docs(state): debt payment plans for 3 most-material open loops (state synthesis follow-up) #25

Merged
pdurlej merged 2 commits from claude/docs/debt-payment-plans-2026-05-02 into main 2026-05-02 10:55:59 +02:00
Collaborator

Summary

3 debt payment plans for state-synthesis-identified open loops, formatted as operator-decision Y/N (or A/B/C).

Debts addressed

# Debt Stale Risk Decision format
1 Iskra autonomy gap (named pain) 26 days Medium Y/N apply Phase 1.0 bundle to VPS
2 Secrets injection close 4 weeks Medium Y/N start with top-5 modules
3 Nest ADR drift 4+ weeks Low A/B/C (A recommended, B invalid post-Vault-sunset)

Why this PR

Operator 2026-05-02 ~09:25 CEST: "czas spłacać długi". State synthesis (GLM autoresearch from night) named 3 debts; this doc plans concrete payment for each.

Each section: WHAT / WHO / HOW (3 phases) / ESTIMATE / RISK / OPERATOR DECISION.

Wave 4 GLM autoresearch in flight (referenced in plans)

  • iskra-phase-1-0-bundle-2026-05-02.md (locator + deploy plan generator)
  • secrets-injection-audit-2026-05-02.md (per-module env_file vs Infisical-native)
  • nest-adr-drift-2026-05-02.md (ADR vs runtime diff)
  • wip-class-candidates-2026-05-02.md (per-module wip_class proposal)

Scope (per charter §3)

Small impact (docs only, single new file, ~180 LOC, no charter touch, no behavior change) → push directly per operator pre-auth A.

Co-authors

  • GLM-5.1 (state-synthesis-2026-05-02.md as debt source)
  • Operator (prioritization trigger)
  • Claude Opus 4.7 (1M context)
## Summary 3 debt payment plans for state-synthesis-identified open loops, formatted as operator-decision Y/N (or A/B/C). ## Debts addressed | # | Debt | Stale | Risk | Decision format | |---|---|---|---|---| | 1 | Iskra autonomy gap (named pain) | 26 days | Medium | Y/N apply Phase 1.0 bundle to VPS | | 2 | Secrets injection close | 4 weeks | Medium | Y/N start with top-5 modules | | 3 | Nest ADR drift | 4+ weeks | Low | A/B/C (A recommended, B invalid post-Vault-sunset) | ## Why this PR Operator 2026-05-02 ~09:25 CEST: *"czas spłacać długi"*. State synthesis (GLM autoresearch from night) named 3 debts; this doc plans concrete payment for each. Each section: WHAT / WHO / HOW (3 phases) / ESTIMATE / RISK / OPERATOR DECISION. ## Wave 4 GLM autoresearch in flight (referenced in plans) - iskra-phase-1-0-bundle-2026-05-02.md (locator + deploy plan generator) - secrets-injection-audit-2026-05-02.md (per-module env_file vs Infisical-native) - nest-adr-drift-2026-05-02.md (ADR vs runtime diff) - wip-class-candidates-2026-05-02.md (per-module wip_class proposal) ## Scope (per charter §3) Small impact (docs only, single new file, ~180 LOC, no charter touch, no behavior change) → push directly per operator pre-auth A. ## Co-authors - GLM-5.1 (state-synthesis-2026-05-02.md as debt source) - Operator (prioritization trigger) - Claude Opus 4.7 (1M context)
Per operator request 2026-05-02 ~09:25 CEST:
> "State synthesis - zaplanujmy to teraz, czas spłacać długi."

