frozen-repo change (REQ-27 approval queue): routing.json
This commit is contained in:
+440
@@ -0,0 +1,440 @@
|
||||
{
|
||||
"chairman_direct_seats": [
|
||||
"coreci-cairo",
|
||||
"coreci-ceo",
|
||||
"coreci-cfo",
|
||||
"coreci-ciso",
|
||||
"coreci-coo",
|
||||
"coreci-cpo",
|
||||
"coreci-cto",
|
||||
"coreci-sre",
|
||||
"jonathan"
|
||||
],
|
||||
"chart_version": "1.2",
|
||||
"custodian": "CEO from seat (Chairman pre-seat) \u2014 approval-routing row",
|
||||
"drift": [
|
||||
{
|
||||
"kind": "extra_chart_claim",
|
||||
"org_chart_claimants": [
|
||||
"cto",
|
||||
"sre"
|
||||
],
|
||||
"resolution": "table wins; co-claimants ['cto'] recorded for the p06 assert (routing resolves to the row Owner only)",
|
||||
"system_id": "gitea-instance",
|
||||
"table_owner_seat": "sre"
|
||||
},
|
||||
{
|
||||
"kind": "chart_claim_without_table_row",
|
||||
"org_chart_claimants": [
|
||||
"chairman"
|
||||
],
|
||||
"resolution": "queue refuses this system-id at intake until a table row lands (fail-closed)",
|
||||
"system_id": "ollama-mint"
|
||||
},
|
||||
{
|
||||
"kind": "extra_chart_claim",
|
||||
"org_chart_claimants": [
|
||||
"cto",
|
||||
"sre"
|
||||
],
|
||||
"resolution": "table wins; co-claimants ['cto'] recorded for the p06 assert (routing resolves to the row Owner only)",
|
||||
"system_id": "pve-estate",
|
||||
"table_owner_seat": "sre"
|
||||
}
|
||||
],
|
||||
"generated_by": "scripts/p04-executor/gen-routing-table.py (stdlib; deterministic \u2014 no wall-clock fields)",
|
||||
"lanes": {
|
||||
"chairman_direct": "C-09 lane \u2014 Chairman (jonathan) is the sole decision authority; owning seat is audit-notified",
|
||||
"manager_owner": "normal lane \u2014 requestor manager (one hop) + system owner when an owned system is touched (both listed, deduped)",
|
||||
"skip_path": "unresolvable chain \u2014 approver CEO (coreci-ceo), queue Chairman (sanctioned skip-path 2)"
|
||||
},
|
||||
"manager_edges": {
|
||||
"coreci-cairo": "coreci-ceo",
|
||||
"coreci-ceo": "jonathan",
|
||||
"coreci-cfo": "coreci-ceo",
|
||||
"coreci-chat-po": "coreci-hap",
|
||||
"coreci-ciso": "coreci-ceo",
|
||||
"coreci-clo": "coreci-ceo",
|
||||
"coreci-cmo": "coreci-ceo",
|
||||
"coreci-content-lead": "coreci-cmo",
|
||||
"coreci-contracts-lead": "coreci-clo",
|
||||
"coreci-coo": "coreci-ceo",
|
||||
"coreci-cpo": "coreci-ceo",
|
||||
"coreci-cto": "coreci-ceo",
|
||||
"coreci-fpa-lead": "coreci-cfo",
|
||||
"coreci-hap": "coreci-cpo",
|
||||
"coreci-hbo": "coreci-coo",
|
||||
"coreci-hep": "coreci-cpo",
|
||||
"coreci-hfp": "coreci-cpo",
|
||||
"coreci-hip": "coreci-cpo",
|
||||
"coreci-hpe": "coreci-cto",
|
||||
"coreci-nextcraft-po": "coreci-hep",
|
||||
"coreci-nova-po": "coreci-hip",
|
||||
"coreci-openyield-po": "coreci-hfp",
|
||||
"coreci-researchx-po": "coreci-hap",
|
||||
"coreci-secops-lead": "coreci-ciso",
|
||||
"coreci-spec-dns": "coreci-sre",
|
||||
"coreci-spec-edge": "coreci-sre",
|
||||
"coreci-spec-mail": "coreci-sre",
|
||||
"coreci-spec-monitors": "coreci-sre",
|
||||
"coreci-spec-sop": "coreci-sre",
|
||||
"coreci-sre": "coreci-cto"
|
||||
},
|
||||
"manager_edges_unresolvable": [
|
||||
{
|
||||
"reason": "username null (seat unminted; mint at requisition)",
|
||||
"seat_node": "spec-content-writer"
|
||||
},
|
||||
{
|
||||
"reason": "username null (seat unminted; mint at requisition)",
