docs(specs): ops prebuild for #49 ADR-0002 CI enforcement rollout #353

Closed
claude wants to merge 6 commits from claude/c-batch/adr-0002-ci-enforcement-rollout-prebuild into main
Collaborator

Summary

Ops prebuild structuring the 4 setup TASKs + verification test PR from issue #49 for activating ADR-0002 mechanical canary enforcement.

Sister to #243 (PR #327 branch protection) and #86 (PR #349 security-sensitive label). All three are mechanical merge-gates that should activate together for full ADR-0018 alignment.

Operator UI tasks

  • Task A: add ZAI_API_KEY secret (from RS2000 stack.env)
  • Task B: add CANARY_FORGEJO_TOKEN secret (claude PAT default; canary-bot option for cleaner separation)
  • Task C: verify runner capacity (1 active runner acceptable for v0)
  • Task D: enable branch protection with canary-required + base-is-main / guard required (coordinate with #243)

Verification

  • First test PR (small AGENTS.md edit) exercises full workflow
  • decision_packet.md committed back to branch by canary identity
  • Status check turns green (or red with valid dissent)
  • Both outcomes acceptable — workflow ran end-to-end

Files

  • docs/specs/adr-0002-ci-enforcement-rollout/{README,01-context,02-operator-checklist,03-verification,04-rollback}.md
  • prompts/codex-adr-0002-ci-enforcement-rollout.md — codex verification-only role

Tier

Trivial per ADR-0007 (docs-only prebuild). The activation itself is operator-UI only.

Part of batch C (process/governance) prebuild shift, 4/6.
Refs #49 #44 #243 #86 ADR-0001 ADR-0002 ADR-0007 ADR-0018

## Summary Ops prebuild structuring the 4 setup TASKs + verification test PR from issue #49 for activating ADR-0002 mechanical canary enforcement. Sister to #243 (PR #327 branch protection) and #86 (PR #349 security-sensitive label). All three are mechanical merge-gates that should activate together for full ADR-0018 alignment. ## Operator UI tasks - Task A: add ZAI_API_KEY secret (from RS2000 stack.env) - Task B: add CANARY_FORGEJO_TOKEN secret (claude PAT default; canary-bot option for cleaner separation) - Task C: verify runner capacity (1 active runner acceptable for v0) - Task D: enable branch protection with canary-required + base-is-main / guard required (coordinate with #243) ## Verification - First test PR (small AGENTS.md edit) exercises full workflow - decision_packet.md committed back to branch by canary identity - Status check turns green (or red with valid dissent) - Both outcomes acceptable — workflow ran end-to-end ## Files - `docs/specs/adr-0002-ci-enforcement-rollout/{README,01-context,02-operator-checklist,03-verification,04-rollback}.md` - `prompts/codex-adr-0002-ci-enforcement-rollout.md` — codex verification-only role ## Tier Trivial per ADR-0007 (docs-only prebuild). The activation itself is operator-UI only. Part of batch C (process/governance) prebuild shift, 4/6. Refs #49 #44 #243 #86 ADR-0001 ADR-0002 ADR-0007 ADR-0018
docs(prompts): #49 codex execution prompt
Some checks failed
base-is-main / guard (pull_request) Successful in 2s
canary-required / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
canary-required / canary (pull_request) Successful in 12s
patchwarden-pr-sanity / sanity (pull_request) Failing after 20s
2bb4e45ffa
Collaborator

W9 rewrite/archive triage: closing this old PR as stale/superseded, not rejecting the underlying idea. Reason: ADR-0002 canary rollout prebuild predates W6d/Patchwarden calibration; rewrite remaining canary work against current branch-protection state.

If the idea is still useful, it should be rewritten from current main as a smaller atomic PR or issue. No old branch should merge only because it is green.

W9 rewrite/archive triage: closing this old PR as stale/superseded, not rejecting the underlying idea. Reason: ADR-0002 canary rollout prebuild predates W6d/Patchwarden calibration; rewrite remaining canary work against current branch-protection state. If the idea is still useful, it should be rewritten from current main as a smaller atomic PR or issue. No old branch should merge only because it is green.
codex closed this pull request 2026-05-27 08:41:21 +02:00
Some checks failed
base-is-main / guard (pull_request) Successful in 2s
Required
Details
canary-required / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
canary-required / canary (pull_request) Successful in 12s
patchwarden-pr-sanity / sanity (pull_request) Failing after 20s
Required
Details

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/platform!353
No description provided.