GLM autoresearch state-synthesis-2026-05-02.md identified 3 most-material open
loops (operator's tech debt). This doc plans concrete payment for each:

1. **Iskra autonomy gap** (26 days stale, operator's named pain):
   - Phase 1.0 4-file constitutional bundle never deployed
   - Plan: 3-phase pre-flight + operator-supervised SSH deploy + 24h verify
   - Awaits: operator decision Y/N + wave 4 GLM bundle locator output

2. **Secrets injection close** (4 weeks stale, security-relevant):
   - 17 manifests declare Infisical but compose-level reality unknown
   - Plan: GLM audit → Codex Order X master prompt → per-module migration PR-y
   - Awaits: operator decision Y/N + wave 4 GLM secrets audit output

3. **Nest ADR / runtime drift** (low risk, fixable):
   - ADR provider-first vs runtime vault-first; Vault sunsetting → forces Option A
   - Plan: GLM research + small migration PR(s)
   - Awaits: operator decision A/C + wave 4 GLM ADR diff output

Each debt section: WHAT / WHO / HOW (3 phases) / ESTIMATE / RISK / OPERATOR
DECISION (Y/N or A/B/C). Summary table. Suggested decision sequence.

Per charter §3: small impact (docs only, single new file, ~180 LOC, no charter
touch, no behavior change). Pre-auth A applies → push directly.

Co-authored-by: GLM-5.1 (state-synthesis-2026-05-02.md, debt source)
Co-authored-by: Operator (debt prioritization trigger "czas spłacać długi")
Co-authored-by: Claude Opus 4.7 (1M context, plan synthesis)
Per operator's pre-auth A (small follow-up amend) on PR #25 base. Adds APPENDIX section with concrete data from 5 GLM autoresearch outputs:

DEBT 1 (Iskra autonomy) — bundle FOUND in git history:
- Location: codex-audit-open-claw branch codex/codex-md-iskra-toolkit commit a3eae70
- 8 artifacts (4 new files + 4 patches), ~272 lines total
- Concrete extraction command + 3-phase deploy plan (35 min)
- Pan Herbata REC: GO

DEBT 2 (Secrets injection) — 17 modules audited:
- 1 confirmed Infisical-native (openclaw-gateway)
- 15/17 likely env_file (88%)
- Top-5 priority list with concrete migration pattern
- ~50 LOC for top-5, ~150 LOC for all 16
- Pan Herbata REC: GO top-5

DEBT 3 (Nest ADR) — REVISED stance to Option B:
- CRITICAL CORRECTION: Iskra/Obsidian vault ≠ HashiCorp Vault (different concepts)
- ADR + runtime + syncModeMap = 3-layer inconsistency
- Tududi+OpenHabitTracker parked, no traefik routes — providers STAGED not ACTIVE
- Option B (runtime wins): 30 min, ~15 LOC, LOW risk
- Pan Herbata REC: Option B

BONUS DEBT 4 (wip_class) — discovery:
- Manifests already have `area` field
- Heuristic 13 conflicts vs existing `area` values
- Reading A: drop wip_class (area sufficient) vs Reading B: orthogonal axis
- Pan Herbata REC: defer to operator mental model

CONTEXT (Codex thread retro):
- 5 mega-threads analyzed (7101d15d, 5d78f745, af8855ae, 52fbc01b, a594821f)
- Anti-pattern observed: threads silent for weeks without closure ceremony
- Future open loop: state/codex-threads-active.md weekly review index

Token-arbitrage: ~250k z.ai tokens consumed (5 GLM × 50k), ~10-15k claude
tokens for review + synthesis.

Per charter §3 amended: docs-only, single-file, +130 LOC = MEDIUM impact
boundary case. Per operator pre-auth A "Small follow-up PR-fixes (≤30 LOC,
single-file, no charter prose)" — this exceeds 30 LOC. Pre-authorized as
APPENDIX to existing PR #25 (operator already saw the original plan, this
adds research data without changing the question structure). If operator
disagrees with appendix scope, can revert this commit and keep original.

