From 6980d9242fe407bb4077b7eb6e106c34c7327bc5 Mon Sep 17 00:00:00 2001 From: yhryzy Date: Tue, 16 Jun 2026 11:00:02 +0100 Subject: [PATCH] docs: record shared workspace review-state merge --- .../14-release-readiness-evidence-gate.md | 20 ++++++++++++++++--- docs/review-context/CHANGELOG.md | 18 +++++++++++++++++ docs/review-context/MANIFEST.json | 3 ++- .../release-readiness/M5-CLOSEOUT.md | 14 +++++++++++-- .../m5-closeout-summary.json | 10 ++++++++-- docs/review-context/source-index.md | 14 +++++++++++-- .../workspace-durable/README.md | 17 ++++++++++++---- 7 files changed, 82 insertions(+), 14 deletions(-) diff --git a/docs/review-context/14-release-readiness-evidence-gate.md b/docs/review-context/14-release-readiness-evidence-gate.md index 3da87395..76799ea1 100644 --- a/docs/review-context/14-release-readiness-evidence-gate.md +++ b/docs/review-context/14-release-readiness-evidence-gate.md @@ -99,10 +99,23 @@ Minimum verification: - migration or seed-data story for demo objects; - failure behavior when persistence fails. +Current evidence: + +- Platform PR #32 adds local durable review state and release-owner audit trail + persistence for the Workspace preview. +- Platform PR #34 adds a shared in-process backend review-state API and + frontend Workspace load/save mirroring, with backend-side + `public_ready=false` locking. + +Remaining boundary: + +- PR #34 does not prove production database-backed durability, authorization, + conflict handling, or multi-instance behavior. + Blocked until: -- the observed frontend/session-local preview is replaced or supplemented by - durable storage for the demo path. +- the local/in-process slices are replaced or supplemented by production-grade + durable storage and access boundaries for the demo path. ### Gate 2: Artifact Ingestion @@ -334,5 +347,6 @@ Acceptance: - `origin/master:docs/product/workspace-current-state-audit.md` - `docs/platform/release-readiness-status.md` - Platform Workspace baseline `6efef07 fix: align workspace context review controls` -- Latest observed local Workspace preview `5f4a666 feat: add manual upload intake workflow` +- Latest merged Workspace platform state + `d06a713bf490ad870fe9273f933c310e2955b4e9` - PPT proof lab source index entry and Run 2.93 public-blocked gate diff --git a/docs/review-context/CHANGELOG.md b/docs/review-context/CHANGELOG.md index be0258de..ebe654b9 100644 --- a/docs/review-context/CHANGELOG.md +++ b/docs/review-context/CHANGELOG.md @@ -2,6 +2,24 @@ Vault status: append-only change log. +## 2026-06-16 + +### Recorded Platform Shared Workspace Review-State Merge + +- Recorded platform PR #34 as merged to `master` with shared backend + review-state API evidence for the Workspace page. +- Clarified that #34 is an in-process shared persistence slice, not + production-grade database-backed, authorized, conflict-safe, or + multi-instance Workspace persistence. +- Updated the M5 closeout, source index, manifest, and release-readiness gate + so future sessions inherit the same status boundary. + +Source basis: + +- `yha9806/vulca-platform` PR #34. +- Merge commit `d06a713bf490ad870fe9273f933c310e2955b4e9`. +- Remote checks: `Run Tests` and `security` passed on PR #34. + ## 2026-06-15 ### Recorded Platform CI Hygiene Merge diff --git a/docs/review-context/MANIFEST.json b/docs/review-context/MANIFEST.json index 9a696915..efce0e15 100644 --- a/docs/review-context/MANIFEST.json +++ b/docs/review-context/MANIFEST.json @@ -54,7 +54,8 @@ "core_sources": { "sdk_mainline": "cb6d52fe", "workspace_context_baseline": "6efef07", - "workspace_latest_observed": "5f4a666", + "workspace_latest_observed": "d06a713b", + "workspace_shared_review_state_merge": "d06a713b", "artifact_bridge_spec": "11-artifact-bridge-spec.md", "m3_bridge_fixture": "artifact-bridge/m3-demo-bridge-fixture.json", "m3_durable_review_fixture": "workspace-durable/m3-durable-review-fixture.json", diff --git a/docs/review-context/release-readiness/M5-CLOSEOUT.md b/docs/review-context/release-readiness/M5-CLOSEOUT.md index 5447a773..d89949d2 100644 --- a/docs/review-context/release-readiness/M5-CLOSEOUT.md +++ b/docs/review-context/release-readiness/M5-CLOSEOUT.md @@ -20,7 +20,7 @@ and a human release owner decision exist. ## Current Platform Merge State -As of 2026-06-15: +As of 2026-06-16: - Platform PR #31, `[codex] Workspace review product shell`, merged to `master` at `6810e67ca967a47782b5d9f83d751148d1eb6d26`. Its PR gate @@ -31,6 +31,13 @@ As of 2026-06-15: `master` at `61da8e9f296b7c1e66f61720e487e8e42d4eb6ce`. It implements local durable review state and the release-owner audit trail, with local verification plus remote `Run Tests` and `security` gates. +- Platform PR #34, `[codex] Shared Workspace review persistence`, merged to + `master` at `d06a713bf490ad870fe9273f933c310e2955b4e9` from head + `c6604cc3d59fb93f10c3267dc4ee4816bc63fc9e`. It implements a shared + `/api/v1/workspace/review-state/{repo_id}` API, frontend Workspace load/save + mirroring, backend-side `public_ready=false` locking, OpenAPI/module-boundary + updates, and E2E isolation for shared review state. Its PR gate passed + remote `Run Tests` and `security`. These PRs improve R5 evidence, but they do not change the product-level decision above. @@ -52,7 +59,9 @@ decision above. ## Remaining R5 Blockers -- production/shared Workspace persistence evidence beyond the local durable PR; +- production-grade Workspace persistence beyond the local durable PR and + in-process shared backend slice, including durable storage, + authorization, conflict handling, and multi-instance behavior; - repeated bridge ingestion across more than one workflow; - production EvidencePack rendering evidence; - human-owned release workflow implementation evidence; @@ -68,3 +77,4 @@ decision above. - `docs/review-context/copy-gates/website-ppt-copy-gate.json` - `yha9806/vulca-platform` PR #31. - `yha9806/vulca-platform` PR #32. +- `yha9806/vulca-platform` PR #34. diff --git a/docs/review-context/release-readiness/m5-closeout-summary.json b/docs/review-context/release-readiness/m5-closeout-summary.json index 62a0b47a..c23d2348 100644 --- a/docs/review-context/release-readiness/m5-closeout-summary.json +++ b/docs/review-context/release-readiness/m5-closeout-summary.json @@ -22,6 +22,11 @@ "status": "indexed", "source": "docs/review-context/workspace-durable/m3-durable-review-fixture.json" }, + { + "name": "shared Workspace review-state API evidence", + "status": "indexed", + "source": "docs/review-context/workspace-durable/README.md" + }, { "name": "EvidencePack rendering test report", "status": "indexed", @@ -53,10 +58,11 @@ "max_allowed_level": "R4", "example_scope": "public-example-key-visual-v1", "human_owner": null, - "boundary_notes": "R4 example-specific public copy is allowed only within RR4/RR5 scope. Product-level R5 remains blocked." + "boundary_notes": "R4 example-specific public copy is allowed only within RR4/RR5 scope. Product-level R5 remains blocked. Platform PR #34 adds shared in-process review-state evidence, not production-grade release readiness." }, "remaining_blockers": [ - "production Workspace persistence evidence", + "production database-backed/multi-instance Workspace persistence evidence", + "Workspace authorization and conflict handling evidence", "repeated bridge ingestion evidence", "production EvidencePack rendering evidence", "human-owned release workflow implementation evidence", diff --git a/docs/review-context/source-index.md b/docs/review-context/source-index.md index 8060bc28..d3fa75a8 100644 --- a/docs/review-context/source-index.md +++ b/docs/review-context/source-index.md @@ -136,6 +136,8 @@ check before changing high-level VULCA claims. - `docs/review-context/workspace-durable/m3-durable-review-fixture.json` - Protected RR3 reference