Jon Chery b925fda3aa docs(P00): research findings — v0.14 ingress bootstrap ...

7 research topics: nft SNAT masquerade syntax, pve-firewall
coexistence (priority collision fix), podman-in-LXC (fuse=1
requirement), traefik v3.3 TLS model (certResolver does not exist —
use dynamic tls.certificates), pct create floating-IP syntax, podman
restart persistence (podman-restart.service), SELinux :Z omission.

Key findings that change the plan:
- nft postrouting: ip saddr 127.0.0.0/8 oifname != lo masquerade
- nft first-apply: pre-create table before nft -f
- pve-firewall: shift orca input/forward to priority -10
- LXC features: nesting=1,keyctl=1,fuse=1 (fuse=1 for fuse-overlayfs)
- traefik TLS: drop certResolver: orca, use dynamic tls.certificates
- podman: --restart=unless-stopped + enable podman-restart.service
- volumes: omit :Z flag, use :ro on both mounts

---ci---
project: orca
phase: 0
milestone: v0.14
status: research
---/ci---

2026-08-10 18:12:59 +00:00

..

ARCHITECTURE.md

docs(P00): research findings — threat model round 3 (~60 gaps, F26-F101)

2026-08-07 18:44:05 +00:00

AUDIT_v0.2_P01.md

docs(audit): fix .ciagent/ file discipline findings from v0.2 P01 audit

2026-06-03 22:19:45 +00:00

AUDIT_v0.8.md

docs(milestone): complete coverage-trust-hardening — v0.8 milestone release

2026-08-04 12:25:58 +00:00

BASH_CAPABILITY_MAP_v0.9.md

feat(P00): deprecation sweep + bash tooling gate + render contract + doc banners (v0.9 P00)

2026-08-05 16:26:26 +00:00

C02_SYNCTHING_FEASIBILITY_v0.9.md

feat(P09): Syncthing storage replication + conflict resolution (REQ-081; gates C-02, C-14)

2026-08-05 18:38:49 +00:00

CA_MIGRATION_SPEC_v0.9.md

feat(P0a1): multi-namespace path resolver + config demotion + known_hosts flock + CA migration spec (v0.9 P0a1)

2026-08-05 16:38:26 +00:00

CHECKPOINT.json

docs(P00): research findings — v0.14 ingress bootstrap

2026-08-10 18:12:59 +00:00

CLARIFY_v0.11.md

docs(clarify): resolve C1-C5 for v0.11 phase 0

2026-08-07 03:37:40 +00:00

CLARIFY_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

CLARIFY_v0.13.md

docs(P00): clarify v0.13 — 7 decisions resolved (D-248..D-254)

2026-08-07 18:43:15 +00:00

CLARIFY_v0.14.md

docs(P00): clarify — v0.14 ingress bootstrap decisions

2026-08-10 18:08:26 +00:00

config.json

docs(init): validate specification — v0.14 ingress bootstrap

2026-08-10 18:07:55 +00:00

GRILL_v0.3.md

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

GRILL_v0.8.md

docs(P00): grill v0.8 plan — PROCEED-WITH-CONDITION (4 binding fixes applied)

2026-08-04 00:49:07 +00:00

GRILL_v0.9.md

docs(P00): resolve C-04 — relabel v1.0→v0.10 milestone, keep all 40 phases, v1.0 UAT-gated

2026-08-05 16:08:33 +00:00

GRILL_v0.10.md

docs(P00): grill PASS (0.82) — 3 binding conditions, 3 phase challenges

2026-08-05 20:47:50 +00:00

GRILL_v0.11.md

docs(P00): grill v0.11 — 6 binding conditions (C-23..C-28), P10 split into P10a/P10b

2026-08-07 03:40:55 +00:00

GRILL_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

GRILL_v0.13.md

docs(P00): grill v0.13 — CONDITIONAL PROCEED (6 binding conditions C-44..C-49)

2026-08-07 18:49:18 +00:00

IDEATION_v0.7.md

docs(P00): v0.7 ideation results — 13 accepted, 0 skipped

2026-08-03 20:29:37 +00:00

IDEATION_v0.9.md

docs(P00): resolve C-04 — relabel v1.0→v0.10 milestone, keep all 40 phases, v1.0 UAT-gated

2026-08-05 16:08:33 +00:00

IDEATION_v0.10.md

docs(P00): ideate — 8 ideas accepted (REQ-091..098), ROADMAP renumbered

2026-08-05 20:47:10 +00:00

IDEATION_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

IDEATION_v0.13.md

docs(P00): ideation results — 15 accepted (REQ-149..REQ-163), 0 skipped

2026-08-07 18:44:24 +00:00

IDEATION.md

docs(P00): ideation - 34 ideas accepted

2026-06-03 21:03:59 +00:00

P23_DUAL_WRITE_DECISION.md

docs(P23): dual-write closure deferred to v1.x (REQ-138, F16, C-29)

2026-08-07 11:31:55 +00:00

PERSONAS.md

docs(P00): research findings — v0.14 ingress bootstrap

2026-08-10 18:12:59 +00:00

PHASE1_VERIFICATION_v0.6.md

docs(P01): verification report — all 4 layers PASS

2026-08-03 19:48:56 +00:00

PHASE1_VERIFICATION_v0.7.md

fix(P01): register orca cert command tree + cert_repo tests (REQ-053)