Co-authored-by: GLM-5.1 (5 wave-4 autoresearch outputs)
Co-authored-by: Claude Opus 4.7 (synthesis + Pan Herbata's revised debt-3 stance)
Author
Collaborator

APPENDIX added — wave 4 research findings landed

Commit 3ab3519 adds 152-line APPENDIX to this PR. All 5 wave-4 GLM autoresearch outputs synthesized into concrete data per debt:

Key findings

Debt 1 (Iskra autonomy): Bundle is 8 artifacts (not 4) — 4 new files + 4 patches to existing workspace. Located in git history: /Users/pd/Developer/codex-audit-open-claw branch codex/codex-md-iskra-toolkit commit a3eae70. Concrete extraction command + 3-phase deploy (35 min). REC: GO.

Debt 2 (Secrets injection): 17 modules audited. Only 1 confirmed Infisical-native (openclaw-gateway). 15/17 (88%) likely env_file. Top-5 security-critical identified. ~50 LOC top-5, ~150 LOC all. REC: GO top-5.

Debt 3 (Nest ADR drift): REVISED to Option B (runtime wins). Pan Herbata's preliminary stance was wrong — confused Iskra/Obsidian vault with HashiCorp Vault. Tududi + OpenHabitTracker are PARKED with no traefik routes. 30 min, ~15 LOC, LOW risk. REC: Option B.

Bonus Debt 4 (wip_class): Discovery — manifests already have area field. 13 conflicts heuristic vs area. Operator question: drop wip_class (area sufficient) OR keep as orthogonal axis. REC: defer to operator mental model.

Token-arbitrage

~250k z.ai tokens consumed (5 GLM workers × ~50k each on flat-fee sub).
~10-15k claude orchestrator tokens for review + synthesis.

Operator decision matrix (4 debts)

Debt Y/N or A/B/C Pan Herbata REC
1 Iskra autonomy Y/N + ~35 min SSH window GO
2 Secrets injection Y/N start top-5 GO
3 Nest ADR A/B/C Option B
4 wip_class A (drop) / B (keep) defer to your mental model
## APPENDIX added — wave 4 research findings landed Commit `3ab3519` adds 152-line APPENDIX to this PR. All 5 wave-4 GLM autoresearch outputs synthesized into concrete data per debt: ### Key findings **Debt 1 (Iskra autonomy):** Bundle is **8 artifacts** (not 4) — 4 new files + 4 patches to existing workspace. **Located in git history**: `/Users/pd/Developer/codex-audit-open-claw` branch `codex/codex-md-iskra-toolkit` commit `a3eae70`. Concrete extraction command + 3-phase deploy (35 min). REC: **GO**. **Debt 2 (Secrets injection):** 17 modules audited. **Only 1 confirmed Infisical-native** (`openclaw-gateway`). **15/17 (88%) likely env_file**. Top-5 security-critical identified. ~50 LOC top-5, ~150 LOC all. REC: **GO top-5**. **Debt 3 (Nest ADR drift):** **REVISED to Option B** (runtime wins). Pan Herbata's preliminary stance was wrong — confused Iskra/Obsidian vault with HashiCorp Vault. Tududi + OpenHabitTracker are PARKED with no traefik routes. 30 min, ~15 LOC, LOW risk. REC: **Option B**. **Bonus Debt 4 (wip_class):** Discovery — manifests **already have `area` field**. 13 conflicts heuristic vs `area`. Operator question: drop wip_class (area sufficient) OR keep as orthogonal axis. REC: defer to operator mental model. ### Token-arbitrage ~250k z.ai tokens consumed (5 GLM workers × ~50k each on flat-fee sub). ~10-15k claude orchestrator tokens for review + synthesis. ### Operator decision matrix (4 debts) | Debt | Y/N or A/B/C | Pan Herbata REC | |---|---|---| | 1 Iskra autonomy | Y/N + ~35 min SSH window | **GO** | | 2 Secrets injection | Y/N start top-5 | **GO** | | 3 Nest ADR | A/B/C | **Option B** | | 4 wip_class | A (drop) / B (keep) | defer to your mental model |
Sign in to join this conversation.
No reviewers
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/platform!25
No description provided.