clawdie/layered-soul
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(hive): mark #101/#102 merged in Status

Browse source 
register-tenant/list-tenants (#101) and --jail-name/--jail-root on spawn
(#102) are merged to colibri main (PR #107). Update Status: CLI-driveability
moves to DONE/merged, the critical-path note reflects the manual SQLite +
raw-socket steps are now CLI commands, and the one-line plan drops the
"merge #101/#102" step.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Sam & Claude 2026-06-20 14:19:10 +02:00
parent 4d8023581f
commit b1de1efbb0
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
docs/HIVE-ONBOARDING.md
View file

@ -28,13 +28,15 @@ server-match (#67/#68/#69), and the first-proof runbook (#103).
path in [`../docs/VAULT-PROVISION-FIRST-PROOF.md`](https://code.smilepowered.org/clawdie/colibri) path in [`../docs/VAULT-PROVISION-FIRST-PROOF.md`](https://code.smilepowered.org/clawdie/colibri)
(colibri). Critical path now: operator runs the runbook (scratch jail + test collection, (colibri). Critical path now: operator runs the runbook (scratch jail + test collection,
manual SQLite tenant insert, raw-socket jailed spawn) → verify `.env` at `0600` + tenant manual SQLite tenant insert, raw-socket jailed spawn) → verify `.env` at `0600` + tenant
`active`. `active`. With #101/#102 merged, the manual SQLite insert and raw-socket spawn are now
`colibri register-tenant …` and `colibri spawn-agent … --jail-name … --jail-root …`.
Open work, categorized: Open work, categorized:
- **Hardening:** #92 (path canonicalization/containment). - **Hardening:** #92 (path canonicalization/containment).
- **CLI-driveability (post-proof ergonomics, not proof blockers):** #101 (`register-tenant` - **CLI-driveability — DONE, merged:** #101 (`register-tenant` + `list-tenants`) and #102
command), #102 (`--jail` on `spawn-agent`) — these replace the runbook's manual steps. (`--jail-name`/`--jail-root` on `spawn-agent`/`spawn-local`) are merged to colibri `main`
(PR #107); they replace the runbook's manual SQLite insert and raw-socket spawn.
- **Source-of-truth/naming:** #98 (`npm-node24` vs `npm`), clawdie-iso #70 (agent-jail - **Source-of-truth/naming:** #98 (`npm-node24` vs `npm`), clawdie-iso #70 (agent-jail
section in `pkg-list-jails.txt`). section in `pkg-list-jails.txt`).
- **Cost/source-of-truth:** fill `docs/HOST-MATRIX.md` cost provenance rows before buying - **Cost/source-of-truth:** fill `docs/HOST-MATRIX.md` cost provenance rows before buying
@ -43,7 +45,7 @@ Open work, categorized:
(poudriere) and a signed skill repo — so paid tenants run first-party-only skills and (poudriere) and a signed skill repo — so paid tenants run first-party-only skills and
packages instead of external marketplaces. packages instead of external marketplaces.
**One-line plan:** run the first-proof runbook → then land #101/#102 for CLI driveability, **One-line plan:** run the first-proof runbook (now CLI-driveable via merged #101/#102) →
#92 before promoting past scratch, and fill verified OVH/self-host cost data before buying #92 before promoting past scratch, and fill verified OVH/self-host cost data before buying
or depending on a new mother/build host. or depending on a new mother/build host.