for reload-preserved review item, EvidencePack, release blockers, decision state, and human decision history. + - Platform PR #34 adds shared in-process backend review-state API evidence + for the Workspace page, while production persistence remains gated. - Public example gate: - `docs/review-context/public-examples/m3-public-example-gate.json` - Protected RR4 reference for one example-specific public artifact and copy @@ -155,13 +157,16 @@ Workspace product code lives in the separate `vulca-platform` repository. - Branch: `master` in `/Users/yhryzy/.config/superpowers/worktrees/vulca-platform/workspace-interactive-demo` - Context baseline: `6efef07 fix: align workspace context review controls` -- Latest observed local preview: - `5f4a666 feat: add manual upload intake workflow` +- Latest merged platform master: + `d06a713bf490ad870fe9273f933c310e2955b4e9` from PR #34, + `[codex] Shared Workspace review persistence`. - Important files: - `wenxin-moyun/src/content/workspaceDemo.ts` - `wenxin-moyun/src/components/workspace/` - `wenxin-moyun/src/pages/WorkspacePage.tsx` - `wenxin-moyun/src/pages/WorkspaceManualPage.tsx` + - `wenxin-backend/app/api/v1/workspace_review_state.py` + - `wenxin-moyun/src/services/workspaceDurableReviewStore.ts` - `docs/superpowers/specs/2026-06-14-vulca-three-layer-review-workspace-design.md` - `docs/superpowers/specs/2026-06-15-vulca-creative-pr-typed-review-modes-design.md` - Verified in prior session: @@ -172,6 +177,11 @@ Workspace product code lives in the separate `vulca-platform` repository. - Mainline audit: - `origin/master:docs/product/workspace-current-state-audit.md` - Merge commit: `cb6d52fe docs: surface VULCA Workspace product direction` +- Shared review-state merge: + - `yha9806/vulca-platform` PR #34. + - Merge commit: `d06a713bf490ad870fe9273f933c310e2955b4e9`. + - Boundary: in-process shared backend state only; not production + database-backed, authorized, conflict-safe, or multi-instance persistence. ## Website diff --git a/docs/review-context/workspace-durable/README.md b/docs/review-context/workspace-durable/README.md index 185c0b43..0215bdf4 100644 --- a/docs/review-context/workspace-durable/README.md +++ b/docs/review-context/workspace-durable/README.md @@ -12,7 +12,7 @@ blocker, decision-state, and human-audit boundaries. ## Product Implementation Status -As of 2026-06-15, the platform implementation has two merged PRs on +As of 2026-06-16, the platform implementation has three merged PRs on `yha9806/vulca-platform` `master`: - PR #31, `[codex] Workspace review product shell`, merged at @@ -23,9 +23,17 @@ As of 2026-06-15, the platform implementation has two merged PRs on `61da8e9f296b7c1e66f61720e487e8e42d4eb6ce`. It adds local durable review state, staged decision persistence, advisory-agent completion persistence, and the release-owner audit trail. - -PR #32 is intentionally a local durability slice. It does not certify shared -production persistence or product-level release readiness. +- PR #34, `[codex] Shared Workspace review persistence`, merged at + `d06a713bf490ad870fe9273f933c310e2955b4e9`. It adds + `/api/v1/workspace/review-state/{repo_id}`, frontend load/save mirroring for + the Workspace page, backend-side `public_ready=false` normalization, and + E2E isolation for the shared review-state API. + +PR #32 is intentionally a local durability slice. PR #34 is intentionally a +shared in-process backend slice. Together they improve Workspace persistence +evidence, but they do not certify production persistence, authorization, +conflict handling, multi-instance durability, or product-level release +readiness. ## Current Fixtures @@ -50,3 +58,4 @@ production persistence or product-level release readiness. - `docs/review-context/artifact-bridge/m3-demo-bridge-fixture.json` - `yha9806/vulca-platform` PR #31. - `yha9806/vulca-platform` PR #32. +- `yha9806/vulca-platform` PR #34.