George Lambert
07f147fffb
Some checks are pending
review / inventory (push) Waiting to run
PFC_REPL_URL=http://127.0.0.1:18784. Ingest replicas do not bind HTTP.
33 lines
1.4 KiB
Markdown
33 lines
1.4 KiB
Markdown
# CI-CD review gate
|
|
|
|
ns1 deploy is **forbidden** until all of these are true:
|
|
|
|
1. Forgejo Actions (or `cicd/run-review.sh`) is green on the commit SHA.
|
|
2. A human records the SHA in this file's "Promoted" table (or a PR comment).
|
|
3. Config on the host is a **signed** wrapper (`sig.alg=ed25519`).
|
|
4. Admin-history cube has prev + new + diff for that config.
|
|
|
|
There is **no** auto-deploy job. A future `deploy.yml` must `if: false` or
|
|
require `workflow_dispatch` plus the promoted SHA.
|
|
|
|
## Promoted
|
|
|
|
Local `cicd/run-review.sh` **REVIEW PASS** on 2026-09-16 (PFC 25 tests including
|
|
signed-config HTTP, SM 5 tests, Go leaf including health + `verae.sm.*` acks,
|
|
catalog subjects). Reviewer: agent continuing Historical-Information.MD
|
|
without operator interruption.
|
|
|
|
| SHA | repo | reviewer | date | ns1 |
|
|
|---|---|---|---|---|
|
|
| f4da7ff44634973e1b32db93c694f6ee47c34e41 | secure-messaging | agent | 2026-09-16 | deployed |
|
|
| 2c45603a3e14bbfd6de4e9b065ad43d234e46012 | peergos-for-compliance | agent | 2026-09-16 | deployed |
|
|
| c46d494 | peergos-for-compliance-admin | agent | 2026-09-16 | deployed |
|
|
| 1d01768 | nats-service-endpoints | agent | 2026-09-16 | deployed |
|
|
| c570dc10fb50973a022fd5eb361c9928cdb8d8f6 | system-git-sync | agent | 2026-09-16 | deployed |
|
|
| f0b2624 | peergos-compliance-go (pfc-repl health) | agent | 2026-09-16 | deployed |
|
|
|
|
## Local review
|
|
|
|
```bash
|
|
bash cicd/run-review.sh
|
|
```
|