docs(decisions-log): end-of-session PM handoff

Conversation 1 Commits 2 Files Changed 1

+145

2 Commits

Author	SHA1	Message	Date
jakman85andClaude Opus 5	4b31f97486	docs(decisions-log): addendum — detector armed, and why an agent cannot merge here gate / gate (pull_request) Successful in 1m34s Details gate / conformance (pull_request) Has been skipped Details Records two findings from the unattended session. The drift detector was INERT: set-ci-token.sh stored the secret under a name Gitea reserves (GITEA_ prefix, HTTP 400 "invalid secret name"), sent the PUT to /dev/null, and printed success anyway. A token existed; no secret did. Enabling REQUIRE_GITEA_SETTINGS on top of that would have blocked every PR including its own fix. PR #15 fixes it and its CI is green WITH require active, which is the only proof that counts. And: merging as gitea-admin returns HTTP 405 "Does not have enough approvals". required_approvals:1 + block_admin_merge_override:true + an author who cannot self-approve means "merge on green CI" is not executable by an agent. Recorded as the control working rather than a fault, and deliberately not circumvented -- self-approval would hollow out the boundary just built. The choice of what to do about it is the operator s, and whatever is chosen must also change the declaration in expected-branch-protection.json or the detector will correctly fail on the drift. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>	2026-09-29 12:12:33 -05:00
jakman85andClaude Opus 5	911ead5fbd	docs(decisions-log): end-of-session PM handoff — six PRs open, and what a new machine needs gate / gate (pull_request) Successful in 1m33s Details gate / conformance (pull_request) Has been skipped Details Written for a different session on a different computer. Lists the three open gated PRs with their risk, the one command that must follow #11 (the drift detector skips until its token exists, and a skipped detector detects nothing), and the three credentials that are deliberately NOT in git and without which the toolbox and cluster are unreachable: the age private key, prod.kubeconfig, and a Gitea credential. Records the measured platform state while telling the reader to re-measure it rather than trust this log -- which is the whole point of CLAUDE.md section 2b, and which this log earned by being confidently wrong for a month. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>	2026-09-29 03:28:33 -05:00

Author

SHA1

Message

Date

jakman85andClaude Opus 5

4b31f97486

docs(decisions-log): addendum — detector armed, and why an agent cannot merge here

gate / gate (pull_request) Successful in 1m34s

Details

gate / conformance (pull_request) Has been skipped

Details

Records two findings from the unattended session.

The drift detector was INERT: set-ci-token.sh stored the secret under a name Gitea
reserves (GITEA_ prefix, HTTP 400 "invalid secret name"), sent the PUT to /dev/null,
and printed success anyway. A token existed; no secret did. Enabling
REQUIRE_GITEA_SETTINGS on top of that would have blocked every PR including its own
fix. PR #15 fixes it and its CI is green WITH require active, which is the only
proof that counts.

And: merging as gitea-admin returns HTTP 405 "Does not have enough approvals".
required_approvals:1 + block_admin_merge_override:true + an author who cannot
self-approve means "merge on green CI" is not executable by an agent. Recorded as
the control working rather than a fault, and deliberately not circumvented --
self-approval would hollow out the boundary just built. The choice of what to do
about it is the operator s, and whatever is chosen must also change the declaration
in expected-branch-protection.json or the detector will correctly fail on the drift.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

2026-09-29 12:12:33 -05:00

jakman85andClaude Opus 5

911ead5fbd

docs(decisions-log): end-of-session PM handoff — six PRs open, and what a new machine needs

gate / gate (pull_request) Successful in 1m33s

Details

gate / conformance (pull_request) Has been skipped

Details

Written for a different session on a different computer. Lists the three open gated
PRs with their risk, the one command that must follow #11 (the drift detector skips
until its token exists, and a skipped detector detects nothing), and the three
credentials that are deliberately NOT in git and without which the toolbox and
cluster are unreachable: the age private key, prod.kubeconfig, and a Gitea
credential.

Records the measured platform state while telling the reader to re-measure it rather
than trust this log -- which is the whole point of CLAUDE.md section 2b, and which
this log earned by being confidently wrong for a month.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

2026-09-29 03:28:33 -05:00

docs(decisions-log): end-of-session PM handoff #14