128 Releases 190 Tags

RSS Feed

• v1.5.0 f68f85c9fd

  Compare

  v1.5.0 — Consumer happy path + zero-trust docs + reusable deploy workflow Stable

  grimacing released this 2026-07-22 17:26:42 +00:00 | 529 commits to main since this release

  Milestone v1.5 (feature) — Phase 20

  Summary

  Makes the consumer happy path self-evident, documents the zero-trust credential model, and provides a reusable deploy workflow so consumer repos never need to clone the platform repo or invoke its scripts locally.

  Requirements covered (6/6)

  • REQ-46: README rewritten — platform-source vs consumer-repo distinction; platform flow as mermaid; L3A/L3B + spike nomenclature scrubbed.
  • REQ-47: Generic docs/CONSUMER_GUIDE.md — mermaid, versioned uses: @v1.4, consumer-scoped prereqs, run-time platform fetch.
  • REQ-48: Credentials zero-trust OIDC + ABAC default + static-key override with daily rotation.
  • REQ-49: Byte-identical reusable deploy.yml (Gitea + GitHub) implementing pipelines/deploy.yaml.
  • REQ-50: contracts/static-asset.yaml @v1.4.
  • REQ-51: 19 new deploy-workflow conformance tests.

  Review: READY TO SHIP (1 P0 fixed, 6 P1 flagged)

  P0 (fixed): contract path resolution — run_platform.sh resolves relative contract path against caller CWD.

  Tests: 154 pass. CI pipeline: green.

  Known issues (P1, post-hoc)

  1. v1.4 floating tag missing — operator must create.
  2. Module READMEs stale @v1.
  3. Static-key override not wired in deploy workflow.
  4. ABAC doc overstatement.
  5. Missing deploy triggers test.
  6. Artifact account-ID leak via terraform.tf.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)