Docs · Hangar
Decisions log
Answers to the open decisions in roadmap.md, recorded 2026-09-26.
| Id | Decision | Status |
|---|---|---|
| D1 | Sign agent commits with a self-hosted Fulcio. A self-signed root CA for it is acceptable and to be evaluated. | Decided |
| D2 | AgentRun is a Crossplane XR (namespaced claim, composed by function-agentrun). |
Decided |
| D3 | Clearance is a standalone component (its own deployment, one Kubernetes permission). | Decided |
| D4 | Agents get their own GitHub App, separate from the platform’s. | Decided |
| D5 | Audit object lock: take the recommendation in roadmap.md. | Decided |
| D6 | Model-hub isolation: needs more context. | Decided 2026-09-26: hosted providers only for now (option 1); one hub per environment with dedicated accounts (option 2) is the M5 default |
| D7 | Name for the evaluation harness. | Decided 2026-09-26: Preflight (replaces the working name Checkride) |
| D8 | A new autopilot repo, with Clearance as a package inside it. |
Decided |
| D9 | Release-file split: yes; design it fully and prove it out. | Decided; designed and proven live on the dev cluster (release-file-split.md); Glidepath’s writer change still to build |
| D10 | Strictness rollout timing. | Decided 2026-09-26: option A, enforce now. Gate built (validator image, values-check); becomes required once every gitops repo has the check file. See briefings-d6-d10.md |
| D11 | Take the recommendation in roadmap.md. | Decided |
| D12 | Take the recommendation in roadmap.md. | Decided |
All experiments (U1–U12) in the roadmap run on the dev cluster.
2026-09-26, substrate review
Accepted: stable agent identity (AP-A4), model version in the record (AP-C1), cost accounting (AP-C2), upstream Agent Sandbox evaluation (U11), resumable state (AP-D1, U12), fixed T0 read set (AF-2b), rejection of a monolithic AgentWorkspace. See industry-context.md.