|
||||
"seat_node": "spec-finance-analyst"
|
||||
},
|
||||
{
|
||||
"reason": "username null (seat unminted; mint at requisition)",
|
||||
"seat_node": "spec-legal-researcher"
|
||||
},
|
||||
{
|
||||
"reason": "username null (seat unminted; mint at requisition)",
|
||||
"seat_node": "spec-onboarding"
|
||||
},
|
||||
{
|
||||
"reason": "username null (seat unminted; mint at requisition)",
|
||||
"seat_node": "spec-sec-analyst"
|
||||
},
|
||||
{
|
||||
"reason": "username null (seat unminted; mint at requisition)",
|
||||
"seat_node": "spec-sre-ops"
|
||||
}
|
||||
],
|
||||
"never_execute": "the queue NEVER executes anything against production \u2014 decision-record only (REQ-27; scripts/p04-executor/DESIGN.md)",
|
||||
"ownership_table_version": "v1.2",
|
||||
"schema": "coreci.approval_queue.routing/1",
|
||||
"seats": {
|
||||
"coreci-cairo": {
|
||||
"level": 2,
|
||||
"node": "cairo",
|
||||
"status": "active"
|
||||
},
|
||||
"coreci-ceo": {
|
||||
"level": 1,
|
||||
"node": "ceo",
|
||||
"status": "active"
|
||||
},
|
||||
"coreci-cfo": {
|
||||
"level": 2,
|
||||
"node": "cfo",
|
||||
"status": "active"
|
||||
},
|
||||
"coreci-chat-po": {
|
||||
"level": 4,
|
||||
"node": "chat-po",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-ciso": {
|
||||
"level": 2,
|
||||
"node": "ciso",
|
||||
"status": "active"
|
||||
},
|
||||
"coreci-clo": {
|
||||
"level": 2,
|
||||
"node": "clo",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-cmo": {
|
||||
"level": 2,
|
||||
"node": "cmo",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-content-lead": {
|
||||
"level": 4,
|
||||
"node": "content-lead",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-contracts-lead": {
|
||||
"level": 4,
|
||||
"node": "contracts-lead",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-coo": {
|
||||
"level": 2,
|
||||
"node": "coo",
|
||||
"status": "active"
|
||||
},
|
||||
"coreci-cpo": {
|
||||
"level": 2,
|
||||
"node": "cpo",
|
||||
"status": "active"
|
||||
},
|
||||
"coreci-cto": {
|
||||
"level": 2,
|
||||
"node": "cto",
|
||||
"status": "active"
|
||||
},
|
||||
"coreci-fpa-lead": {
|
||||
"level": 4,
|
||||
"node": "fpa-lead",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-hap": {
|
||||
"level": 3,
|
||||
"node": "hap",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-hbo": {
|
||||
"level": 3,
|
||||
"node": "hbo",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-hep": {
|
||||
"level": 3,
|
||||
"node": "hep",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-hfp": {
|
||||
"level": 3,
|
||||
"node": "hfp",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-hip": {
|
||||
"level": 3,
|
||||
"node": "hip",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-hpe": {
|
||||
"level": 3,
|
||||
"node": "hpe",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-nextcraft-po": {
|
||||
"level": 4,
|
||||
"node": "nextcraft-po",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-nova-po": {
|
||||
"level": 4,
|
||||
"node": "nova-po",
|
||||
"status": "on-hold"
|
||||
},
|
||||
"coreci-openyield-po": {
|
||||
"level": 4,
|
||||
"node": "openyield-po",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-researchx-po": {
|
||||
"level": 4,
|
||||
"node": "researchx-po",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-secops-lead": {
|
