system-git-sync/cicd/GATE.md
George Lambert 9ba17747a4
Some checks are pending
review / inventory (push) Waiting to run
S15: ns1 deployed; stop sm-leaf before binary replace
GATE table marked deployed. Historical-Information open items closed.
Admin-history seeded; PFC_REQUIRE_NPE left unset.
2026-09-15 22:44:51 -04:00

32 lines
1.3 KiB
Markdown

# CI-CD review gate
ns1 deploy is **forbidden** until all of these are true:
1. Forgejo Actions (or `cicd/run-review.sh`) is green on the commit SHA.
2. A human records the SHA in this file's "Promoted" table (or a PR comment).
3. Config on the host is a **signed** wrapper (`sig.alg=ed25519`).
4. Admin-history cube has prev + new + diff for that config.
There is **no** auto-deploy job. A future `deploy.yml` must `if: false` or
require `workflow_dispatch` plus the promoted SHA.
## Promoted
Local `cicd/run-review.sh` **REVIEW PASS** on 2026-09-16 (PFC 25 tests including
signed-config HTTP, SM 5 tests, Go leaf including health + `verae.sm.*` acks,
catalog subjects). Reviewer: agent continuing Historical-Information.MD
without operator interruption.
| SHA | repo | reviewer | date | ns1 |
|---|---|---|---|---|
| f4da7ff44634973e1b32db93c694f6ee47c34e41 | secure-messaging | agent | 2026-09-16 | deployed |
| 2c45603a3e14bbfd6de4e9b065ad43d234e46012 | peergos-for-compliance | agent | 2026-09-16 | deployed |
| c46d494 | peergos-for-compliance-admin | agent | 2026-09-16 | deployed |
| 1d01768 | nats-service-endpoints | agent | 2026-09-16 | deployed |
| c570dc10fb50973a022fd5eb361c9928cdb8d8f6 | system-git-sync | agent | 2026-09-16 | deployed |
## Local review
```bash
bash cicd/run-review.sh
```