ciagent
b48f5cfde6
v0.2 CLARIFY stage. Resolves 8 ambiguities introduced by the deferred v0.2 scope (mTLS, scheduling, scanning, streaming). All decisions taken under full autonomy (config.json autonomy.level: full) at confidence >= 0.85, which is above the decision_confidence_threshold of 0.60. - D-011: Internal CA with CSR join (vs. self-signed per-node or SPIFFE). - D-012: Operator-mediated CA cert distribution with fingerprint verify (no automated secret distribution — matches offline-first principle). - D-013: 90d server certs, 10y CA cert, 30d pre-expiry rotation. - D-014: Eager mTLS handshake at time. - D-015: TLS 1.3 minimum, AEAD cipher allowlist (no TLS 1.2 fallback). - D-016: gosec+govulncheck in pipeline of .coreci.yml; gitleaks in pre-commit hook (opt-in). - D-017: iter.Seq for and . - D-018: Bin-packing by CPU/memory with FIFO within node; ConnectRPC orca.v1.Dispatch for cross-node. RESEARCH and IDEATE follow. ---ci--- project: orca phase: 0 milestone: v0.2 status: clarify ---/ci---
Orca
Offline/CLI-first orchestration engine inspired by HashiCorp Nomad, far simpler than Kubernetes.
Status
v0.1: Foundation — see .ciagent/ROADMAP.md for the 6-phase plan.
Pillars
- Simplicity — single binary, minimal dependencies
- AI-first — CLI designed for both humans and AI agents
- Offline-first — no cloud dependencies
- CLI-first — primary interface is the command line
- Security before features — NFRs ship before new functionality
- Bug fixes before features — stability is paramount
- NFRs before features — observability and auditability first
Quickstart
# Build
make build
# Run
./bin/orca version
./bin/orca --help
# Initialize local state
./bin/orca init
Subcommands
| Command | Description | Status |
|---|---|---|
orca version |
Print version info | ✅ Phase 1 |
orca init |
Initialize local orca state | ✅ Phase 1 (stub) |
orca status |
Show orca daemon status | ✅ Phase 1 (stub) |
orca node |
Node management (join, leave, list) |
Phase 2 |
orca job |
Job management (run, list, stop, logs) |
Phase 3 |
Development
make build # Build binary to ./bin/orca
make test # Run tests with race detection
make lint # Run golangci-lint
make fmt # Format code
make release # Build + create Gitea release (Phase 6)
Architecture
See .ciagent/ARCHITECTURE.md for full architecture details.
License
MIT — see LICENSE.