docs(w8): define stateful sidecar upgrade gate #511

Merged

pdurlej merged 1 commit from codex/w8-stateful-sidecar-gate into main

2026-05-26 23:06:11 +02:00

codex commented

2026-05-26 22:29:50 +02:00

Collaborator

Canary status: missing — fire canary 3+3 manually before merge

Canary Context Pack

Product story

W8 needs one shared rulebook for stateful/sidecar upgrades so agents can prepare packets consistently without turning every Redis/Postgres/MinIO PR into a fresh policy debate.

What changed

Created state/cycle/W8-stateful-sidecar-gate.md and linked it from W8 prep. The gate defines evidence requirements for stateful, sidecar-bound, secret-bearing, public-edge, and core upgrade classes.

Why it changed

Batch A proved the packet pattern. Before stateful/core upgrades, the platform needs a clear boundary between repo-only packets and runtime approval.

Files touched

state/cycle/W8-stateful-sidecar-gate.md
state/cycle/W8-module-upgrade-prep.md

Relevant context

#389 W8 coordination lane
#501 W8 readiness inventory
#502/#504 MinIO Init no-op packet
#505/#509 stateful metadata batch
#506/#510 Uptime Kuma packet
ADR-0022 source/artifact boundaries

Runtime evidence

No runtime mutation. No live host reads. No compose/env/module image changes.

Known constraints

The gate defaults core stateful runtime to manual and ties broad/core work to #433 W3d full sandbox DR unless explicitly waived.

Explicit out-of-scope

Executing upgrades
Creating backups
Running restore drills
Editing module manifests
Approving any runtime apply/recreate

Requested decision

Approve/merge this docs-only gate so future W8.3 packets can be reviewed against one shared checklist.

Merge blockers

Language implies merge equals deploy approval
Missing distinction between repo-only packets and runtime mutation
Missing #433/full sandbox DR stance for core stateful services

Spec sources read

state/cycle/W8-module-upgrade-prep.md — W8.3 row, evidence and stop conditions
state/cycle/W8-readiness-2026-05-26.md — candidate classification and stop conditions
state/cycle/W8-minio-init-pilot.md — sidecar packet precedent
decisions/0022-module-source-and-release-boundaries.md — manual gates for stateful/security-sensitive modules

Test plan

PYTHONPATH=control-plane python3 -m platformctl.cli validate all --json → exitCode 0

Closes #507

Canary status: missing — fire canary 3+3 manually before merge ## Canary Context Pack ### Product story W8 needs one shared rulebook for stateful/sidecar upgrades so agents can prepare packets consistently without turning every Redis/Postgres/MinIO PR into a fresh policy debate. ### What changed Created `state/cycle/W8-stateful-sidecar-gate.md` and linked it from W8 prep. The gate defines evidence requirements for `stateful`, `sidecar-bound`, `secret-bearing`, `public-edge`, and `core` upgrade classes. ### Why it changed Batch A proved the packet pattern. Before stateful/core upgrades, the platform needs a clear boundary between repo-only packets and runtime approval. ### Files touched - `state/cycle/W8-stateful-sidecar-gate.md` - `state/cycle/W8-module-upgrade-prep.md` ### Relevant context - #389 W8 coordination lane - #501 W8 readiness inventory - #502/#504 MinIO Init no-op packet - #505/#509 stateful metadata batch - #506/#510 Uptime Kuma packet - ADR-0022 source/artifact boundaries ### Runtime evidence No runtime mutation. No live host reads. No compose/env/module image changes. ### Known constraints The gate defaults core stateful runtime to manual and ties broad/core work to #433 W3d full sandbox DR unless explicitly waived. ### Explicit out-of-scope - Executing upgrades - Creating backups - Running restore drills - Editing module manifests - Approving any runtime apply/recreate ### Requested decision Approve/merge this docs-only gate so future W8.3 packets can be reviewed against one shared checklist. ### Merge blockers - Language implies merge equals deploy approval - Missing distinction between repo-only packets and runtime mutation - Missing #433/full sandbox DR stance for core stateful services ## Spec sources read - `state/cycle/W8-module-upgrade-prep.md` — W8.3 row, evidence and stop conditions - `state/cycle/W8-readiness-2026-05-26.md` — candidate classification and stop conditions - `state/cycle/W8-minio-init-pilot.md` — sidecar packet precedent - `decisions/0022-module-source-and-release-boundaries.md` — manual gates for stateful/security-sensitive modules ## Test plan - `PYTHONPATH=control-plane python3 -m platformctl.cli validate all --json` → exitCode 0 Closes #507

codex added 1 commit

2026-05-26 22:29:50 +02:00

docs(w8): define stateful sidecar upgrade gate

base-is-main / guard (pull_request) Successful in 2s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

canary-required / canary (pull_request) Has been skipped