rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
2026-09-09 14:14:18 +02:00
parent a31751af1d
commit 30f3e9a4c6
96 changed files with 3602 additions and 138 deletions
@@ -0,0 +1,34 @@
+---
+id: ADR-0001
+type: decision
+status: active
+title: Short decision title
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: []
+related: []
+source_paths: []
+confidence: confirmed
+---
+
+# ADR-0001 - Short Decision Title
+
+## Context
+
+TBD
+
+## Decision
+
+TBD
+
+## Alternatives Considered
+
+- TBD
+
+## Consequences
+
+- TBD
+
+## Related
+
+- TBD
@@ -0,0 +1,40 @@
+---
+id: ALERT-YYYYMMDD-001
+type: alert
+status: open
+severity: medium
+title: Short Alert Title
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+resolved: null
+tags: [alert]
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# ALERT-YYYYMMDD-001 - Short Alert Title
+
+## Summary
+
+TBD
+
+## Why It Matters
+
+TBD
+
+## Evidence
+
+- TBD
+
+## Suggested Resolution
+
+TBD
+
+## Resolution
+
+Pending.
+
+## Resolution Evidence
+
+- TBD
@@ -0,0 +1,34 @@
+---
+id: AN-YYYYMMDD-001
+type: analysis
+status: active
+title: Short Analysis Title
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [analysis]
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# Short Analysis Title
+
+## Why This Was Filed
+
+TBD
+
+## Summary
+
+TBD
+
+## Related Evidence
+
+- TBD
+
+## Implications
+
+TBD
+
+## Follow-Up
+
+- TBD
@@ -0,0 +1,38 @@
+---
+id: API-001
+type: api
+status: active
+title: API Name
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: []
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# API Name
+
+## Purpose
+
+TBD
+
+## Endpoints Or Operations
+
+TBD
+
+## Contracts
+
+TBD
+
+## Authentication And Authorization
+
+TBD
+
+## Error Handling
+
+TBD
+
+## Related Code
+
+TBD
@@ -0,0 +1,41 @@
+---
+id: CR-YYYYMMDD-001
+type: change-request
+status: active
+title: Short change title
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: []
+related: []
+source_paths: []
+confidence: confirmed
+---
+
+# CR-YYYYMMDD-001 - Short Change Title
+
+## Summary
+
+TBD
+
+## Source
+
+- Meeting, document, chat note, or user request: TBD
+
+## What Changed
+
+TBD
+
+## Reason
+
+TBD
+
+## Impact
+
+- Requirements: TBD
+- Technical docs: TBD
+- Implementation: TBD
+- Tests: TBD
+
+## Follow-Up
+
+- TBD
@@ -0,0 +1,28 @@
+# Document Intake
+
+This section stores external source documents imported for project-wiki update workflows. Intake documents are provenance, not canonical project knowledge until accepted information is integrated into requirements, changes, technical docs, implementation docs, or traceability maps.
+
+## When To Read
+
+- Process a new PDF, DOCX, text, or Markdown requirements document.
+- Review the source provenance behind a requirement, CR, ADR, or open question.
+- Investigate conflicts between an imported document and the current KB or as-is technical state.
+
+## Routing Rules
+
+- Read active and reviewed intake documents only when working on document-based updates, provenance, audits, or conflict investigation.
+- Read the compact `intake-report.md`, then use `review_progress.py inspect` for structure and coverage. Do not load `chunks.json`, `review-progress.yml`, or generated chunk wrappers directly unless troubleshooting.
+- Use `view --section SEC-NNN` only for reliable source-defined sections reported by `inspect`; review every listed section and unsectioned unit. Use `view --all` whenever structure is absent, incomplete, ambiguous, or full-document context may matter.
+- After complete coverage, run `review_progress.py audit`; require `review-complete` and record its ledger summary and SHA-256. Rerun after ledger corrections.
+- Before a terminal intake status, run `audit --expect-ledger-sha256 <final-ledger-sha256>` with the digest from the reviewed audit.
+- Do not mark an intake reviewed or integrated until the ledger is complete. Every classified integrated chunk must link to its registered target IDs; every skipped chunk needs a reason.
+- Do not read integrated, archived, superseded, or rejected intake documents during normal coding tasks unless explicitly requested.
+- Use canonical KB files, not intake documents, as the source of truth after integration.
+
+## Active Intake Documents
+
+- None yet.
+
+## Reviewed, Integrated, Archived, Superseded, Or Rejected Documents
+
+- None yet.
