Skip to content

docs(backlog): cleanup + CI/quality + regression-coverage follow-ups#563

Merged
remyluslosius merged 5 commits into
mainfrom
docs/backlog-cleanup
Jun 16, 2026
Merged

docs(backlog): cleanup + CI/quality + regression-coverage follow-ups#563
remyluslosius merged 5 commits into
mainfrom
docs/backlog-cleanup

Conversation

@remyluslosius

Copy link
Copy Markdown
Contributor

Cleans BACKLOG.md to track only pending work, per the file's own convention.

Changes

  • Removed all completed tasks: both "Recently Completed" sections (feat: durable per-scan compliance evidence + /scans read & OSCAL surface #535, feat(ssh): extend sudo-S password fallback to liveness probe + discovery firewall queries #469–479) and every Done/shipped row from the Active tables (Top-failed-rules card, Compliance-trend card, Open-exceptions count, Adaptive Compliance Scheduler). Provenance stays in git history + SESSION_LOG.md.
  • Added P3 "Retention sweep for soft-deleted hosts"hosts.deleted_at rows are retained indefinitely today (no purge job exists; a soft-deleted row from 2026-05-25 is still in the DB). Proposes an optional, operator-configurable sweep (default disabled) so there's a real "forget this host" path.
  • Fixed stale tree header: active tree is the repo root (app/ was promoted 2026-06-05); the Python backend was archived out of the repo, not merely "frozen".
  • "Email alert notifications" reclassified Planned → Partial (channel layer shipped; alert-dispatch + per-user prefs remain).

Net +36 / −56. The remaining P0 packaging blockers (PKG-1 keys, PKG-2 Kensa corpus) and all open/planned/stub/deferred items are untouched.

🤖 Generated with Claude Code

…n sweep

- Drop both "Recently Completed" sections and every Done/shipped row from the
  Active tables (the file now tracks only pending work; provenance lives in
  git history + SESSION_LOG).
- Fix the stale tree header: active tree is the repo root (app/ promoted
  2026-06-05), and the Python backend was archived OUT of the repo, not just
  frozen.
- Add P3 "Retention sweep for soft-deleted hosts": today hosts.deleted_at is
  retained indefinitely (no purge job; a soft-deleted row from 2026-05-25 is
  still present). Proposes an optional, operator-configurable retention sweep
  (default disabled).
- "Email alert notifications" downgraded Planned -> Partial (channel layer
  shipped; alert-dispatch + per-user prefs remain).
Records the work to lift the specter coverage gate from tier1:100 /
tier2:80 / tier3:50 to 100% across all tiers. Gated on backfilling real
AC tests for currently-sub-100% specs first; flipping the threshold alone
would red-wall every PR.
@remyluslosius

Copy link
Copy Markdown
Contributor Author

Added two commits beyond the original backlog cleanup:

  • docs(backlog): new CI/Quality item — raise specter gate to 100% (all tiers), gated on backfilling AC tests first.
  • chore(specter): untrack the stale root .specter-results.json and gitignore it. CI regenerates the results from a real go test -json + vitest JUnit ingest, so the committed copy is never consumed by the gate — it only drifts and produces misleading local specter coverage reports (it's what showed a bogus 60%/NONE picture). scripts/check-go-spec-coverage.sh already runs without it.

@github-actions github-actions Bot added size/XL and removed size/M labels Jun 16, 2026
Tracks the two larger CI perf wins beyond PR #567's single-pass +
golangci cache: per-package DB isolation to drop `-p 1` (P2), and
splitting the monolithic gate into parallel jobs (P3, needs a
branch-protection required-checks change).
Records the test blind spots surfaced reviewing this session's work:
live-host SSH/sudo integration (CI never dials a real box), frontend
E2E (zero Playwright today), and negative-path ACs for security gates
(the scan kill-switch bug passed all tests because no AC required the
disallowed path — the same class AC-07 now guards for the scan).
@remyluslosius remyluslosius force-pushed the docs/backlog-cleanup branch from 01c7568 to 5c7d6e6 Compare June 16, 2026 02:21
@github-actions github-actions Bot added size/L and removed size/XL labels Jun 16, 2026
@remyluslosius remyluslosius changed the title docs(backlog): remove completed tasks; add soft-deleted-host retention sweep docs(backlog): cleanup + CI/quality + regression-coverage follow-ups Jun 16, 2026
@remyluslosius

Copy link
Copy Markdown
Contributor Author

Split per request: this PR is now backlog docs only (4 commits, all BACKLOG.md — cleanup + retention-sweep, specter-gate-to-100%, CI gate-speed follow-ups, and the three regression-coverage gaps). The chore(specter): untrack stale .specter-results.json commit moved to its own PR #568.

@remyluslosius remyluslosius merged commit f539f0c into main Jun 16, 2026
13 checks passed
@remyluslosius remyluslosius deleted the docs/backlog-cleanup branch June 16, 2026 11:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant