7441c9f298
All findings from the inaugural LeadValidator audit resolved and confirmed. Release gate: PASS. VV_ISSUE_002 (BLOCKER): 15 OpenAPI specs verified present covering all 20 route groups (46 endpoints documented in docs/openapi/) VV_ISSUE_003 (MAJOR): Remove any types from src/db/pool.ts — replaced pool.query shim with unknown[] + Object.defineProperty, zero any types, eslint-disable suppressions removed VV_ISSUE_004 (MAJOR): Remove raw Pool from ScaffoldController and HealthDetailedController — injected AgentRepository/CredentialRepository and DbProbe interface respectively; added CredentialRepository.findActiveClientId() VV_ISSUE_005 (MAJOR): Add unit tests for 5 untested services — ComplianceStatusStore, EventPublisher, MarketplaceService, OIDCTrustPolicyService, UsageService VV_ISSUE_006 (MAJOR): Add integration tests for 7 missing route groups — analytics, billing, tiers, webhooks, marketplace, oidc-trust-policies, oidc-token-exchange VV_ISSUE_001 (MINOR): Create missing design.md and tasks.md in 4 OpenSpec archives — all archives now complete Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
34 lines
2.0 KiB
Markdown
34 lines
2.0 KiB
Markdown
## phase-7-devops-field-trial — Task Tracker
|
||
|
||
All tasks complete. Archive committed 2026-04-04.
|
||
|
||
### WS1 — Update Existing DevOps Docs (8 files)
|
||
|
||
- [x] 1.1 `environment-variables.md` — add 17 new variable blocks (Billing/Stripe, Phase 6 feature flags, Redis rate-limit, DB pool, OPA, Kafka, TLS enforcement); replace complete .env example
|
||
- [x] 1.2 `database.md` — update schema diagram to show all 26 tables; add new table definitions for analytics_events, tenant_tiers, delegation_chains, and all Phase 3–5 tables
|
||
- [x] 1.3 `deployment.md` — add Phase 3–6 env vars to quick-reference table
|
||
- [x] 1.4 `local-development.md` — add nvm activation step; add Step 7 for Next.js portal startup
|
||
- [x] 1.5 `operations.md` — document 19 Prometheus metrics; update Redis key patterns with tier counters and compliance cache; add 4 new troubleshooting entries
|
||
- [x] 1.6 `architecture.md` — add Next.js portal to diagram; document 14 new services; list all 25 API routes
|
||
- [x] 1.7 `security.md` — minor targeted updates (Stripe webhook verification, OIDC trust policies)
|
||
- [x] 1.8 `vault-setup.md` — minor targeted updates (new secret paths for Phase 3–6)
|
||
|
||
### WS2 — New Field Trial Guide
|
||
|
||
- [x] 2.1 Create `docs/devops/field-trial.md` — prerequisites + Section 0 (RSA key generation, .env setup)
|
||
- [x] 2.2 Phase A: Stack startup (Docker Compose + 26 migrations)
|
||
- [x] 2.3 Phase B: Core product journeys (8 steps — org → agent → credentials → token → verify → rotate → audit)
|
||
- [x] 2.4 Phase C: Security guardrails (7 tests — auth, rate limit, tier limit, tenant isolation)
|
||
- [x] 2.5 Phase D: Next.js portal verification (9 routes)
|
||
- [x] 2.6 Phase E: AGNTCY conformance suite (4 protocol tests)
|
||
- [x] 2.7 Phase F: Performance baseline (Apache Bench, token <100ms, API <200ms targets)
|
||
- [x] 2.8 Troubleshooting section (9 entries with Symptom/Cause/Fix)
|
||
|
||
### WS3 — README Index
|
||
|
||
- [x] 3.1 `README.md` — add field-trial.md to document index
|
||
|
||
### QA
|
||
|
||
- [x] 4.1 QA sign-off — 15/15 gates PASS
|