chore(w9): milestone archaeology packet for stale open issues #535
Labels
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pdurlej/platform#535
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Scope
Create a W9 issue archaeology packet from live Forgejo state.
The output should classify open issues into:
Spec sources
state/roadmap/current-platform-roadmap.md§ Current milestone train / Current issue mapping / Recommended execution orderstate/L3/JOURNEY.mdInflection 11-12pdurlej/platformExtracted context
From roadmap:
Acceptance criteria
Out of scope
Agent notes
Recommended executor: Gemini 3.5 Flash local.
Rules:
Spec sources read.Role: executor
Intent: lane-outcome
Needs owner: no
W9 live issue archaeology packet for #535. This is audit/comment-only: no issue was moved or closed by this packet except this triage issue itself.
Spec sources read:
state/roadmap/current-platform-roadmap.md§ Current milestone train / W9Summary:
04 - Vault sunset
chore(m04): run Vault Phase 1 read-only inventory packet06 - Agent execution and CI governance
BREAK-GLASS-HARDEN-01: require secondary approval for platformctl break-glassPR-BIND-01: verify approved apply PR base branchACTOR-ID-01: bind apply actor identity to approval contextERROR-CODE-01: add machine-readable approval failure reasonsPROVENANCE-GIT-ROOT-01: anchor plan provenance to git toplevelPROVENANCE-HASH-01: add tamper-evident plan payload hashPROVENANCE-ADVERSARIAL-TESTS-01: add hostile provenance input testsNO-OP-OBSERVABILITY-01: add structured no-op apply countersPLAN-EXIT-NONE-EXPLICIT-01: make missing plan exitCode handling explicitPLAN-STATE-CROSS-TESTS-01: add plan exit/status matrix testsHOST-ALLOWLIST-01: validate apply target hosts against allowed Tailnet setREDACT-COMMAND-01: redact remote command field in apply resultsREDACT-EXTEND-01: extend apply output redaction patternsSMOKE-POST-APPLY-01: verify container health after compose applyTRANSPORT-TIMEOUT-01: enforce timeout for apply transport commandsfix(platformctl): restrict apply status artifact permissionsfix(platformctl): fsync apply status artifacts before replacefix(platformctl): emit absolute apply status artifact pathsfix(platformctl): scrub token-like values from status artifactsfix(platformctl): harden apply workflow shell crash detectiondocs(platformctl): document PLATFORMCTL_PHASE=05 apply semanticstest(platformctl): parse Forgejo workflow contract structurallyfix(platformctl): whitelist smoke subprocess environmentfix(platformctl): validate runbook-derived container namestest(platformctl): add adversarial health input casesdocs(platformctl): document health command operational prerequisitespatchwarden-client-dry-run.yml: addlabeled+ready_for_reviewto workflow triggersforgejo-runner: commit /opt/forgejo-runner/{docker-compose.yml,data/config.yaml} to git (ichore(w9): milestone archaeology packet for stale open issueschore(vistula): dogfood labels on 5-10 pilot issues after v0 mergefix(maintenance): reconcile ops_maintenance_queue schema after host-ops migrationchore(legacy): inventory non-backup RS2000 remnants after M01 closeoutops(legacy): plan non-backup legacy env/data/state disposal after inventoryfix(legacy): verify stale cleanpush env symlink is unused before cleanup07 - Honcho memory v2
ops(honcho): design BGE-M3 embedding migration without mixing vector spacesmemory(A): draft ADR for Memory Control Plane (boundaries before code)memory(B): task_run + task_checkpoint + Codex packet templates (highest-impact fix for #17memory(C): procedural registry v0 + seed 10 procedures (workflow knowledge layer)08 - Persona and OpenClaw product loops
feat(iskra): wire OpenClaw mail consumer — close Iskra value loop (read+reply)feat(iskra): apply Phase 1.0 constitutional bundle to VPS1000 — Iskra autonomy gatefeat(iskra): 8 bogactw check-in dashboard page10 - Improvements
Phase 08+ scope: Iskra family-assistant tier (Kasia indirect via Piotr-supervised flows)Phase 08+ scope: IronKey Keypad 200C as Tier 2 hardware-encrypted storage for Włóczykij vaPhase 08+ scope: integrate 2× YubiKey into platform auth chain (6 roles)ops(secrets): Infisical Token Auth token forgejo-codex-runner expires 2026-08-12 — rotateaudit(agent-readiness): ProgramBench-style architecture/manageability audit for platform rresearch(platformctl): adopt smolagents minimal-core principle (~1000 lines core + extensiresearch(cousin-coordination): Conductor-style zero-token YAML routing PoC for deterministexplore(security): YubiKey as last operator approval gate before bulk-destroy / irreversibRecommended next queue:
No destructive action, branch deletion, runtime restart, secret read, issue label writer, or comment writer automation was performed by this packet.