Hangar

Library · Paperwork · 30 papers

Every review, report, spec and map

The paperwork half of the flight bag. Each paper carries its status: what happened to a review's findings, what a report showed, or where a spec stands today. The illustrated ones open here; the rest link to where they already live on the site.

Reviews

Someone, or something, looked hard at the work and said what they thought. Each one says what I did about it.

  1. Oct 17, 2026 · Glidepath · Illustrated Kaniko to BuildKit An archived builder, every cross-architecture build emulated in full, and a privilege model that didn't hold on the live cluster. The case for rootless BuildKit, and a five-phase plan that finished in a day. Done · ADR-0026, kaniko removed
  2. Oct 16, 2026 · Apron · Illustrated Apron's next shape: self-contained, built on kubara Apron and kubara solve the same problem. Adopt kubara as the only renderer, keep Apron as one catalog plus the rules kubara can't express, and keep it installable on its own, under a cluster name you choose. Decided · CLI built, kubara port next
  3. Oct 12, 2026 · Glidepath · Illustrated Glidepath against the everyday software lifecycle A CI/CD review read from the code: strong from merge to production, thin on the inner loop, and most of its governance advises rather than enforces. Open · roadmap written
  4. Oct 8, 2026 · Airframe · Illustrated How well does Airframe use Crossplane, and can an agent drive it? Twenty findings on the Crossplane layer and the agent-facing API, ranked, and what happened to each one in the two days after. 15 of 20 fixed
  5. Oct 5, 2026 · Hangar · Illustrated Is "claim" the right word in a Crossplane v2 world? ChatGPT's analysis of one word across the site and docs, checked against the v2 docs and every repo: what held up, what didn't, and what changed. Done · 4 PRs merged
  6. Sep 27, 2026 · Hangar · Illustrated Would a staff architect approve Hangar? A platform-approval review of the whole of Hangar: a conditional yes, ten findings with evidence, and five gates before production. Open · production gates
  7. Sep 27, 2026 · This site · Illustrated What two reviews said about this site, and what I did about it Grok and ChatGPT on hangarplatform.dev a day after launch: eleven suggestions, eight shipped, two declined, and why. Done · 8 changes live

Reports

Measurements and findings: what a run, a test or an investigation actually showed.

  1. Oct 11, 2026 · Tower · Illustrated Tower, judged again as my only console Four weeks on: yes for looking, now yes for acting. What still sends me elsewhere is the platform under the console, not a missing button. Open · 5 of 16 done
  2. Oct 9, 2026 · Airframe The Airframe A+ scorecard How ready Airframe is for agents to operate, scored by a tool against fourteen checks. Every committed run on one chart. 89.5 · past the M3 target score
  3. Oct 8, 2026 · Glidepath · Illustrated Where does a Glidepath pipeline spend its time? Three weeks of Tekton history, measured: most of the wall-clock was pods starting up to do almost nothing. Nine fixes, eight shipped. 8 of 9 done
  4. Oct 6, 2026 · Glidepath Release facts from the Rollout: phase 1 results One real gate-api release reported down both paths at once, the old hook Jobs and the new Rollout facts. The events matched. Exit criterion met
  5. Oct 5, 2026 · Glidepath Release facts from the Rollout: phase 0 findings Five spikes before building: does the Rollouts notifications engine deliver the facts a release needs? Yes, with three design rules. All spikes resolved
  6. Sep 14, 2026 · Tower · Illustrated Tower, judged as my only console Would I give up kubectl, Argo CD and the Tekton dashboard for Tower? Mostly for looking, not yet for acting, and a backlog to close the gap. 10 of 11 done

Specs and plans

Designs, requirements and plans, written before the work and kept honest after it.

