sjat
0 followers · 0 following
  • Joined on 2026-03-22
Repositories
2
 Projects Packages Public activity Starred repositories
sjat pushed to main at sjat/boma 2026-06-10 11:32:43 +02:00
9be4366ac3 feat(backup): backup strategy foundation layer (ADR-022)
ed6d5463aa docs(backup): final-review fixes — stateless BACKUP.md, dump-step wording, spec sync
1e85c11ede docs(backup): update hardware ref (ubongo M70q, add fisi) + CAPABILITIES §9 (ADR-022)
5f946ac640 feat(backup): add dormant /check-backup verifier (ADR-022)
01e47d0890 docs(backup): add BACKUP.md step to new-role runbook (ADR-022)
Compare 11 commits »
sjat pushed to main at sjat/boma 2026-06-10 08:55:13 +02:00
032adf1525 docs(friction): log execution-mode recurrence; fix list de-indents
f151e99d04 docs(access): correct ADR-021 governance (runbook+gate, not scaffold)
13f0d482bd docs(access): wire ADR-021 into CLAUDE.md, STATUS, TODO
649925b303 docs(access): gate ACCESS.md in checklist + new-role runbook (ADR-021)
384b94e34b feat(access): add /check-access verifier command (ADR-021, dormant)
Compare 11 commits »
sjat pushed to main at sjat/boma 2026-06-06 19:54:01 +02:00
fcfb056591 docs(friction): record host-nftables build gotchas (iif/iifname, molecule ansible_host, venv PATH, apply-path coverage)
402913efb3 fix(base): make rollback snapshot restorable (flush-prefixed)
90683c7912 docs: record base firewall concern built (ADR-020 host layer)
6fb104e934 test(base): molecule verify asserts rendered firewall rules + nft -c
b006196cc5 fix(base): confirm firewall apply over a FRESH connection
Compare 14 commits »
sjat pushed to main at sjat/boma 2026-06-06 16:02:05 +02:00
2ad50e4d5b docs(capabilities): note two-layer firewall model (ADR-020)
a9287427e3 docs(todo): mark 3.5 firewall strategy decided (ADR-020)
e24aab28b2 docs: link ADR-020; harden firewall guardrail to the service catalog
d311f67098 docs(adr): ADR-020 firewall strategy (two-layer + shared catalog)
8d1d8a88ea docs(friction): escalate execution-mode prompt; no plan→impl approval gate
Compare 7 commits »
sjat pushed to main at sjat/boma 2026-06-06 15:24:03 +02:00
86bb3559ad STATUS: record tag standard + enforcement (ADR-019)
sjat pushed to main at sjat/boma 2026-06-06 15:22:19 +02:00
fac438cc92 fix(tags): recognize name: role key; only check roles: in plays
5aeeb094eb feat(tags): enforce role imports carry their role-name tag
Compare 2 commits »
sjat pushed to main at sjat/boma 2026-06-06 11:23:37 +02:00
2e5a1e1e23 fix(tags): exclude molecule scenarios from tag scan; clarify ADR enforcement
24b5e9361e docs(tags): ADR-019 + CLAUDE.md/TODO/CAPABILITIES (tagging standard)
9584cc2c76 feat(tags): Proxmox VM metadata convention (managed-by=terraform)
0b59107b33 feat(tags): enforce tag vocabulary in make lint; fix docker_host tag
a3ea2aceb2 feat(tags): scan roles/+playbooks/ and fail on unknown tags
Compare 9 commits »
sjat pushed to main at sjat/boma 2026-06-06 07:08:19 +02:00
9bdb3017bb CLAUDE.md: link ADR-018 (logging)
12baeba750 TODO: mark log management decided (ADR-018); reconcile 3.6
1021c6d25d STATUS: record logging pipeline + security alerting (ADR-018)
c6aa45037d ADR-012: track log-storage allocation + SSD wearout (ADR-018)
687d623a52 CAPABILITIES: Loki decided + Alloy agent + security alerting (ADR-018)
Compare 10 commits »
sjat pushed to main at sjat/boma 2026-06-05 20:37:48 +02:00
568729e7bd repo-scan: cut broken-path-ref + marker false positives
sjat pushed to main at sjat/boma 2026-06-05 19:28:17 +02:00
db76be2a63 review-repo: clear O7-O12 clarity items
sjat pushed to main at sjat/boma 2026-06-05 18:55:49 +02:00
8e4bf3dd88 ADR-006/014: clear two stale labels
d8afa94c4b Name and propagate the offsite_hosts inventory group (askari)
f0d189ca09 Thread the VERIFY.md convention through ADR-004/new-role/README
Compare 3 commits »
sjat pushed to main at sjat/boma 2026-06-05 18:24:44 +02:00
3dd03d4198 review-repo: 2026-06-05 report (4 auto-fixed, 12 open)
666ad42634 review-repo: fix DNS-write contradictions + stale control-node/template refs
f566fd17eb review-repo: add stale-deferred check for ADR Deferred entries
Compare 3 commits »
sjat pushed to main at sjat/boma 2026-06-05 18:06:30 +02:00
66d11cc352 FRICTION: stale-deferred-item pattern recurred a 3rd time — build the check
sjat pushed to main at sjat/boma 2026-06-05 18:01:21 +02:00
d5c62c99ad STATUS/ADR-015: mark the three deferred design threads resolved
sjat pushed to main at sjat/boma 2026-06-05 13:21:22 +02:00
91d851fe4d TODO: mark headless-browsing + test-user standard decided (ADR-017)
01e4f96983 STATUS: record Level 4 service-UI verification (ADR-017)
eb415db96e Git-ignore verify screenshots; add testing/reviews dir
920e47b50d CLAUDE.md: VERIFY.md role convention; link ADR-017
22c0747c0b service-checklist: add Level 4 UI verification to the gate
Compare 11 commits »
sjat pushed to main at sjat/boma 2026-06-05 12:20:23 +02:00
5322cce5c6 FRICTION: resolving a deferred decision needs a doc-wide grep sweep
sjat pushed to main at sjat/boma 2026-06-05 11:52:55 +02:00
cd62c5e098 new-host runbook: mesh VPN resolved to NetBird (ADR-016)
ed9fdcc10a CLAUDE.md: link ADR-016 (mesh VPN)
787aa3b8e1 STATUS: record NetBird mesh (coordinator + base enrollment)
841f666de9 CAPABILITIES: VPN decided — NetBird self-hosted (ADR-016)
08165ffb68 accepted-risks: R3 now the concrete NetBird coordinator risk
Compare 10 commits »
sjat pushed to main at sjat/boma 2026-06-05 09:51:40 +02:00
a53941dffe CLAUDE.md: fix capabilities doc link after rename to CAPABILITIES.md
7a48a60f14 CLAUDE.md: fix project summary — control node is physical ubongo
a30c1af3f0 CLAUDE.md: link ADR-015; note ubongo as physical control node
9653a34241 STATUS: record ubongo control host as designed, not built
55a3666d16 accepted-risks: reserve R3 mesh-VPN coordinator (pending choice)
Compare 17 commits »
sjat created branch chore/ubongo-control-host-docs in sjat/boma 2026-06-05 09:37:02 +02:00
sjat pushed to chore/ubongo-control-host-docs at sjat/boma 2026-06-05 09:37:02 +02:00
4cf4aaa12e Renamed capabilities doc to capital letters to comform with other.
d96cf9f846 FRICTION: default to subagent-driven execution, don't ask
0e9f179bfc Add implementation plan for ubongo control host
c1b21c9b2b Add design spec for ubongo control/AI-worker host
Compare 4 commits »