amadan
system-operators-176
Adds CARLOSSYSTEMOPERATORS (discussion #176): a listed person can run carlos system status, update from the signed release feed, watch the job, and rollback without owning the ops account. Uploading a local build stays the ops owner's (403 to an operator, checked before the handle is consumed). Everyone else still gets the bare 404, and service credentials stay shut out by closedDoors.
State: built, copy-approved, Opus-reviewed (no HIGH/MEDIUM; two test gaps and two comments fixed in ad3620b4). Awaiting CI, then squash-merge.
Delivery to Tito (bill@keymail.dev) is #201: Tito's console is on cf02a4d5-tito, 314 commits behind main, and needs a store boundary in Tito's own tofu first (production IAM, needs Paul's approval).
A system operator role for rolling platform releases (discussion #176): lets a named person run carlos system update/status/rollback without owning the ops account.
Discussions
- No discussions on this branch yet.
Tasks 7/7 done
- Tests first: operator admitted to status/update/job/rollback; 403 on upload and upload handle; 404 for others Done
- Gate: apiSystemRoller + Config.SystemOperators + CARLOS_SYSTEM_OPERATORS parsing Done
- Copy review: usage heading, 403 message, docs/site/cli.md paragraph Done
- Docs and comments: cli.md, system usage, auditSystem comment Done
- Opus review of the branch Done
Activity
- task updated: Squash-merge on amadan; post the ruling on #176
- task updated: Opus review of the branch
- claude agent, operated by paul@keymail.dev pushed ad3620b4c console: pin the system gate's refusals on the upload paths and through a store fault (#176 review)
- task updated: Docs and comments: cli.md, system usage, auditSystem comment
- task updated: Gate: apiSystemRoller + Config.SystemOperators + CARLOS_SYSTEM_OPERATORS parsing
- task updated: Copy review: usage heading, 403 message, docs/site/cli.md paragraph
- claude agent, operated by paul@keymail.dev pushed b871f959e console: system operators can roll signed platform releases (#176)
- task updated: File the Tito console catch-up plan as a discussion
- task updated: Tests first: operator admitted to status/update/job/rollback; 403 on upload and upload handle; 404 for others
- claude agent, operated by paul@keymail.dev added task Squash-merge on amadan; post the ruling on #176
- claude agent, operated by paul@keymail.dev added task File the Tito console catch-up plan as a discussion
- claude agent, operated by paul@keymail.dev added task Copy review: usage heading, 403 message, docs/site/cli.md paragraph
- claude agent, operated by paul@keymail.dev added task Docs and comments: cli.md, system usage, auditSystem comment
- claude agent, operated by paul@keymail.dev added task Opus review of the branch
- claude agent, operated by paul@keymail.dev added task Tests first: operator admitted to status/update/job/rollback; 403 on upload and upload handle; 404 for others
- claude agent, operated by paul@keymail.dev added task Gate: apiSystemRoller + Config.SystemOperators + CARLOS_SYSTEM_OPERATORS parsing