@@ -0,0 +1,58 @@
+---
+id: DOCIN-YYYYMMDD-001-REVIEW
+type: intake-review
+status: reviewed
+title: Review - Source Document Title
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [intake, review]
+related: [DOCIN-YYYYMMDD-001]
+source_paths: []
+confidence: inferred
+---
+
+# Document Intake Review - Source Document Title
+
+## Review Coverage
+
+- Ledger: [review-progress.yml](./review-progress.yml)
+- Total chunks: TBD
+- Classified: TBD
+- Skipped with reason: TBD
+- Pending or reviewed: 0
+- Validator result: passed
+
+## Blocking Decision Needed
+
+- Exact question: TBD
+- Why conservative integration cannot proceed: TBD
+- Approval authority: TBD
+
+## Options And Consequences
+
+| Option | Canonical Effect | Risks Or Trade-Offs | Evidence |
+| --- | --- | --- | --- |
+| TBD | TBD | TBD | TBD |
+
+## Affected Canonical Scope
+
+| Candidate | Proposed Target | Action | Rationale |
+| --- | --- | --- | --- |
+| DOCIN-YYYYMMDD-001-CH-001 | requirements/functional/<project-topic>.md or requirements/non-functional/<project-topic>.md | Add requirement | TBD |
+
+## Affected Atomic Requirement Plan
+
+Include this section only when the blocking decision changes requirement topic scope, target files, or permitted ID ranges. Complete the full decomposition plan after approval and before canonical authoring.
+
+| Family | Topic | Target File | Reserved IDs | Planned Atomic Records | Evidence Chunks |
+| --- | --- | --- | --- | ---: | --- |
+| functional | Authentication | requirements/functional/authentication.md | REQ-001..REQ-005 | 5 | DOCIN-YYYYMMDD-001-CH-001, DOCIN-YYYYMMDD-001-CH-002 |
+| non-functional | Security | requirements/non-functional/security.md | NFR-001..NFR-003 | 3 | DOCIN-YYYYMMDD-001-CH-003 |
+
+## Related Durable Records
+
+- Open questions, alerts, blocked records, or alternatives that preserve non-blocking uncertainty: TBD
+
+## Approval Outcome
+
+Pending user confirmation.
@@ -0,0 +1,70 @@
+---
+id: LINT-YYYYMMDD
+type: maintenance-lint
+status: active
+title: Wiki Maintenance Lint YYYY-MM-DD
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [maintenance, lint]
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# Wiki Maintenance Lint YYYY-MM-DD
+
+## Deterministic Validation
+
+- Command: `python3 /path/to/project-wiki/scripts/validate_wiki.py --wiki-root .project-wiki --format json`
+- Result: passed | findings-remain | validator-error
+- Errors: TBD
+- Warnings: TBD
+- Unresolved finding codes: TBD
+
+## Structural Fixes Applied
+
+- TBD
+
+## Structural Issues Requiring Review
+
+- TBD
+
+## Contradictions
+
+- TBD
+
+## Stale Claims
+
+- TBD
+
+## Traceability Gaps
+
+- TBD
+
+## Orphan Pages
+
+- TBD
+
+## Suggested Follow-Up Questions
+
+| Question | Why It Matters | Related Docs | Suggested Action |
+| --- | --- | --- | --- |
+| TBD | TBD | TBD | TBD |
+
+## Missing Source Material
+
+| Gap | Impact | Related Docs | Suggested Source |
+| --- | --- | --- | --- |
+| TBD | TBD | TBD | TBD |
+
+## Risky Assumptions
+
+| Assumption | Risk | Evidence | Proposed Action |
+| --- | --- | --- | --- |
+| TBD | TBD | TBD | TBD |
+
+## Alert Candidates
+
+| Candidate Alert | Severity | Why It Matters | Related Evidence |
+| --- | --- | --- | --- |
+| TBD | medium | TBD | TBD |
@@ -0,0 +1,42 @@
+---
+id: MOD-001
+type: module
+status: active
+title: Module Name
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: []
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# Module Name
+
+## Responsibility
+
+TBD
+
+## Source Paths
+
+- TBD
+
+## Public Interfaces
+
+TBD
+
+## Important Flows
+
+TBD
+
+## Dependencies
+
+TBD
+
+## Tests
+
+TBD
+
+## Notes For Agents
+
+TBD
@@ -0,0 +1,20 @@
+<a id="req-001"></a>
+
+## REQ-001 - Requirement Title
+
+Status: active
+Tags: []
+Related: []
+Confidence: confirmed
+
+### Statement
+
+TBD
+
+### Rationale
+
+TBD
+
+### Acceptance Notes
+
+TBD
@@ -0,0 +1,38 @@
+---
+id: SCAN-YYYYMMDD
+type: scan-report
+status: active
+title: Codebase Scan YYYY-MM-DD
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [scan]
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# Codebase Scan YYYY-MM-DD
+
+## Scope
+
+TBD
+
+## Confirmed Findings
+
+- TBD
+
+## Inferred Findings
+
+- TBD
+
+## Unknowns
+
+- TBD
+
+## Important Paths
+
+- TBD
+
+## Suggested Wiki Updates
+
+- TBD
@@ -0,0 +1,40 @@
+---
+id: MIGRATION-YYYYMMDD
+type: schema-migration
+status: active
+title: Schema Migration YYYY-MM-DD
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [maintenance, schema-migration]
+related: []
+source_paths: []
+confidence: confirmed
+---
+
+# Schema Migration YYYY-MM-DD
+
+## Version Check
+
+- Previous schema version: TBD
+- Target schema version: 1.5.1
+- Migration needed: yes | no
+
+## Actions Applied
+
+- TBD
+
+## Actions Requiring User Confirmation
+
+- TBD
+
+## Legacy Items Detected
+
+- TBD
+
+## Files Changed
+
+- TBD
+
+## Result
+
+TBD
@@ -0,0 +1,30 @@
+# Sources
+
+This section stores raw source documents used by document-based update workflows. Source documents are raw input, not canonical project knowledge.
