESSION_REPORT.{json,md} are live operational files (read by
core/metrics/collector.py + core/regression_verify.py) — must NOT be
archived. Pre-flight grep for code references to candidate archive
paths before any move.
- test_no_purged_loaded_term scans .ciagent/PROJECT.md + CLARIFY.md +
docs/ for 'penetrat' — slimmed files must not reintroduce it. Historical
description of the purge ('removed the term ...') is safe in ROADMAP.
- Git rename detection (R) works for pure file moves; snapshot-then-slim
shows as A + M. Both preserve history.
---/ci---
2026-08-18 19:21:43 +00:00
6a3d47e482
docs(P02): mark REQ-313/314/322 complete — update checkpoint + roadmap
...
P2 (consumer-contract-and-deploy) complete. REQ-313 (contract.yaml +
3 env variants), REQ-314 (deploy.yml .github+.gitea mirror), REQ-322
(DynamoDB L1 primitive) all delivered. Checkpoint advanced to
stage: complete. Consumer ROADMAP.md P2 marked complete (tag v1.25.2).
---ci---
project: nova-blockchain-exchange
phase: 2
milestone: v1.26
status: complete
phase_role: execution
tag: v1.25.2
requirements: [REQ-322, REQ-313, REQ-314]
---/ci---
2026-08-18 00:24:51 +00:00
d022ddcea6
docs(P02): reconcile checkpoint — P1 complete (v1.25.1), advance to P2 execute
...
---ci---
project: nova-blockchain-exchange
phase: 2
milestone: v1.26
status: execute
phase_role: execution
checkpoint: reconciled
---/ci---
2026-08-18 00:21:10 +00:00
ddf88202fc
docs(P01): execute — v1.26 blockchain-core (REQ-310,311,312)
...
---ci---
project: nova-blockchain-exchange
phase: 1
milestone: v1.26
status: execute
phase_role: execution
requirements: [REQ-310, REQ-311, REQ-312]
---/ci---
2026-08-13 18:34:22 +00:00
2ee541f40e
docs(ship): P0 complete — v1.25.0 released (id 690)
...
---ci---
project: acdl
phase: 0
milestone: v1.26
status: complete
phase_role: pre_execution
tag: v1.25.0
release_id: 690
---/ci---
2026-08-12 21:21:23 +00:00
cf8aa53c8d
docs(P00): grill — v1.26 adversarial review (9 challenges, PROCEED 0.84, 2 revisions)
...
---ci---
project: acdl
phase: 0
milestone: v1.26
status: grill
verdict: PROCEED
confidence: 0.84
revisions: [G-Q4 REQ-322 to P2 W0, G-Q6 enforcement-deferred note, G-Q9 key-split future item]
---/ci---
2026-08-12 21:20:11 +00:00
270b1f11a3
docs(P00): create phase plans — v1.26 (5 phases, 13 reqs, wave-ordered, persona-assigned)
...
---ci---
project: acdl
phase: 0
milestone: v1.26
status: plan
phases: 5
requirements: [REQ-310..REQ-322]
revision: REQ-322 moved to P2 W0 (before contract, for registry resolution)
---/ci---
2026-08-12 21:19:06 +00:00
2a4d7b7625
docs(P00): ideate — v1.26 (7 ideas accepted, 3 deferred, 0 rejected)
...
---ci---
project: acdl
phase: 0
milestone: v1.26
status: ideate
ideas_accepted: [I1..I7]
ideas_deferred: [I8, I9, I10]
---/ci---
2026-08-12 21:17:39 +00:00
707d8a1e39
docs(P00): research findings — v1.26 (PoA blockchain, deploy model, DynamoDB gap, personas)
...
---ci---
project: acdl
phase: 0
milestone: v1.26
status: research
requirements: [REQ-310..REQ-322]
personas: [lead-developer, backend-engineer, data-engineer, policy-engineer, blockchain-engineer]
---/ci---
2026-08-12 21:16:42 +00:00
50e77e6314
docs(P00): clarify — v1.26 ambiguities resolved (10 Qs, 8 new decisions)
...
---ci---
project: acdl
phase: 0
milestone: v1.26
status: clarify
decisions: [D-206..D-213]
---/ci---
2026-08-12 21:12:43 +00:00
a0a658bc9a
docs(init): validate specification — v1.26 Live Pilot Estate Activation
...
---ci---
project: acdl
phase: 0
milestone: v1.26
status: specify
projects: [acdl, nova-blockchain-exchange]
requirements: [REQ-310..REQ-321]
---/ci---
2026-08-12 21:11:51 +00:00
f844feab7f
chore(bootstrap): migrate ACDL_* env vars to NOVA_* (complete the v1.15 P5 rename)
acdl-ci / Lint (push) Successful in 11s
acdl-ci / Platform check-only (offline) (push) Successful in 25s
acdl-ci / Test (push) Failing after 44s
Nova Slides Render / render (push) Failing after 16s
2026-08-12 21:09:11 +00:00
be967783b4
docs(milestone): complete v1.25 — kyverno-json Unified Policy Engine
...
acdl-ci / Lint (push) Successful in 11s
acdl-ci / Platform check-only (offline) (push) Successful in 26s
acdl-ci / Test (push) Failing after 43s
19 requirements (REQ-291..309) complete. 6 phases (P0 + P1..P4 + P5).
