feat: add guarded Forgejo storage measurement #940

Merged

coilysiren merged 4 commits from aos/codex/20260806t050901z-50407-6291ab0a into main 2026-08-06 07:16:36 +00:00

Conversation 0 Commits 4 Files changed 14 +536 -72

coilyco-ops commented 2026-08-06 06:13:17 +00:00

Owner

Copy link

Closes #939

Status

Ready for review. AOSguard and both deployment paths pin released cli-guard/specgen v0.132.0.

Summary

• Add sealed aosguard ops forgejo-storage measure policy with fixed Kubernetes targets, filesystem paths, shell pipelines, and SQL.
• Compile the reviewed Python source into AOSguard and invoke its materialized absolute path with python3 -I.
• Remove doc-link from every AOSguard guardfile and remove the storage bridge from Python-module packaging.
• Continue independent report sections after timeout or failure and return nonzero for incomplete evidence.
• Document the AOSguard, generic kubectl, node-stats, and infrastructure rollout boundaries.

Validation

• ward exec repo-test-gate: 547 tests passed and every pre-commit hook passed.
• ward exec aosguard-build passed with the embedded source.
• ward exec aosguard-run -- ops forgejo-storage --help rendered python3 -I <embedded:forgejo_storage_measure.py>.
• cli-guard PR #273 and its CI passed, then release v0.132.0 was pinned.

Closes #939 ## Status Ready for review. AOSguard and both deployment paths pin released cli-guard/specgen `v0.132.0`. ## Summary * Add sealed `aosguard ops forgejo-storage measure` policy with fixed Kubernetes targets, filesystem paths, shell pipelines, and SQL. * Compile the reviewed Python source into AOSguard and invoke its materialized absolute path with `python3 -I`. * Remove `doc-link` from every AOSguard guardfile and remove the storage bridge from Python-module packaging. * Continue independent report sections after timeout or failure and return nonzero for incomplete evidence. * Document the AOSguard, generic kubectl, node-stats, and infrastructure rollout boundaries. ## Validation * `ward exec repo-test-gate`: 547 tests passed and every pre-commit hook passed. * `ward exec aosguard-build` passed with the embedded source. * `ward exec aosguard-run -- ops forgejo-storage --help` rendered `python3 -I <embedded:forgejo_storage_measure.py>`. * cli-guard PR #273 and its CI passed, then release `v0.132.0` was pinned.

coilyco-ops added 1 commit 2026-08-06 06:13:17 +00:00

feat: add guarded Forgejo storage measurement ... f928b4a615

Closes #939

Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Codex <noreply@openai.com>

coilyco-ops requested review from coilysiren 2026-08-06 06:13:17 +00:00

coilyco-ops referenced this pull request 2026-08-06 06:19:11 +00:00

Fix native Actions bridge CA trust on macOS #941

coilyco-ops added 1 commit 2026-08-06 06:57:12 +00:00

refactor: embed Forgejo storage measurement in aosguard ... 9689a7cfda

Closes #939

coilyco-ops added 1 commit 2026-08-06 07:07:07 +00:00

chore: pin embedded specgen release ... 8719ca822b

Closes #939

coilyco-ops added 1 commit 2026-08-06 07:10:27 +00:00

merge: refresh Forgejo storage branch ... 425a616c45

Closes #939

Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Codex <noreply@openai.com>

coilysiren merged commit fe795f525e into main 2026-08-06 07:16:36 +00:00

coilysiren deleted branch aos/codex/20260806t050901z-50407-6291ab0a 2026-08-06 07:16:37 +00:00

coilysiren referenced this pull request from a commit 2026-08-06 07:16:37 +00:00

feat: add guarded Forgejo storage measurement (#940)

coilyco-ops referenced this pull request 2026-08-06 07:47:56 +00:00

refactor: remove tiered context composition #947

Sign in to join this conversation.

Reviewers

No reviewers

coilysiren

Labels

Clear labels   

burndown-2026-06

Backlog burndown June 2026

  

burndown-2026-08

Closed in the 2026-08-26 backlog burn-down. Reopen freely: state:closed label:burndown-2026-08 recovers the whole set.

  

autonomy

async-consult

A human needs to consult on the issue to upgrade it to headless

  

autonomy

epic

This issue has many units of sub work - its size makes it meaningfully exclusive with other autonomy types

  

autonomy

headless

The agent can perform the work on its own

  

autonomy

live-collab

The agent and the human need to work together in realtime

  

coherence-core

Core review set for the warded control plane coherence milestone. These issues form the release spine; adjacent milestone issues are stretch or supporting work.

  

priority

P0

priority tier

  

priority

P1

priority tier

  

priority

P2

priority tier

  

priority

P3

priority tier

  

priority

P4

priority tier

  

qa-fixture

Disposable issue admitted to the bounded Ward QA verification lane.

  

role/advocate

requires work from the Developer Advocate seat

  

role/director

requires work from the Portfolio Director seat

  

role/exec

requires work from the exec role

  

role/frontend

requires work from the Frontend Engineer seat

  

role/gamedev

requires work from the Game Developer seat

  

role/human

requires a person, and specifically not an agent seat

  

role/platform

requires work from the Platform Engineer seat

  

role/qa

requires work from the QA role

  

role/science

requires work from the Applied Scientist seat

  

role/sysadmin

requires work from the Systems Administrator seat

  

state

ambient

ambient and ephemeral work, held as a maintained document rather than a queue

No labels

burndown-2026-06

burndown-2026-08

autonomy

async-consult

autonomy

epic

autonomy

headless

autonomy

live-collab

coherence-core

priority

P0

priority

P1

priority

P2

priority

P3

priority

P4

qa-fixture

role/advocate

role/director

role/exec

role/frontend

role/gamedev

role/human

role/platform

role/qa

role/science

role/sysadmin

state

ambient

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

coilyco-flight-deck/agentic-os!940

No description provided.