docs(w8): prepare staged module upgrade plan #466

Merged
pdurlej merged 1 commit from codex/w8-upgrade-prep into main 2026-05-25 01:01:17 +02:00
Collaborator

Canary status: missing — rely on required Forgejo checks before merge

Canary Context Pack

Product story

The platform is ready to think about module upgrades, but not by starting with Forgejo. This PR turns #389 into an actionable W8 staging plan: readiness first, low-blast pilot second, Forgejo later.

What changed

  • Added state/cycle/W8-module-upgrade-prep.md with W8.0/W8.1/W8.2/W8.3/W8.final sequencing.
  • Added state/roadmap/forgejo-upgrade-plan.md with Forgejo-specific preflight, backup, smoke, and rollback gates.
  • Updated issue #389 as the M09 coordination lane.

Why it changed

The operator wants to reach W8, but broad upgrades still need metadata and restore evidence. This makes the next step concrete without mutating production.

Files touched

  • state/cycle/W8-module-upgrade-prep.md
  • state/roadmap/forgejo-upgrade-plan.md

Relevant context

  • ADR-0022 requires source/artifact metadata and risk-based update policy.
  • W5 update report currently sees 88 modules, 6 with source/artifact metadata, 0 auto-pr candidates.
  • #389 is the M09 coordination issue and was updated to point at this plan.

Runtime evidence

None. Read-only platformctl update-report --json was run locally; no production or Forgejo runtime mutation.

Known constraints

This PR does not start upgrades. It explicitly defers Forgejo upgrade until after a W8 low-blast pilot and DR/restore stance.

Explicit out-of-scope

  • Changing any module image.
  • Running platformctl apply.
  • Creating backups or restarting services.
  • Upgrading Forgejo.

Requested decision

Merge to make W8 planning durable, then use #389 as the coordination lane for child issues.

Merge blockers

  • Plan accidentally allows broad/core upgrades before pilot evidence.
  • Forgejo upgrade becomes first W8 candidate.
  • Restore/rollback gates are omitted.

Spec sources read

  • decisions/0022-module-source-and-release-boundaries.md — update workflow and risk policy.
  • state/roadmap/current-platform-roadmap.md — current W0-W9 plan.
  • state/cycle/W5-modularity-foundation-output.md — metadata/update-report status.
  • Issue #389 — current M09 meta issue.

Tests

  • git diff --check
  • PYTHONPATH=control-plane python3 -m platformctl.cli update-report --jsonok=true, total modules 88, source/artifact metadata 6/6
Canary status: missing — rely on required Forgejo checks before merge ## Canary Context Pack ### Product story The platform is ready to think about module upgrades, but not by starting with Forgejo. This PR turns #389 into an actionable W8 staging plan: readiness first, low-blast pilot second, Forgejo later. ### What changed - Added `state/cycle/W8-module-upgrade-prep.md` with W8.0/W8.1/W8.2/W8.3/W8.final sequencing. - Added `state/roadmap/forgejo-upgrade-plan.md` with Forgejo-specific preflight, backup, smoke, and rollback gates. - Updated issue #389 as the M09 coordination lane. ### Why it changed The operator wants to reach W8, but broad upgrades still need metadata and restore evidence. This makes the next step concrete without mutating production. ### Files touched - `state/cycle/W8-module-upgrade-prep.md` - `state/roadmap/forgejo-upgrade-plan.md` ### Relevant context - ADR-0022 requires source/artifact metadata and risk-based update policy. - W5 update report currently sees 88 modules, 6 with source/artifact metadata, 0 auto-pr candidates. - #389 is the M09 coordination issue and was updated to point at this plan. ### Runtime evidence None. Read-only `platformctl update-report --json` was run locally; no production or Forgejo runtime mutation. ### Known constraints This PR does not start upgrades. It explicitly defers Forgejo upgrade until after a W8 low-blast pilot and DR/restore stance. ### Explicit out-of-scope - Changing any module image. - Running `platformctl apply`. - Creating backups or restarting services. - Upgrading Forgejo. ### Requested decision Merge to make W8 planning durable, then use #389 as the coordination lane for child issues. ### Merge blockers - Plan accidentally allows broad/core upgrades before pilot evidence. - Forgejo upgrade becomes first W8 candidate. - Restore/rollback gates are omitted. ## Spec sources read - `decisions/0022-module-source-and-release-boundaries.md` — update workflow and risk policy. - `state/roadmap/current-platform-roadmap.md` — current W0-W9 plan. - `state/cycle/W5-modularity-foundation-output.md` — metadata/update-report status. - Issue #389 — current M09 meta issue. ## Tests - `git diff --check` - `PYTHONPATH=control-plane python3 -m platformctl.cli update-report --json` → `ok=true`, total modules `88`, source/artifact metadata `6/6`
docs(w8): prepare staged module upgrade plan
All checks were successful
base-is-main / guard (pull_request) Successful in 1s
canary-required / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
canary-required / canary (pull_request) Has been skipped
patchwarden-pr-sanity / sanity (pull_request) Successful in 21s
9851ecb926
codex force-pushed codex/w8-upgrade-prep from 9851ecb926
All checks were successful
base-is-main / guard (pull_request) Successful in 1s
canary-required / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
canary-required / canary (pull_request) Has been skipped
patchwarden-pr-sanity / sanity (pull_request) Successful in 21s
to 840117cdb2
All checks were successful
base-is-main / guard (pull_request) Successful in 1s
canary-required / collect-diff (pull_request) Successful in 3s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
canary-required / canary (pull_request) Has been skipped
patchwarden-pr-sanity / sanity (pull_request) Successful in 21s
2026-05-25 00:53:52 +02:00
Compare
Sign in to join this conversation.
No reviewers
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/platform!466
No description provided.