exocomp docs

Tag

#decision

22 pages tagged #decision.

Often with #security 4 #checks 3 #offline 3 #api 2 #auth 2 All tags →

1 deprecated hidden

Decisions decisions/ 22 pages

Decision 0001 — Thin-core architectureDecision

Thin-core architecture: one Go binary owning state, sequencing, keys and recovery, with every other tool kept as a pinned subprocess.

decisions/0001-thin-core-architecture #architecture

Decision 0002 — Project name: exocompDecision

Project name exocomp, after the Control D collision ruled out the working name.

decisions/0002-project-name-exocomp #naming

Decision 0003 — Secrets envelope: age recipients → DEK → HKDF subkeysDecision

Secrets envelope of age recipients, a DEK and HKDF subkeys, with a recovery kit that closes the credential loop.

decisions/0003-secrets-envelope #secrets #security

Decision 0004 — OpenTofu state: HTTP backend implemented in SQLiteDecision

OpenTofu HTTP state backend implemented in SQLite, sidestepping the S3 conditional-write gap.

decisions/0004-opentofu-http-state-backend #state #terraform

Decision 0005 — Job sandboxing: the `enforcing` tier via nonoDecision

Job sandboxing via nono's enforcing tier, so a job is denied every powerful local socket.

decisions/0005-job-sandboxing-nono #security #sandbox

Decision 0006 — uv build-time toolchain with an operator escape hatchDecision

A uv build-time Python toolchain plus a doctor-gated operator escape hatch in the data volume.

decisions/0006-uv-toolchain-escape-hatch #toolchain #offline

Decision 0007 — Audit hash chain: deferred, with a revival conditionDecision

The audit hash chain is deferred, and reviving it requires an off-host-anchored head.

decisions/0007-audit-chain-deferral #security #deferred

Decision 0008 — Durable multi-step execution: step ledger, DBOS deferredDecision

Multi-step choreography runs on a step ledger over the job store, with DBOS deferred.

decisions/0008-step-ledger-over-dbos #queue #execution

Decision 0009 — LAN access: bearer tokens minted by local authDecision

LAN listeners require locally-minted bearer tokens, with TLS on by default.

decisions/0009-lan-access-tokens #security #auth

Decision 0010 — Source and credential model (git-centric, real usage)Decision

A git-centric source model with deploy and fleet keys, and state-only versus run-in-server workspaces.

decisions/0010-source-and-credential-model #sources #credentials

Decision 0011 — Project dependency resolution: uv at runtime for declared manifestsDecision

Project dependencies resolve from root requirements.txt or pyproject.toml into hash-gated caches, with uv shipped at runtime.

decisions/0011-project-dependency-resolution #dependencies #offline

Decision 0012 — Litestream as an optional fast-RPO sidecarDecision

Litestream as an optional fast-RPO sidecar replicating the database WAL, with restic staying authoritative and an unencrypted remote refused without an acknowledgement.

decisions/0012-litestream #backup #replication

Decision 0013 — OpenBao Transit as an optional external seal for the DEKDecision

OpenBao Transit as an optional additive seal for the DEK, keeping the age keyring recovery path and treating unreachable as an explicit error.

decisions/0013-openbao-transit-seal #secrets #backup

Decision 0014 — Agent-facing surface: one core, three thin programmatic facesDecision

One core with three thin programmatic faces, the machine CLI, the HTTP API and MCP, sharing the one auth model, the one queue and the wire envelope.

decisions/0014-agent-facing-surface #api #mcp #cli

Decision 0015 — Per-source ansible collection isolationDecision

Ansible collections go per-source in a content-hash-keyed cache resolved at claim time and garbage-collected with the source lifecycle.

decisions/0015-per-source-collections #ansible #offline

Decision 0016 — exocomp ships as an artifact-carrier imageDecision

exocomp ships as a self-contained base image that is also an artifact carrier, bootstrapping uv when absent and delegating ansible on PATH.

decisions/0016-artifact-carrier-image #packaging #containers

Decision 0017 — One probe vocabulary for checks and gatesDecision

One shared probe vocabulary for checks and gates, with the SSRF guard applied per face and Location opt-in per kind.

decisions/0017-shared-probe-vocabulary #checks #probes

Decision 0019 — Aggregate check events removedDecision

Aggregate check events, the event host set and the limit-hosts flag are removed, leaving migration 0041 as inert schema.

decisions/0019-aggregate-check-events-removed #checks

Decision 0020 — Reload first, restart after drain, recover interrupted jobsDecision

Reload first, restart after drain, and recover interrupted jobs, with schedules reloading without a restart.

decisions/0020-reload-restart-and-recovery #serve #recovery

Decision 0021 — Keep the host scope write-only; the request response is the polling surfaceDecision

The host scope stays write-only: the request response returns terminal state, and a same-key retry polls the original job without enumeration.

decisions/0021-host-request-polling #api #auth

Decision 0022 — The release line is pre-1.0, managed by release-pleaseDecision

Withdraw the v1.0 label: the acceptance bar stays met and gate-tested, but the release line begins at v0.1.0 and release-please owns later versions.

decisions/0022-pre-1.0-release-line #release #versioning

All tags

#adhoc 1 #age 1 #agents 1 #alerts 1 #ansible 9 #api 4 #approvals 2 #architecture 6 #assessment 1 #auth 3 #automation 2 #backup 3 #bootstrap 2 #branches 1 #bubbletea 1 #cel 1 #changelog 1 #checks 5 #cli 5 #commands 1 #configuration 1 #containers 5 #contributing 6 #convergence 1 #credentials 2 #css 1 #debugging 1 #decision 22 #deferred 3 #dependencies 2 #deployment 1 #design 8 #dev 2 #drift 2 #encryption 1 #errors 1 #execution 2 #exitcodes 1 #failures 1 #flags 1 #gallery 1 #gates 1 #git 2 #governance 1 #guide 10 #handoff 2 #handoffs 1 #hooks 3 #internals 1 #invariants 1 #inventory 1 #json 1 #lanes 1 #lima 1 #lipgloss 1 #llm 1 #mcp 4 #metrics 1 #migrations 1 #mobile 3 #monitoring 1 #naming 1 #netgroups 1 #notifications 1 #ntfy 1 #offline 4 #opentofu 1 #operations 29 #packages 1 #packaging 3 #pairing 2 #platform 1 #playbook 1 #playbooks 1 #policy 1 #probes 2 #provisioning 1 #qr 1 #quadlet 1 #queue 1 #quickstart 1 #reactive 4 #reboot 1 #recovery 3 #reference 3 #release 1 #remote 1 #replication 2 #rollback 1 #sandbox 2 #sbom 2 #schema 1 #screenshots 1 #secrets 4 #security 7 #serve 4 #setup 2 #site 1 #sops 1 #sources 3 #sqlite 1 #ssh 1 #state 3 #store 1 #superseded 1 #templ 1 #terminal 1 #terraform 8 #testing 1 #threat-model 1 #tokens 2 #toolchain 2 #tui 2 #ui 1 #upcoming 1 #verification 1 #versioning 1 #web 3 #webhooks 3 #workflow 1 #worktrees 1 #yaml 1