 glm-5.3-flash
|
addc874667
|
docs(architecture): resolve OQ-06/07/08 — per-repo authz, registry backing, CRUD ops
ADR-011 (resolves OQ-08): per-repo authorization — grants live in repo
records keyed on the stable logical identity id (alkcall ADR-025,
referenced); policy is alkgit-core's authorize() function (public+read
anonymous-first-class, write always authenticated+granted); alkgit
stores no identity records; vault placement resolved as nothing to
place in v1.
ADR-012 (resolves OQ-06/OQ-07): registry backing + write surface —
GitRegistryStore write supertrait (alknet ADR-035 read/write split
shape); registry-file default (per-repo record files + in-memory
index, config-seeded, op-mutable, no gitoxide); git/repo/* CRUD ops
shipped External with scope+ownership ACL (create mints ownership and
seeds creator grants; ownership never implies git access); the
two-op-kind classification recorded (open op + call ops from one
crate, per alkcall ADR-047); recorded split trigger for a downstream
platform crate.
Doc sync: backend.md (five-trait family, feature model split,
two-op-kinds), doors.md + overview.md (authorize policy, dual-kind
crate map), open-questions.md (OQ-06/07/08 resolved), README (ADR
table, current state), oq-06 tracker task closed (resolved early).
Verification: cargo test (default + --no-default-features), clippy
-D warnings, fmt --check.
|
2026-09-21 16:26:59 +00:00 |
|
|
glm-5.3-flash
|
8f73da5d12
|
docs(architecture): phase 1 bootstrap — specs, 9 ADRs, OQ tracker
Architecture documentation structure per sdd_process phase 1:
- README index (doc table, ADR table, lifecycle), overview with crate
map, dependency rules, and security invariants
- Component specs: storage, transport, http, ssh, alkgitd (all draft)
- ADRs 001-009: crate decomposition, front-door-blind core, V2-first
protocol, pack pipeline (data::output generation / data::input
ingestion), session substrate types, http adapter composition
(proposed, OQ-01), ACL-before-advertisement, registry-resolved repo
identity, bounded-resources budgets
- open-questions.md: OQ-01..08 with two deferred(scope), one
deferred(unclear), door-type definitions, blocker tracker tasks in
tasks/architecture/
- v1 ssh-door decision recorded: russh terminates wire SSH in alkgitd;
alkcall channels stay the internal substrate (OQ-03 partially
resolved)
Two review rounds (fresh-context subagent): 4 critical + 17 warnings
fixed in round one; zero critical + 4 warnings + 5 suggestions fixed in
round two. All ADR/OQ cross-references verified resolving.
|
2026-09-21 03:55:33 +00:00 |
|