||||
"level": 4,
|
||||
"node": "secops-lead",
|
||||
"status": "planned"
|
||||
},
|
||||
"coreci-spec-dns": {
|
||||
"level": 5,
|
||||
"node": "zz-dns",
|
||||
"status": "bench"
|
||||
},
|
||||
"coreci-spec-edge": {
|
||||
"level": 5,
|
||||
"node": "zz-edge",
|
||||
"status": "bench"
|
||||
},
|
||||
"coreci-spec-mail": {
|
||||
"level": 5,
|
||||
"node": "zz-mail",
|
||||
"status": "bench"
|
||||
},
|
||||
"coreci-spec-monitors": {
|
||||
"level": 5,
|
||||
"node": "zz-monitors",
|
||||
"status": "bench"
|
||||
},
|
||||
"coreci-spec-sop": {
|
||||
"level": 5,
|
||||
"node": "zz-sop",
|
||||
"status": "bench"
|
||||
},
|
||||
"coreci-sre": {
|
||||
"level": 3,
|
||||
"node": "sre",
|
||||
"status": "active"
|
||||
},
|
||||
"jonathan": {
|
||||
"level": 0,
|
||||
"node": "chairman",
|
||||
"status": "active"
|
||||
}
|
||||
},
|
||||
"sources": {
|
||||
"org_chart": "company/org/org-chart.json (workspace submodule, read-only)",
|
||||
"systems_ownership": [
|
||||
"docs/company/org/systems-ownership.md (this repo, authoritative)",
|
||||
"company/org/systems-ownership.md (coreci/company byte-copy, equality asserted at generation)"
|
||||
]
|
||||
},
|
||||
"systems": {
|
||||
"agent-definitions": {
|
||||
"co_owners": [],
|
||||
"owned_system": "coreci/agent-definitions",
|
||||
"owner": "coreci-cairo",
|
||||
"owner_cell": "CAIRO",
|
||||
"owner_seat": "cairo",
|
||||
"routing_note": "agent-read-only; self-mod denied everywhere"
|
||||
},
|
||||
"approval-routing": {
|
||||
"co_owners": [],
|
||||
"owned_system": "this table + org-chart.json edges",
|
||||
"owner": "coreci-ceo",
|
||||
"owner_cell": "CEO from seat (Chairman pre-seat)",
|
||||
"owner_seat": "ceo",
|
||||
"routing_note": ""
|
||||
},
|
||||
"company-records": {
|
||||
"co_owners": [],
|
||||
"owned_system": "coreci/company (constitution, registry, org, standards)",
|
||||
"owner": "coreci-ceo",
|
||||
"owner_cell": "CEO from seat (Chairman pre-seat)",
|
||||
"owner_seat": "ceo",
|
||||
"routing_note": "registry maintenance RACI = CAIRO (standards/registry-maintenance.md)"
|
||||
},
|
||||
"edge-haproxy": {
|
||||
"co_owners": [],
|
||||
"owned_system": "haproxy-1 SNI/TCP frontends + LE TLS",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": ""
|
||||
},
|
||||
"employee-homes-standard": {
|
||||
"co_owners": [],
|
||||
"owned_system": "home-repo scaffold + opencode.json canonicals + drift monitors",
|
||||
"owner": "coreci-cairo",
|
||||
"owner_cell": "CAIRO",
|
||||
"owner_seat": "cairo",
|
||||
"routing_note": "per-home operational state owned by the employee"
|
||||
},
|
||||
"employee-runner-fleet": {
|
||||
"co_owners": [],
|
||||
"owned_system": "employee-* runner LXCs + opencode image",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "digest pin D-112; label changes SRE-owned"
|
||||
},
|
||||
"executor-service": {
|
||||
"co_owners": [],
|
||||
"owned_system": "executor.coreci.dev approval queue (LXC 116/117)",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre (service)",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "routing-map custody = CEO (Chairman pre-seat); repos frozen"
|
||||
},
|
||||
"gitea-instance": {
|
||||
"co_owners": [],
|
||||
"owned_system": "git.coreci.dev (Gitea 1.26.1)",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre (CTO at seat)",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "instance admin class = Chairman-direct for coreci-sre requests"
|
||||
},
|
||||
"meetings": {
|
||||
"co_owners": [],
|
||||
"owned_system": "coreci/meetings (transcripts, labels, issues)",
|
||||
"owner": "coreci-coo",
|
||||
"owner_cell": "COO",
|
||||
"owner_seat": "coo",
|
||||
"routing_note": "transcript freshness + action-item aging monitors"
|
||||
},
|
||||
"models-catalog": {
|
||||
"co_owners": [
|
||||
"jonathan"
|
||||
],
|
||||
"owned_system": "agent-definitions/models/catalog.json + ollama keys",
|
||||
"owner": "coreci-cairo",
|
||||
"owner_cell": "CAIRO (catalog + quarterly rotation); Chairman (wave mints)",
|
||||
"owner_seat": "cairo",
|
||||
"routing_note": "spend-jump rows escalate to Chairman (D-169)"
|
||||
},
|
||||
"notify-ladder": {
|
||||
"co_owners": [],
|
||||
"owned_system": "Matrix + SMTP + ntfy alert ladder",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "URLs live in Bao KV"
|
||||
},
|
||||
"observability": {
|
||||
"co_owners": [],
|
||||
"owned_system": "Kuma (LXC 118) + Pomerium (LXC 120)",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": ""
|
||||
},
|
||||
"openbao": {
|
||||
"co_owners": [],
|
||||
"owned_system": "bao.coreci.dev (IDP + secrets)",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "AppRole/KV schema changes = CAIRO + SRE joint"
|
||||
},
|
||||
"products": {
|
||||
"co_owners": [],
|
||||
"owned_system": "product repos (researchx, nextcraft, coreci-chat, nova-platform, openyield, acdl)",
|
||||
"owner": "coreci-cpo",
|
||||
"owner_cell": "CPO + product POs (post-hire ratification)",
|
||||
"owner_seat": "cpo",
|
||||
"routing_note": "portfolio actions = owner approval per constitution #3"
|
||||
},
|
||||
"pve-estate": {
|
||||
"co_owners": [],
|
||||
"owned_system": "Proxmox VE + LXC estate",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre (CTO at seat)",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "pipeline-only mutations (operator mandate)"
|
||||
},
|
||||
"security-posture": {
|
||||
"co_owners": [],
|
||||
"owned_system": "security/compliance posture + incident policy",
|
||||
"owner": "coreci-ciso",
|
||||
"owner_cell": "CISO at seat (coreci-sre interim)",
|
||||
"owner_seat": "ciso",
|
||||
"routing_note": "RED-class skips path \u2192 CISO + CEO + Chairman"
|
||||
},
|
||||
"sre-repo": {
|
||||
"co_owners": [],
|
||||
"owned_system": "coreci/sre (SOPs, workflows, IaC)",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": ""
|
||||
},
|
||||
"stalwart": {
|
||||
"co_owners": [],
|
||||
"owned_system": "stalwart-1 mail (cloudinit.dev + coreci.dev internal-only)",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "D-086 assert monthly; policy row Chairman-direct"
|
||||
},
|
||||
"technitium-dns": {
|
||||
"co_owners": [],
|
||||
"owned_system": "dns.coreci.dev authoritative zones",
|
||||
"owner": "coreci-sre",
|
||||
"owner_cell": "coreci-sre",
|
||||
"owner_seat": "sre",
|
||||
"routing_note": "coreci.dev zone policy = Chairman veto (D-086: never external MX)"
|
||||
},
|
||||
"workforce-ledger": {
|
||||
"co_owners": [],
|
||||
"owned_system": "company/org/workforce/ (dossiers, skill matrix)",
|
||||
"owner": "coreci-cairo",
|
||||
"owner_cell": "CAIRO",
|
||||
"owner_seat": "cairo",
|
||||
"routing_note": ""
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user