7441c9f298
All findings from the inaugural LeadValidator audit resolved and confirmed. Release gate: PASS. VV_ISSUE_002 (BLOCKER): 15 OpenAPI specs verified present covering all 20 route groups (46 endpoints documented in docs/openapi/) VV_ISSUE_003 (MAJOR): Remove any types from src/db/pool.ts — replaced pool.query shim with unknown[] + Object.defineProperty, zero any types, eslint-disable suppressions removed VV_ISSUE_004 (MAJOR): Remove raw Pool from ScaffoldController and HealthDetailedController — injected AgentRepository/CredentialRepository and DbProbe interface respectively; added CredentialRepository.findActiveClientId() VV_ISSUE_005 (MAJOR): Add unit tests for 5 untested services — ComplianceStatusStore, EventPublisher, MarketplaceService, OIDCTrustPolicyService, UsageService VV_ISSUE_006 (MAJOR): Add integration tests for 7 missing route groups — analytics, billing, tiers, webhooks, marketplace, oidc-trust-policies, oidc-token-exchange VV_ISSUE_001 (MINOR): Create missing design.md and tasks.md in 4 OpenSpec archives — all archives now complete Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2.0 KiB
2.0 KiB
phase-7-devops-field-trial — Task Tracker
All tasks complete. Archive committed 2026-04-04.
WS1 — Update Existing DevOps Docs (8 files)
- 1.1
environment-variables.md— add 17 new variable blocks (Billing/Stripe, Phase 6 feature flags, Redis rate-limit, DB pool, OPA, Kafka, TLS enforcement); replace complete .env example - 1.2
database.md— update schema diagram to show all 26 tables; add new table definitions for analytics_events, tenant_tiers, delegation_chains, and all Phase 3–5 tables - 1.3
deployment.md— add Phase 3–6 env vars to quick-reference table - 1.4
local-development.md— add nvm activation step; add Step 7 for Next.js portal startup - 1.5
operations.md— document 19 Prometheus metrics; update Redis key patterns with tier counters and compliance cache; add 4 new troubleshooting entries - 1.6
architecture.md— add Next.js portal to diagram; document 14 new services; list all 25 API routes - 1.7
security.md— minor targeted updates (Stripe webhook verification, OIDC trust policies) - 1.8
vault-setup.md— minor targeted updates (new secret paths for Phase 3–6)
WS2 — New Field Trial Guide
- 2.1 Create
docs/devops/field-trial.md— prerequisites + Section 0 (RSA key generation, .env setup) - 2.2 Phase A: Stack startup (Docker Compose + 26 migrations)
- 2.3 Phase B: Core product journeys (8 steps — org → agent → credentials → token → verify → rotate → audit)
- 2.4 Phase C: Security guardrails (7 tests — auth, rate limit, tier limit, tenant isolation)
- 2.5 Phase D: Next.js portal verification (9 routes)
- 2.6 Phase E: AGNTCY conformance suite (4 protocol tests)
- 2.7 Phase F: Performance baseline (Apache Bench, token <100ms, API <200ms targets)
- 2.8 Troubleshooting section (9 entries with Symptom/Cause/Fix)
WS3 — README Index
- 3.1
README.md— add field-trial.md to document index
QA
- 4.1 QA sign-off — 15/15 gates PASS