coreci/orca
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 91 Wiki Activity

docs(init): validate v0.2 specification

Browse Source 
Validates the v0.2 milestone specification against the deferred-v0.2
requirements in ROADMAP.md and the requirement status table. Updates:

- ROADMAP.md: v0.2 marked in-progress with 4 phases (P01 mTLS, P02
  multi-node scheduling, P03 gosec+govulncheck, P04 iter.Seq). Adds
  target milestone tag (v0.3.0) and per-phase tags (v0.2.1..v0.2.4)
  per the feature-milestone promotion rule and the RELEASE_POLICY.md
  standing rule on per-phase releases.
- REQUIREMENTS.md: flips REQ-011, REQ-014, REQ-022, REQ-023 from
  'Deferred (v0.2)' to 'Pending (v0.2 PXX)'. Adds a v0.2 summary
  section.

No code or schema changes. Pure SPECIFY output per run.md Step 3.
CLARIFY and RESEARCH follow.

---ci---
project: orca
phase: 0
milestone: v0.2
status: specify
---/ci---
This commit is contained in:
ciagent
2026-06-03 20:52:01 +00:00
parent e600e250b0
commit 907f25e20d
2 changed files with 23 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.ciagent/REQUIREMENTS.md
+11 -5
View File
@@ -14,10 +14,10 @@
| REQ-008 | Structured JSON logging (slog) | High | **Complete** |
| REQ-009 | HCL/YAML job spec parsing | Medium | **Complete** |
| REQ-010 | `--json` output flag for machine consumption | High | **Complete** |
| REQ-011 | mTLS for inter-node communication | Medium | Deferred (v0.2) |
| REQ-011 | mTLS for inter-node communication | Medium | Pending (v0.2 P01) |
| REQ-012 | `~/.orca/config.hcl` and `/etc/orca/orca.hcl` config locations | Low | **Complete** (CLI uses ~/.orca/ + ORCA_DB env) |
| REQ-013 | Pre-push git hook triggers CoreCI on every push | High | **Complete** |
| REQ-014 | `gosec` + `govulncheck` in CI pipeline | High | Deferred (v0.2 — out of scope for v0.1 minimalism) |
| REQ-014 | `gosec` + `govulncheck` in CI pipeline | High | Pending (v0.2 P03) |
| REQ-015 | MIT LICENSE | Low | **Complete** |
| REQ-016 | README.md with quickstart | Medium | **Complete** |
| REQ-017 | `context.Context` propagation in all I/O | High | **Complete** |
@@ -25,12 +25,18 @@
| REQ-019 | Cobra CLI framework | High | **Complete** |
| REQ-020 | HCL parser integration (`hashicorp/hcl`) | Medium | **Complete** |
| REQ-021 | `os/exec` with `WaitDelay` (Go 1.25+) | Medium | **Complete** |
| REQ-022 | `iter.Seq` for streaming job lists (Go 1.25+) | Low | Deferred (v0.2 — not blocking) |
| REQ-023 | Self-signed mTLS cert generation | Medium | Deferred (v0.2 — paired with REQ-011) |
| REQ-022 | `iter.Seq` for streaming job lists (Go 1.25+) | Low | Pending (v0.2 P04) |
| REQ-023 | Self-signed mTLS cert generation | Medium | Pending (v0.2 P01, paired with REQ-011) |
| REQ-024 | `Makefile` with standard targets | High | **Complete** |
## Milestone v0.1: Summary
**Status: Complete** — all 6 phases shipped (P00–P06), 4-layer verification passed at every phase, tagged `v0.2.0` for next-minor promotion per `run.md` versioning logic.
**Coverage**: 21/24 requirements complete; 3 deferred to v0.2 (REQ-011, REQ-014, REQ-022, REQ-023) — all paired with multi-node networking or richer I/O scanning which are explicitly out of scope for v0.1.
**Coverage**: 21/24 requirements complete; 4 deferred to v0.2 (REQ-011, REQ-014, REQ-022, REQ-023) — all paired with multi-node networking, richer I/O scanning, or streaming I/O which are explicitly out of scope for v0.1.
## Milestone v0.2: Networking, Observability, Security Hardening
**Status: In Progress** — SPECIFY stage committed. 4 phases (P01–P04) covering mTLS, multi-node scheduling, security scanning, and streaming I/O.
Pending v0.2 REQs (carried over from v0.1 deferral): REQ-011, REQ-014, REQ-022, REQ-023. New v0.2 REQs will be added by the IDEATE stage.
.ciagent/ROADMAP.md
+12 -6
View File
@@ -20,11 +20,17 @@
- `iter.Seq` streaming job lists (REQ-022)
- Frontend / devops personas (no web UI; CoreCI handles release)
## Milestone v0.2 (proposed)
## Milestone v0.2: Networking, Observability, Security Hardening — **IN PROGRESS**
Scope: networking, observability, security hardening.
Scope: extend v0.1 with secure cross-node transport, multi-node scheduling,
richer CI security scanning, and streaming I/O.
- Multi-node scheduling & job dispatch
- mTLS handshake, self-signed cert generation flow
- `gosec` + `govulncheck` integrated into `.coreci.yml` `validate` pipeline
- `iter.Seq` for streaming exports
- [ ] Phase 8: mTLS handshake + internal CA with CSR join (Wave 1)
- [ ] Phase 9: Multi-node scheduling & job dispatch (Wave 1)
- [ ] Phase 10: `gosec` + `govulncheck` + gitleaks in CI (Wave 2)
- [ ] Phase 11: `iter.Seq` streaming job/node lists (Wave 2)
**Target milestone tag**: `v0.3.0` (next-minor per feature-milestone promotion rule).
Per-phase tags: `v0.2.1` (P01), `v0.2.2` (P02), `v0.2.3` (P03), `v0.2.4` (P04).
Per `.ciagent/RELEASE_POLICY.md`, every phase tag produces a Gitea release.