From 907f25e20da5df33eeaa37301ea708b04012407c Mon Sep 17 00:00:00 2001 From: ciagent Date: Wed, 3 Jun 2026 20:52:01 +0000 Subject: [PATCH] docs(init): validate v0.2 specification Validates the v0.2 milestone specification against the deferred-v0.2 requirements in ROADMAP.md and the requirement status table. Updates: - ROADMAP.md: v0.2 marked in-progress with 4 phases (P01 mTLS, P02 multi-node scheduling, P03 gosec+govulncheck, P04 iter.Seq). Adds target milestone tag (v0.3.0) and per-phase tags (v0.2.1..v0.2.4) per the feature-milestone promotion rule and the RELEASE_POLICY.md standing rule on per-phase releases. - REQUIREMENTS.md: flips REQ-011, REQ-014, REQ-022, REQ-023 from 'Deferred (v0.2)' to 'Pending (v0.2 PXX)'. Adds a v0.2 summary section. No code or schema changes. Pure SPECIFY output per run.md Step 3. CLARIFY and RESEARCH follow. ---ci--- project: orca phase: 0 milestone: v0.2 status: specify ---/ci--- --- .ciagent/REQUIREMENTS.md | 16 +++++++++++----- .ciagent/ROADMAP.md | 18 ++++++++++++------ 2 files changed, 23 insertions(+), 11 deletions(-) diff --git a/.ciagent/REQUIREMENTS.md b/.ciagent/REQUIREMENTS.md index c1b6f65..3a12ad8 100644 --- a/.ciagent/REQUIREMENTS.md +++ b/.ciagent/REQUIREMENTS.md @@ -14,10 +14,10 @@ | REQ-008 | Structured JSON logging (slog) | High | **Complete** | | REQ-009 | HCL/YAML job spec parsing | Medium | **Complete** | | REQ-010 | `--json` output flag for machine consumption | High | **Complete** | -| REQ-011 | mTLS for inter-node communication | Medium | Deferred (v0.2) | +| REQ-011 | mTLS for inter-node communication | Medium | Pending (v0.2 P01) | | REQ-012 | `~/.orca/config.hcl` and `/etc/orca/orca.hcl` config locations | Low | **Complete** (CLI uses ~/.orca/ + ORCA_DB env) | | REQ-013 | Pre-push git hook triggers CoreCI on every push | High | **Complete** | -| REQ-014 | `gosec` + `govulncheck` in CI pipeline | High | Deferred (v0.2 — out of scope for v0.1 minimalism) | +| REQ-014 | `gosec` + `govulncheck` in CI pipeline | High | Pending (v0.2 P03) | | REQ-015 | MIT LICENSE | Low | **Complete** | | REQ-016 | README.md with quickstart | Medium | **Complete** | | REQ-017 | `context.Context` propagation in all I/O | High | **Complete** | @@ -25,12 +25,18 @@ | REQ-019 | Cobra CLI framework | High | **Complete** | | REQ-020 | HCL parser integration (`hashicorp/hcl`) | Medium | **Complete** | | REQ-021 | `os/exec` with `WaitDelay` (Go 1.25+) | Medium | **Complete** | -| REQ-022 | `iter.Seq` for streaming job lists (Go 1.25+) | Low | Deferred (v0.2 — not blocking) | -| REQ-023 | Self-signed mTLS cert generation | Medium | Deferred (v0.2 — paired with REQ-011) | +| REQ-022 | `iter.Seq` for streaming job lists (Go 1.25+) | Low | Pending (v0.2 P04) | +| REQ-023 | Self-signed mTLS cert generation | Medium | Pending (v0.2 P01, paired with REQ-011) | | REQ-024 | `Makefile` with standard targets | High | **Complete** | ## Milestone v0.1: Summary **Status: Complete** — all 6 phases shipped (P00–P06), 4-layer verification passed at every phase, tagged `v0.2.0` for next-minor promotion per `run.md` versioning logic. -**Coverage**: 21/24 requirements complete; 3 deferred to v0.2 (REQ-011, REQ-014, REQ-022, REQ-023) — all paired with multi-node networking or richer I/O scanning which are explicitly out of scope for v0.1. +**Coverage**: 21/24 requirements complete; 4 deferred to v0.2 (REQ-011, REQ-014, REQ-022, REQ-023) — all paired with multi-node networking, richer I/O scanning, or streaming I/O which are explicitly out of scope for v0.1. + +## Milestone v0.2: Networking, Observability, Security Hardening + +**Status: In Progress** — SPECIFY stage committed. 4 phases (P01–P04) covering mTLS, multi-node scheduling, security scanning, and streaming I/O. + +Pending v0.2 REQs (carried over from v0.1 deferral): REQ-011, REQ-014, REQ-022, REQ-023. New v0.2 REQs will be added by the IDEATE stage. diff --git a/.ciagent/ROADMAP.md b/.ciagent/ROADMAP.md index 8f2b13f..b3ae044 100644 --- a/.ciagent/ROADMAP.md +++ b/.ciagent/ROADMAP.md @@ -20,11 +20,17 @@ - `iter.Seq` streaming job lists (REQ-022) - Frontend / devops personas (no web UI; CoreCI handles release) -## Milestone v0.2 (proposed) +## Milestone v0.2: Networking, Observability, Security Hardening — **IN PROGRESS** -Scope: networking, observability, security hardening. +Scope: extend v0.1 with secure cross-node transport, multi-node scheduling, +richer CI security scanning, and streaming I/O. -- Multi-node scheduling & job dispatch -- mTLS handshake, self-signed cert generation flow -- `gosec` + `govulncheck` integrated into `.coreci.yml` `validate` pipeline -- `iter.Seq` for streaming exports +- [ ] Phase 8: mTLS handshake + internal CA with CSR join (Wave 1) +- [ ] Phase 9: Multi-node scheduling & job dispatch (Wave 1) +- [ ] Phase 10: `gosec` + `govulncheck` + gitleaks in CI (Wave 2) +- [ ] Phase 11: `iter.Seq` streaming job/node lists (Wave 2) + +**Target milestone tag**: `v0.3.0` (next-minor per feature-milestone promotion rule). + +Per-phase tags: `v0.2.1` (P01), `v0.2.2` (P02), `v0.2.3` (P03), `v0.2.4` (P04). +Per `.ciagent/RELEASE_POLICY.md`, every phase tag produces a Gitea release.