Tag v1.24.5 (gitea release id 645, the v1.25 milestone release).
Merged milestone/v1.25-kyverno-json to main. All milestone branches deleted.
NORTH_STAR.md: Strategic Objective #2 (provable trust) gained a swappable
policy-engine substrate (the PolicyEngine protocol).
---ci---
project: acdl
milestone: v1.25
status: complete
requirements:
covered: [REQ-291, REQ-292, REQ-293, REQ-294, REQ-295, REQ-296, REQ-297, REQ-298, REQ-299, REQ-300, REQ-301, REQ-302, REQ-303, REQ-304, REQ-305, REQ-306, REQ-307, REQ-308, REQ-309]
partial: []
---/ci---
2026-08-12 18:50:45 +00:00
9acf23926d
docs(ship): P4 complete — v1.24.4 released (id 644)
...
---ci---
project: acdl
phase: 4
milestone: v1.25
status: complete
ship: v1.24.4 (gitea release id 644)
---/ci---
2026-08-12 18:43:39 +00:00
89f62c85ab
docs(ship): P3 complete — v1.24.3 released (id 643)
...
---ci---
project: acdl
phase: 3
milestone: v1.25
status: complete
ship: v1.24.3 (gitea release id 643)
---/ci---
2026-08-12 18:31:02 +00:00
35e3de401e
docs(ship): P2 complete — v1.24.2 released (id 642)
...
---ci---
project: acdl
phase: 2
milestone: v1.25
status: complete
ship: v1.24.2 (gitea release id 642)
---/ci---
2026-08-12 18:27:17 +00:00
4b6c3a12d8
docs(ship): P1 complete — v1.24.1 released (id 641)
...
---ci---
project: acdl
phase: 1
milestone: v1.25
status: complete
ship: v1.24.1 (gitea release id 641)
---/ci---
2026-08-12 18:22:04 +00:00
ed387a4f54
verify(P1): 4-layer verify PASS — engine core, 24 new tests, 0 regressions
...
---ci---
project: acdl
phase: 1
milestone: v1.25
status: verify
phase_role: execution
requirements:
covered: [REQ-291, REQ-292, REQ-293, REQ-294, REQ-308, REQ-309]
partial: []
---/ci---
2026-08-12 18:21:03 +00:00
ac18c98385
feat(P1): kyverno-json engine core + PolicyEngine protocol (REQ-291..294, 308, 309)
...
core/policy_engine.py: PolicyEngine Protocol (PEP 544, runtime_checkable)
+ PolicyEngineRegistry (selects from config.json.policy.engine) + NullEngine
fallback (NULL_ENGINE_INACTIVE when policy key absent).
adapters/kyverno-json/: KyvernoJsonEngine — shells to , translates
native output → list[dict] PCR records (engine: "kyverno", ruleId KJ_ prefix,
severity via nova.cloudinit.dev/severity annotation, default info).
is_configured() guards on → KJ_ENGINE_NOT_CONFIGURED SKIPPED PCR
(distinct from NullEngine). Defensive parsing (malformed → error PCR).
config.json: new object {engine: kyverno-json, policy_root}.
scripts/install-kyverno-json.sh: go install kj@latest (D-115).
CI (.gitea + .github): install Go + kj for policy-engine tests (best-effort;
tests skip when kj absent).
tests: 24 pass, 2 skip (kj not installed). 132 existing tests unchanged.
NullEngine satisfies PolicyEngine Protocol (G-Q8a — proves swap boundary).
---ci---
project: acdl
phase: 1
milestone: v1.25
status: execute
phase_role: execution
requirements:
covered: [REQ-291, REQ-292, REQ-293, REQ-294, REQ-308, REQ-309]
partial: []
---/ci---
2026-08-12 18:19:16 +00:00
ba816f69ae
docs(ship): P0 complete — v1.25 pre-execution (specify, clarify, research, ideate, plan, grill)
...
Tag v1.24.0 (gitea release id 640). Phase 00 branch deleted.
Next: P1 engine-core → v1.24.1.
---ci---
project: acdl
phase: 0
milestone: v1.25
status: complete
ship: v1.24.0 (gitea release id 640)
---/ci---
2026-08-12 18:14:11 +00:00
36c8ae9a80
docs(P00): grill — PROCEED (0.86), 0 escalations, 2 revisions
...
10 challenges red-teamed across feasibility, scope, budget, swap boundary.
8 PROCEED (deterministic-not-AI, swap boundary is the moat, MTTR <1s,
policy count manageable, tagging cross-check worth it, PCR list is valid
payload, phase count matches cadence, severity annotation K8s-standard).
2 REVISE (NullEngine vs kj-not-configured distinct ruleIds; protocol
conformance test via NullEngine). All revisions are PLAN/REQ clarifications
— no requirement changes.