2026-08-04 00:05:10 +00:00

PHASE1_VERIFICATION_v0.8.md

verify(P01): 4-layer verification PASS — REQ-057 covered

2026-08-04 01:51:26 +00:00

PHASE1_VERIFICATION.md

feat(P01): unified namespace root via ORCA_HOME + --system flag

2026-08-03 18:05:01 +00:00

PHASE2_VERIFICATION_v0.6.md

docs(P02): verification report — all 4 layers PASS

2026-08-03 19:56:05 +00:00

PHASE2_VERIFICATION_v0.7.md

feat(P02): HCL config file parsing — internal/config package (REQ-054)

2026-08-04 00:09:33 +00:00

PHASE2_VERIFICATION_v0.8.md

verify(P02): 4-layer verification PASS — REQ-058, REQ-059 + TOFU bugfix

2026-08-04 12:07:56 +00:00

PHASE2_VERIFICATION.md

feat(P02): install.sh 1-liner + in-place update + README quickstart

2026-08-03 18:49:50 +00:00

PHASE3_VERIFICATION_v0.6.md

docs(P03): verification report — all 4 layers PASS

2026-08-03 20:00:12 +00:00

PHASE3_VERIFICATION_v0.7.md

test(P03): coverage uplift — engine/transport/proxmox/audit ≥50% + dispatch.go EOF fix (REQ-055)

2026-08-04 00:18:58 +00:00

PHASE3_VERIFICATION_v0.8.md

verify(P03): 4-layer verification PASS — REQ-060

2026-08-04 12:18:48 +00:00

PHASE3_VERIFICATION.md

feat(P03): docker release — multi-stage Dockerfile + Gitea container registry publish

2026-08-03 18:52:36 +00:00

PHASE4_VERIFICATION_v0.7.md

feat(P04): --pprof opt-in on orca daemon (REQ-056, I-308)

2026-08-04 00:22:17 +00:00

PHASE5_VERIFICATION.md

ship: v0.1 Foundation milestone complete (#1)

2026-06-03 20:08:57 +00:00

PHASE6_VERIFICATION.md

ship: v0.1 Foundation milestone complete (#1)

2026-06-03 20:08:57 +00:00

PHASE7_SECURITY_AUDIT.md

fix(P07): harden .gitignore for .env and document pre-existing secret leak

2026-06-03 20:42:39 +00:00

PLAN_v0.3.md

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

PLAN_v0.5.md

docs(P00): create phase plans

2026-08-03 18:01:16 +00:00

PLAN_v0.6.md

docs(P00): create phase plans

2026-08-03 19:40:21 +00:00

PLAN_v0.7.md

docs(P00): correct v0.7 tag line to v0.6.x per branch-strategy.md

2026-08-03 23:52:19 +00:00

PLAN_v0.8.md

docs(P00): grill v0.8 plan — PROCEED-WITH-CONDITION (4 binding fixes applied)

2026-08-04 00:49:07 +00:00

PLAN_v0.10.md

docs(P00): create phase plans — 5 phases, 4 waves, 18 tasks

2026-08-05 20:47:39 +00:00

PLAN_v0.11.md

docs(P00): create v0.11 phase plan (8 waves, 23 phases, 20 new REQs)

2026-08-07 03:39:27 +00:00

PLAN_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

PLAN_v0.13.md

docs(P00): incorporate grill binding conditions C-44..C-49

2026-08-07 18:49:49 +00:00

PLANS.md

docs(P00): create 4 v0.2 phase plans

2026-06-03 21:09:15 +00:00

PRD_v0.9.md

docs(P00): resolve C-04 — relabel v1.0→v0.10 milestone, keep all 40 phases, v1.0 UAT-gated

2026-08-05 16:08:33 +00:00

PRD_v0.11.md

docs(specify): adopt R-017..R-020, D-215..D-237, REQ-099..REQ-118 for v0.11

2026-08-07 03:37:24 +00:00

PROJECT.md

docs(init): validate specification — v0.14 ingress bootstrap

2026-08-10 18:07:55 +00:00

RELEASE_POLICY.md

ship: v0.1 Foundation milestone complete (#1)

2026-06-03 20:08:57 +00:00

REQUIREMENTS.md

docs(init): validate specification — v0.14 ingress bootstrap

2026-08-10 18:07:55 +00:00

RESEARCH_v0.3.md

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

RESEARCH_v0.5.md

docs(P00): research findings

2026-08-03 18:00:26 +00:00

RESEARCH_v0.6.md

docs(P00): research findings

2026-08-03 19:39:14 +00:00

RESEARCH_v0.7.md

docs(P00): v0.7 research findings + persona assessment

2026-08-03 20:29:07 +00:00

RESEARCH_v0.8.md

docs(P00): v0.8 research findings + persona assessment

2026-08-04 00:49:07 +00:00

RESEARCH_v0.10.md

docs(P00): research findings — docs gap analysis + release/install root cause

2026-08-05 20:46:32 +00:00

RESEARCH_v0.11.md

docs(P00): research findings + persona assessment for v0.11

2026-08-07 03:38:17 +00:00

RESEARCH_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

RESEARCH_v0.13.md

docs(P00): research findings — threat model round 3 (~60 gaps, F26-F101)

2026-08-07 18:44:05 +00:00

RESEARCH_v0.14.md

docs(P00): research findings — v0.14 ingress bootstrap

2026-08-10 18:12:59 +00:00

REVIEW_v0.8.md

docs(milestone): complete coverage-trust-hardening — v0.8 milestone release

2026-08-04 12:25:58 +00:00

ROADMAP.md

docs(init): validate specification — v0.14 ingress bootstrap

2026-08-10 18:07:55 +00:00