jakman85andClaude Opus 4.8
8c1368977e
Adopt the spec's Phase-0 clarifications (spec now at pin a7fc19f) into the impl: - schema v1.1: enforce exposure:public => auth.mode!=none (positive+negative tested). - Kyverno: add longhorn=>size and longhorn=>NOT-reacquirable invariants (R-STATE-02/03). - Ratify the homelab.keithjackson.dev/* label-key convention (now in spec docs/03). - R-TEST-06 spec-immutability gate: ci/SPEC_PIN + ci/spec-immutability.sh + gate.sh stage + Makefile target + a Gitea job (checks spec repo clean & at pin). - touched-requirements.sh: conformance tags are the authoritative source. Reconcile 3 CI seams the CI worker flagged (gate was RED, now GREEN): - create schemas/validate.sh (SCHEMA_VALIDATE_CMD entrypoint) — L0 schema gate runs. - fix l1.sh/conformance.sh to run.sh's real interface (fixed _artifacts/ paths; no --junit/--coverage) and collect artifacts. - exec bits on new scripts. make -C ci gate => PASS (l0 skips locally w/o kyverno binary; green in CI). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
7 lines
459 B
Plaintext
7 lines
459 B
Plaintext
# The spec commit (home-network-k3s main) this implementation is built against.
|
|
# R-TEST-06: agents MUST NOT modify the spec. The spec changes only via the human/
|
|
# System Architect; each legitimate spec advance is adopted here by bumping this pin
|
|
# in a reviewed change. CI (ci/spec-immutability.sh) fails if the spec repo is dirty
|
|
# or its HEAD != this pin — catching any unauthorized/unadopted spec modification.
|
|
a7fc19fad57c70e5c7b142afa142ac16e8b13091
|