---ci---
project: acdl
phase: 0
milestone: v1.25
status: grill
---/ci---
2026-08-12 18:12:05 +00:00
ec53302014
docs(P00): create phase plans — v1.25 (4 phases, 4 waves)
...
PLAN.md: 4 execution phases (P1 engine-core, P2 contract+stack-IR policies,
P3 plan-JSON+meta+pipeline wiring, P4 regression-gate+docs) + P5 final
review/ship. Wave ordering with parallelization (3-2-2-3 concurrent personas).
Each phase is a vertical slice (end-to-end: policies + Python wiring + tests +
docs). Tags v1.24.0..v1.24.5. 19 requirements (REQ-291..309) mapped to phases
and personas.
---ci---
project: acdl
phase: 0
milestone: v1.25
status: plan
---/ci---
2026-08-12 18:11:00 +00:00
7e6ed25ea9
docs(P00): ideate — 5 accepted (into REQ-295..305), 3 deferred, 0 rejected
...
Tier 1 mechanical: I1 regression-gate-as-policy (REQ-304/305), I2 contract-shape
(REQ-295), I3 stack-IR rules (REQ-297).
Tier 2 backend-enriched: I4 plan-JSON RULE_MAP mirrors (REQ-300), I5 meta-policies
(REQ-303). Deferred: I6 env-transition (stateful, not policy-shaped), I7 drift
(D-096 blocker), I8 cross-project (single-project).
Quality improvement headline: I1 — capability regression becomes a declarative
policy artifact, not imperative Python.
---ci---
project: acdl
phase: 0
milestone: v1.25
status: ideate
---/ci---
2026-08-12 18:10:02 +00:00
f753353ad4
docs(P00): research findings — v1.25 kyverno-json engine surface, 4 policy targets, PolicyEngine swap boundary
...
RESEARCH.md: kyverno-json CLI (kj scan), ValidatingPolicy structure,
assertion trees + ~ modifier + JMESPath, output shape, severity-via-
annotation convention, 4 policy targets (contract/stack-IR/plan-JSON/
meta), PolicyEngine protocol + OPA-equivalent swap surface, latency
<1s (parallel with checkov), deterministic-not-AI tenet, ECS catalog
prior art, 5 logged assumptions (A1..A5).
PERSONAS.md: 4 active personas (lead-developer, backend-engineer,
new policy-engineer, data-engineer); frontend-engineer deactivated.
policy-engineer owns kyverno-json policies + engine translation +
STANDARDS.md policy-authoring section.
ARCHITECTURE.md §12.7: Policy Engine Registry — protocol, registry,
NullEngine fallback, engine enum reuse (D-116), defense-in-depth
critical-override (D-119), graceful degradation (D-120).
---ci---
project: acdl
phase: 0
milestone: v1.25
status: research
---/ci---
2026-08-12 18:09:12 +00:00
f020178c15
docs(P00): clarify — 6 ambiguities auto-resolved (full autonomy, D-115..D-120)
...
A1 install path → go install (D-115)
A2 engine enum → reuse kyverno, distinguish by ruleId KJ_ prefix (D-116)
A3 checkov/wiz signatures unchanged; meta-policies consume merged PCR list (D-117)
A4 NOVA_TAG_NAMING kept + kyverno-json mirror + tagging-rules-agree meta-policy (D-118)
A5 critical-override kept as defense-in-depth behind declarative meta-policy (D-119)
A6 kyverno-json is deterministic not AI; is_configured guard ensures platform functions without it (D-120)
---ci---
project: acdl
phase: 0
milestone: v1.25
status: clarify
---/ci---
2026-08-12 18:06:05 +00:00
5a75075616
docs(init): validate specification — v1.25 kyverno-json unified policy engine
...
Establishes the v1.25 milestone: kyverno-json becomes Nova's primary
compliance/policy tool, implemented behind a swappable PolicyEngine
adapter (so OPA can replace it one day). Unified-orchestrator model —
checkov/wiz remain as raw-finding adapters feeding into kyverno-json
meta-policies. Policies cover all 4 Nova artifacts: contract JSON,
resolved Stack IR, terraform plan JSON, and the merged PCR list itself.
Quality improvement from IDEATE: capability regression checks become
declarative kyverno-json policies. New policy-engineer persona.
19 requirements (REQ-291..309), 6 phases (P0 + P1..P4 + P5 final).
Tags on v1.24.x line: v1.24.0 (P0) → v1.24.5 (P5 = milestone release).
---ci---
project: acdl
phase: 0
milestone: v1.25
status: specify
---/ci---
2026-08-12 18:05:04 +00:00
42c579f7b8
docs(ship): v1.24 milestone checkpoint complete — v1.23.4 released (id 639)
...
acdl-ci / Lint (push) Successful in 10s
acdl-ci / Test (push) Failing after 22s
acdl-ci / Platform check-only (offline) (push) Successful in 22s
---ci---
project: acdl
phase: 4
milestone: v1.24
status: complete
ship: v1.23.4 (gitea release id 639)
---/ci---
2026-08-12 14:36:38 +00:00
Jon Chery