S15: Historical-Information, deploy-ns1, promote gate SHAs

Continue-until-done instructions live in Historical-Information.MD.
run-review.sh now covers signed-config HTTP and catalog subjects.
deploy-ns1.sh never skips tests and does not set PFC_REQUIRE_NPE.
This commit is contained in:
George Lambert 2026-09-15 22:41:39 -04:00
parent c71dce2187
commit c570dc10fb
10 changed files with 288 additions and 8 deletions

View file

@ -11,7 +11,7 @@ Blocks plus **Guesses and Assumptions**. Work continues around these.
- **Error bundle:** two ciphertexts: `ct_sender` (NaCl/X25519 box to sender) and `ct_system` (box to system key) containing bounce metadata **without** recipient payload.
- **DataCube history:** JSONL chain compatible with `pfc.chain.Chain` so a real cube can ingest it; lab can run without Peergos FUSE.
- **CI:** Forgejo Actions (`ubuntu-latest`). If runners are missing, the YAML still documents the review gate.
- **ns1:** no binary deploy until a green CI run is recorded. Docs HTML may be copied to `/opt/pfc/docs/` as documentation-only.
- **ns1:** green local `run-review.sh` is the promote gate; `deploy-ns1.sh` rsyncs after tests. Docs HTML lives under `/opt/pfc/docs/html`. `PFC_REQUIRE_NPE=1` still unset.
- **Python comments:** every executable line in `secure_messaging/` has a trailing or preceding comment.
- **Go:** in-process `nats-server` leaf to `nats-a:7422` when `SM_LEAF_HUB` is set; otherwise in-memory only for tests.