  1. Oct 25, 2026 · Glidepath · Illustrated A Glidepath API for people, Tower and agents Give Glidepath the front end Airframe already has: a generated contract, a validator, a small API for runs and releases, and four tiers of action. Agents edit cicd.yaml through pull requests, limited by field, and Tower moves onto the API side by side, one group of routes at a time. Done · P6 live Oct 30
  2. Oct 24, 2026 · Airframe · Illustrated Managed cloud services an app can depend on Three new Airframe kinds give an app a queue, object storage or a PostgreSQL database run by AWS or Azure: what each creates on both clouds, the guardrails with no field to turn them off, how a Lambda function gets access without a key, and what the live run showed. AWS live · Azure not run
  3. Oct 24, 2026 · Tower · Illustrated Airspace: who a change will reach, before it ships Every service's real connections from OpenTelemetry traces with no code changes, checked against what each environment declares, and the API spec signed onto each image, so the api-compat release check can say who a breaking change would reach. Built · Tower v0.99 to v0.102
  4. Oct 17, 2026 · Glidepath · Illustrated A test contract for Glidepath, and a QA gate that reads it Keep Glidepath a thin wrapper around Testkube, and own three things: the contract a test step passes in and records out, the evidence signed onto the image, and the fence around the check ride a release depends on. Built · phases 0 to 4 live
  5. Oct 16, 2026 · Glidepath · Illustrated No stored AWS key for cloud deploys Two never-expiring AWS keys replaced by one-hour roles a pod earns by proving who it is, one per Lambda function, with a hole in Crossplane's permissions closed on the way and the incident the switch caused. Lambda and ECS keyless
  6. Oct 15, 2026 · Hangar · Illustrated Any forge, any registry A plan to run Hangar on GitLab and Bitbucket as well as GitHub, and on any OCI registry as well as GHCR: where GitHub is load-bearing today, two Hangar contracts with a driver per vendor, and six phases over about 24 weeks. Proposed · 7 decisions open
  7. Oct 13, 2026 · Tower · Illustrated Start the next release record when the last one ships A proposal to open Tower's Release Record as a live draft the moment the previous release ships, with sign-off before the Flight merge and an outcome after the bake. Built · R1 to R4 shipped
  8. Oct 12, 2026 · Glidepath · Illustrated Glidepath, from the lab to production The companion to the SDLC review: every weakness sorted by cause, and nine items in three lanes so a production install never waits on a feature it doesn't need. Under way · T2 and P3 started
  9. Oct 10, 2026 · Tower · Illustrated Looking inside a production pod, without ever handing out exec Break-glass in Tower: a debug container instead of exec, a second person, a recording of every byte, and guardrails the cluster enforces. With its two-person test plan. Built · live
  10. Oct 10, 2026 · Tower · Illustrated No long-lived Kubernetes credential for Tower, anywhere A never-expiring token replaced by federated ten-minute tokens, reads split from writes, and a bigger hole closed on the way. Phases 0 to 4 live
  11. Oct 4, 2026 · Glidepath Environments overhaul: requirements and plan Environments as one config model, defined once in cicd.yaml, with Glidepath owning the folder and the chart contract. Approved · migration done
  12. Sep 26, 2026 · Autopilot Autopilot design How Hangar runs any AI agent workload, bounded and audited: the planes, the Clearance gateway and the AgentRun XR. Core built · runtime proposed
  13. Sep 26, 2026 · Airframe The Airframe A+ program What it would take for agents to operate Airframe safely, as milestones the scorecard measures. M2 closed · 89.5 of 100
  14. Aug 12, 2026 · Hangar Service catalog design The running design log behind Airframe: every round of the catalog, from the first XRD to secret stores. Living document
  15. Aug 12, 2026 · Hangar GitOps strategy Two clusters, one source of truth: how repos, AppProjects and promotion fit together, and why upper and lower are a real boundary. Built

Architecture

How a product was actually wired on a given day, drawn from the code. Snapshots, so each one links to the living doc.

  1. Oct 7, 2026 · Autopilot · Illustrated Autopilot, drawn as Kubernetes resources One request through every resource it touches, the five documents that make up an agent's contract, and six things the code said that the docs didn't. Snapshot · Oct 7, 2026
  2. Sep 20, 2026 · Airframe · Illustrated Airframe, the service catalog underneath Eleven XRDs that turn a git commit into a running service, without any cluster ever holding credentials for another cluster's API. Snapshot · Sep 20, 2026