docs: restructure the roadmap around the one-way-door test, and close 151 audit findings - #9

Merged

cemililik merged 29 commits into

mainfrom

docs/roadmap-restructure

Aug 10, 2026

Commits on Aug 8, 2026

docs: restructure the roadmap around the one-way-door test

cemililik
and
claude
committed
f647cd6
docs: close the verification findings from the restructure

cemililik
and
claude
committed
7757c68
docs(roadmap): annotate the frozen phases with what changed after them

cemililik
and
claude
committed
aec9cde
docs(roadmap): give Phase 02d the two CI jobs Phase 01's note points at

cemililik
and
claude
committed
dfbd29d
fix(skills): correct the RLS template where agents actually execute it

cemililik
and
claude
committed
1e7114c
fix(rls): three PostgreSQL defects in the canonical isolation template

cemililik
and
claude
committed
ceaad39

Commits on Aug 9, 2026

fix(audit): settle the durability model on the transaction, not on SaveChanges

cemililik
and
claude
committed
0cce302
fix(tenancy): settle the slug namespace and the table-class × role × grant matrix

cemililik
and
claude
committed
31cd53e
fix(corpus): close the 23 defects the numbered findings never got a number for

cemililik
and
claude
committed
3e21867
fix(hub-contract): give the entitlement projection its grace and generation columns, and settle one auth chain for both directions

cemililik
and
claude
committed
1434e8f
fix(rls): put the session variables where the transaction is, and make the role model runnable

cemililik
and
claude
committed
b9ac78c
fix(entitlement): reserve "entitlement" for the Hub, and take the revocation list off the contract surface

cemililik
and
claude
committed
7446233
fix(demand-gating): make ADR-0035's own drivers true, and stop scheduling Dapr to a phase it left

cemililik
and
claude
committed
1d4c7cb
fix(roadmap): give the unowned tables an owner and the unscaffolded modules a phase

cemililik
and
claude
committed
022674b
docs(roadmap): lift Phase 02a's forward plan out of the delivery-history blockquote

cemililik
and
claude
committed
3562a4f
fix(boundaries): stop the corpus sanctioning a Hub call on the host-resolution path

cemililik
and
claude
committed
80e29d6
docs: the minor and polish sweep — waves 11 and 12

cemililik
and
claude
committed
5d9b2b9
fix(links): point cross-repo URLs at HodeTech, the owner the repos actually have

cemililik
and
claude
committed
a9134c0
fix(audit): a tenant-override read failure falls back, it does not reject

cemililik
and
claude
committed
ca1c06e
docs(roadmap): Hub P02c-1 shipped; the freeze moves to P02c-2

cemililik
and
claude
committed
78c7544
fix(review): close the four blockers the pre-PR review confirmed

cemililik
and
claude
committed
f3e2628
fix(review): endpoint counts, the OWNER TO contradiction, and the demand-gating claims

cemililik
and
claude
committed
44237e1
fix(review): CI claims that are not true, and Packet 3b's own inventory

cemililik
and
claude
committed
f317a97
fix(review): restore two Accepted ADR bodies I should not have edited

cemililik
and
claude
committed
0036362
fix(review): the audit DDL, the partition story, and three executable copies

cemililik
and
claude
committed
b28763c

Commits on Aug 10, 2026

fix(review): nine verified findings from the inline review

cemililik
and
claude
committed
37f959c
fix(ci): gate deferred jobs on repository variables, not a constant false

cemililik
and
claude
committed
a187629
docs(roadmap): P02c-1 is not a frozen branch; P02c-2 is what resumes

cemililik
and
claude
committed
914b5f6
fix(standards): mTLS fails at the handshake, and the secret path has no refresh yet

cemililik
and
claude
committed
bbbac2c