amadan

carlos / platform Public

← Branches

design-console-release-defences

Human

Defences after the 2026-10-06 console outage (v0.24.2's console artifact was the carlos CLI). Built: D1, where a box checks a named unit comes up after adoption, rolls back the console's process group, refuses the build until promote --retry, and alerts plus shows it in status --live. D2, where ship and adoption refuse a different Go program without --program-change, with a per-route program history for rollback. D3, an opt-in dev-proof requirement: dev mints a signed proof after 15 min healthy, flagship adopts only proven bytes or builds in its own healthy history, the policy file is /etc/carlos/proof-policy.json with closed-on-error semantics, break glass by removing it. Each plan passed per-task reviews and an Astra final review and re-review. D4 scripts are carloku-infrastructure#6 and platform-infrastructure#40. Held for Paul: copy review (README notes, docs/site/cli.md carlos proof, operator wording), squash merge, release, rollout. Rulings and open items: discussion 252.

Commits 64
Discussions 1 1 open
Tasks 7/10 done

Discussions 1 open

All discussions →

Tasks 7/10 done

  • Spec rev 1 written and pushed Done
  • Astra review round 1 Done
  • Answer Astra findings (rev 2) Done
  • Paul reviews the spec Done
  • Implementation plans (4 of 4) Done

All tasks →

Activity