66 lines
2.2 KiB
JSON
66 lines
2.2 KiB
JSON
{
|
|
"task_id": "DEV-000034",
|
|
"task_revision": 1,
|
|
"architecture_revision": "ADR-0004",
|
|
"base_repo_revision": "5fca81531a9d1ee26050a5d48e2d5b199135aa4e",
|
|
"risk_tier": "E",
|
|
"intent": "Make the existing project-specific production-host-only rule explicit and fail closed against accidental use of the shared docker-test host.",
|
|
"requirement_ids": ["USER-DOCKER-PROD-ONLY", "CONSTITUTION-1.3.36"],
|
|
"allowed_change_scope": {
|
|
"modules": [],
|
|
"paths": [
|
|
"AGENTS.md",
|
|
"dev/ACTIVE_TASK.json",
|
|
"dev/tasks/DEV-000034-production-host-only-policy.json"
|
|
]
|
|
},
|
|
"forbidden_change_scope": {
|
|
"paths": [
|
|
"architecture/**",
|
|
"ci/**",
|
|
".gitea/**",
|
|
"cmd/**",
|
|
"contracts/**",
|
|
"modules/**",
|
|
"database/**",
|
|
"deploy/**",
|
|
"security/**"
|
|
]
|
|
},
|
|
"allowed_architecture_delta": {
|
|
"new_cross_module_dependencies": 0,
|
|
"new_canonical_owners": 0,
|
|
"new_privileges": 0
|
|
},
|
|
"contracts": {
|
|
"consume": [],
|
|
"may_change": []
|
|
},
|
|
"semantic_owner": "none; repository operations policy only",
|
|
"canonical_state": ["none"],
|
|
"state_transitions": ["none"],
|
|
"side_effects_and_privileges": ["future project operations are limited to docker.cin.su unless the user explicitly re-authorizes another host"],
|
|
"persistence_and_migrations": ["none"],
|
|
"failure_retry_restart": ["operations targeting docker-test must stop before mutation and report the policy conflict"],
|
|
"assumptions": [
|
|
"The user explicitly reconfirmed that this project has a hard rule prohibiting docker-test",
|
|
"The production Docker host remains docker.cin.su"
|
|
],
|
|
"acceptance_scenarios": [
|
|
"AGENTS.md explicitly prohibits docker-test aliases and hostname for all project operations",
|
|
"the rule allows an exception only after new explicit project-specific user authorization",
|
|
"no runtime, contract, schema, dependency, privilege or deployment configuration changes",
|
|
"exact diff validation observes only this policy task's three declared paths"
|
|
],
|
|
"required_tests": [
|
|
"architecture preflight",
|
|
"exact diff scope",
|
|
"repository status",
|
|
"production runner and application health"
|
|
],
|
|
"terminal_gap_states": [
|
|
"BLOCKED_BY_ARCHITECTURE_GAP",
|
|
"BLOCKED_BY_CONFLICT"
|
|
]
|
|
}
|