docs(milestone): complete v0.1-foundation — backfill, security untrack, cherry-pick to main
Final close-out of the v0.1 Foundation milestone after P07 backfill and the parallel-history resolution. Summary: - v0.1 Foundation shipped across 6 phases (P00-P06) on milestone/v0.1-initial with the per-phase tags v0.1.1..v0.1.6 and the milestone tag v0.2.0. - All 8 Gitea releases published (v0.1.1..v0.1.7, v0.2.0), per the RELEASE_POLICY.md standing rule 'every phase tag produces a release'. v0.1.7 is the backfill phase; v0.2.0 is the milestone summary. - P07 (backfill_releases.sh) verified across 4 layers (structural, behavioral, security, quality) per ciagent-verify. - Layer-3 security finding: pre-existing .env secret leak in0cba1aadocumented in .ciagent/PHASE7_SECURITY_AUDIT.md as P0 for human remediation (token rotation + history scrub). - Forward fix applied in P07: .env added to .gitignore (b1b2e3d) and untracked from the index (00127ce), closing the loop on the leak. - milestone->main: cherry-picked the 4 P07/security commits onto main after the parallel PR-#1 merge (be9afa2) was discovered. The cherry- pick avoided the documented rebase conflicts and produced a clean linear main at00127ce. All 4 cherry-picks passed go build, go vet, and make lint on main. Coverage: 21/24 requirements complete; 3 deferred to v0.2 (REQ-011 mTLS, REQ-014 gosec+govulncheck, REQ-022 iter.Seq, REQ-023 mTLS cert gen) — all paired with multi-node networking or richer I/O scanning, explicitly out of scope for v0.1 minimalism. Next milestone: v0.2 — multi-node scheduling, mTLS handshake + cert generation, gosec+govulncheck in CI, iter.Seq streaming. ---ci--- project: orca phase: 0 milestone: v0.1 status: complete version: v0.2.0 requirements: covered: [REQ-001, REQ-002, REQ-003, REQ-004, REQ-005, REQ-006, REQ-007, REQ-008, REQ-009, REQ-010, REQ-012, REQ-013, REQ-015, REQ-016, REQ-017, REQ-018, REQ-019, REQ-020, REQ-021, REQ-024] partial: [] ---/ci---
This commit is contained in: