Skip to content

✨ docs(v0.2): add milestone and issue scoping plan with gh creation script#24

Merged
mm-weber merged 3 commits into
mainfrom
v0.2-draft
Jul 12, 2026
Merged

✨ docs(v0.2): add milestone and issue scoping plan with gh creation script#24
mm-weber merged 3 commits into
mainfrom
v0.2-draft

Conversation

@mm-weber

Copy link
Copy Markdown
Owner

Scopes the v0.2 GitHub milestone and its 10 issues (5 security-hardening SEC-1..5 plus 5 backlog BL-1..5, and an optional SEC-0 tracking epic), folding the agent blast-radius remediation lists into the existing v0.2 backlog. Includes EARS bodies, acceptance criteria, cross-references, and a re-runnable gh milestone/label/issue creation script.

Summary

re-runnable gh creation script (specs/v0.2/create-issues.sh).

Folds the agent blast-radius security remediation into the existing v0.2 backlog under one
v0.2 milestone: 5 security issues (SEC-1..5) plus an optional tracking epic (SEC-0), and
5 backlog issues (BL-1..5) from specs_v0.2.md.

Key decisions captured:

  • Git credentials: HTTPS + fine-grained PAT primary, deploy-key fallback.
  • Container: hardened bind mount (:ro static PDFs, narrow RW vault + code), chosen over
    volume-clone after a data-classification and Linux-host review.
  • Recoverability: off-container incremental vault snapshots; PDFs immutable; corpus rebuildable.

Each issue has an EARS body, acceptance criteria, and cross-refs to specs_v0.2.md /
SecurityReview.md.

Notes

  • Docs-only change (planning artifacts under specs/v0.2/); no code or CI touched.
  • create-issues.sh is idempotent (labels via --force, issues skipped if the title exists)
    and requires gh auth login.
  • Branch protection (SEC-3) and Dependabot enablement (BL-5) remain manual GitHub config,
    tracked by the issues.

Scopes the v0.2 GitHub milestone and its 10 issues (5 security-hardening
SEC-1..5 plus 5 backlog BL-1..5, and an optional SEC-0 tracking epic),
folding the agent blast-radius remediation lists into the existing v0.2
backlog. Includes EARS bodies, acceptance criteria, cross-references, and a
re-runnable gh milestone/label/issue creation script.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@mm-weber mm-weber self-assigned this Jul 10, 2026
mm-weber and others added 2 commits July 10, 2026 04:52
Merge the v0.2 requirements, the sourcebooks MCP design review, and the
OCR/licensing follow-ups (formerly specs_v0.2.md) into the single
v0.2-milestone-plan.md: the forward backlog stays as the BL-1..5 issues; the
detailed design review and the R-1..R-5 record (incl. R-1E kreuzberg evidence)
move to appendices B and C. Delete specs_v0.2.md and repoint its live
references (README, THIRD_PARTY_NOTICES, dependabot.yml, create-issues.sh) to
the merged doc; CHANGELOG history left as-is.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Reconcile four drifts between the issue-creation script and the plan doc: adopt the richer milestone description in all copies; comment out the unused priority labels in Appendix A to match the script; correct the issue count (ten -> eleven, SEC-0..5 + BL-1..5) in both the Contents summary and the verification step; standardize the SEC-0 title tag on [epic].

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@mm-weber mm-weber merged commit b1989ab into main Jul 12, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant