George Lambert
c570dc10fb
Continue-until-done instructions live in Historical-Information.MD. run-review.sh now covers signed-config HTTP and catalog subjects. deploy-ns1.sh never skips tests and does not set PFC_REQUIRE_NPE.
32 lines
1.3 KiB
Markdown
32 lines
1.3 KiB
Markdown
# CI-CD review gate
|
|
|
|
ns1 deploy is **forbidden** until all of these are true:
|
|
|
|
1. Forgejo Actions (or `cicd/run-review.sh`) is green on the commit SHA.
|
|
2. A human records the SHA in this file's "Promoted" table (or a PR comment).
|
|
3. Config on the host is a **signed** wrapper (`sig.alg=ed25519`).
|
|
4. Admin-history cube has prev + new + diff for that config.
|
|
|
|
There is **no** auto-deploy job. A future `deploy.yml` must `if: false` or
|
|
require `workflow_dispatch` plus the promoted SHA.
|
|
|
|
## Promoted
|
|
|
|
Local `cicd/run-review.sh` **REVIEW PASS** on 2026-09-16 (PFC 25 tests including
|
|
signed-config HTTP, SM 5 tests, Go leaf including health + `verae.sm.*` acks,
|
|
catalog subjects). Reviewer: agent continuing Historical-Information.MD
|
|
without operator interruption.
|
|
|
|
| SHA | repo | reviewer | date | ns1 |
|
|
|---|---|---|---|---|
|
|
| f4da7ff44634973e1b32db93c694f6ee47c34e41 | secure-messaging | agent | 2026-09-16 | promote |
|
|
| 2c45603a3e14bbfd6de4e9b065ad43d234e46012 | peergos-for-compliance | agent | 2026-09-16 | promote |
|
|
| c46d494 | peergos-for-compliance-admin | agent | 2026-09-16 | promote |
|
|
| 1d01768 | nats-service-endpoints | agent | 2026-09-16 | promote |
|
|
| (see next hub commit) | system-git-sync | agent | 2026-09-16 | promote |
|
|
|
|
## Local review
|
|
|
|
```bash
|
|
bash cicd/run-review.sh
|
|
```
|