generated from mathias/template-go-web
mathiasandClaude Opus 4.8
c3fda9b26b
Deploy job's INFRA_DEPLOY_KEY (write deploy-key cad-atlas-ci on infra) is set; future main pushes auto-bump the infra image tag → Flux rolls. Also records the live Authentik-gated endpoint. This commit is itself the first auto-deploy test. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
57 lines
3.3 KiB
Markdown
57 lines
3.3 KiB
Markdown
# cad-atlas — Inception Sprint Oath
|
||
|
||
The acceptance contract for standing up cad-atlas. The sprint is finalized only when this
|
||
Oath holds. Methodology: brain `wiki/homelab/decisions/inception-sprint-and-oath.md`.
|
||
|
||
> **Status of enforcement:** this Oath is currently **advisory** (human-verified). Machine
|
||
> enforcement via `var-go/oath` is deferred — see the honesty rule below and issue #1.
|
||
|
||
## General clauses (any inception sprint)
|
||
|
||
| # | Clause | Status | Evidence |
|
||
|---|--------|--------|----------|
|
||
| G1 | Repo born from template on Gitea, dispatch-eligible | ✅ | `create_project_from_template`, `.dispatch-allow`, dispatch-allowlisted |
|
||
| G2 | Self-contained context + brain deep-links + external refs | ✅ | `.context/PROJECT.md`, `README.md` |
|
||
| G3 | Green CI on main: build · vet · lint · test (TDD) | ✅ | Genuinely green from run 19 (commit 68adfe7). NOTE: runs 16–18 were *hollow* — a template guard bug (template-go-web#9) skipped every job; fixed here. `internal/web/handler_test.go` |
|
||
| G4 | Genesis learning persisted to brain, linked from repo | ✅ | `wiki/homelab/decisions/cad-atlas-audit-chain-is-viz-data.md` |
|
||
| G5 | Discovered findings filed as tracker issues | ✅ | template-go-web#8, local-dev#20 |
|
||
| G6 | SemVer tag marks the milestone (closing act) | ✅ | `v0.1.0` |
|
||
| G7 | Agent-ready spec issue for the next increment | ✅ | #1 |
|
||
|
||
## Specific clauses (cad-atlas)
|
||
|
||
| # | Clause | Status | Evidence |
|
||
|---|--------|--------|----------|
|
||
| S1 | Atlas served at `/`, renders all 9 stages signal→pod | ✅ | `internal/web/handler.go` + `static/cad-atlas.html` |
|
||
| S2 | Oath covered in the viz (stages 03 + 06) | ✅ | var-go Oath nodes in the atlas |
|
||
| S3 | `var-go/oath` enforces cad-atlas's own PRs | ⏸ **deferred → #1** | var-go v1 candidate is a toy self-test; module not cross-repo consumable. See honesty rule. |
|
||
|
||
## Deployment
|
||
|
||
Live at **https://atlas.d-ma.be** (Authentik forward-auth — authed users only) on koala k3s:
|
||
namespace `cad-atlas`, 1 replica, `cad-atlas:80 → :8080` (manifests in `mathias/infra`
|
||
`k3s/apps/cad-atlas/`, reconciled by Flux). CI `deploy` job **auto-deploys** on every main push —
|
||
`INFRA_DEPLOY_KEY` (write deploy-key `cad-atlas-ci` on infra) is wired (#2 done).
|
||
|
||
## The honesty rule
|
||
|
||
A clause blocked by an external dependency is **descoped and tracked, never marked satisfied** —
|
||
a self-lying Oath is a rubber stamp, the exact failure the Oath exists to prevent. S3's real
|
||
enforcement depends on a var-go Executor (swedsl#27) + a published `oath` module; it is tracked as
|
||
a fast-follow on **#1**, not claimed here. The `DMABE_GITEA_API_TOKEN` Actions secret is
|
||
pre-provisioned so #1 can land without a secret-write.
|
||
|
||
## The Oath (advisory form)
|
||
|
||
```var
|
||
Given a new software thing is being stood up as an inception sprint
|
||
Then its repo is born from template on Gitea and is dispatch-eligible
|
||
And its context is self-contained with brain deep-links and external references
|
||
And CI on main is green across build, vet, lint and test
|
||
And the genesis learning is persisted to brain and linked from the repo
|
||
And every discovered finding is filed as a tracker issue
|
||
And an agent-ready spec issue exists for the next increment
|
||
And a SemVer tag marks the milestone as the closing act
|
||
And any clause blocked by an external dependency is descoped and tracked, never claimed
|
||
```
|