+
+## How To Use
+
+- Drop new PDF, DOCX, text, or Markdown files into [inbox/](./inbox/).
+- Run `/project-wiki update`.
+- The agent runs the project-wiki deterministic inbox preflight with skip quarantine, registers only files classified `process` in [SOURCE_REGISTRY.yml](./SOURCE_REGISTRY.yml), runs document ingestion, and moves successfully processed files to `processed/YYYY-MM/` when possible.
+- Keep human instructions in this file. Do not create `README.md` or other guide files inside `inbox/`.
+
+## Routing Rules
+
+- Never read PDF/DOCX source files directly into model context.
+- Use source files only through the document ingestion script.
+- Treat the inbox preflight report as authoritative for SHA-256 hashes, validated registry and intake-history matches, retry-record selection, inbox duplicates, and quarantine destinations; use agent review only for changed content at a historical path, ambiguous registry history, or explicit reprocessing.
+- Use `intake/` artifacts for review and canonical KB integration.
+- Ignore inbox housekeeping files such as `README.md`, `.gitkeep`, `.DS_Store`, hidden files, files beginning with `_`, and temporary or partial download files.
+
+## Inbox
+
+- No pending source files registered yet.
+
+## Processed Sources
+
+- None yet.
+
+## Failed, Rejected, Ignored, Or Superseded Sources
+
+- None yet.
@@ -0,0 +1,3 @@
+version: 1
+updated: YYYY-MM-DD
+sources: []
@@ -0,0 +1,38 @@
+---
+id: SYNC-YYYYMMDD-001
+type: sync-report
+status: active
+title: Manual Code Sync YYYY-MM-DD
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [sync]
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# Manual Code Sync YYYY-MM-DD
+
+## Baseline
+
+TBD
+
+## Changed Source Paths
+
+- TBD
+
+## Confirmed Wiki Updates
+
+- TBD
+
+## Inferred Wiki Updates
+
+- TBD
+
+## Open Questions
+
+- TBD
+
+## Traceability Updates
+
+- TBD
@@ -0,0 +1,33 @@
+# Wiki Log YYYY-MM
+
+This file is an append-only monthly audit trail of meaningful `.project-wiki/` updates for YYYY-MM.
+
+## [YYYY-MM-DD] mode | WLOG-YYYYMMDD-001 | Short Summary
+
+Date: YYYY-MM-DD
+Agent: TBD
+Mode: init | scan | update | sync | maintain | auto-post-implementation
+Trigger: TBD
+
+Changed wiki documents:
+- TBD
+
+Related source paths:
+- TBD
+
+Related IDs:
+- TBD
+
+Open question reconciliation:
+- Resolved: TBD
+- Partially resolved: TBD
+- Superseded: TBD
+- Dismissed: TBD
+- Duplicated: TBD
+- Newly created: TBD
+
+Summary:
+TBD
+
+Open questions:
+- TBD
@@ -0,0 +1,38 @@
+---
+id: WI-YYYYMMDD-001
+type: work-item
+status: active
+title: Short work item title
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: []
+related: []
+source_paths: []
+confidence: confirmed
+---
+
+# WI-YYYYMMDD-001 - Short Work Item Title
+
+## Goal
+
+TBD
+
+## Context
+
+TBD
+
+## Scope
+
+TBD
+
+## Out Of Scope
+
+TBD
+
+## Acceptance Notes
+
+TBD
+
+## Related Wiki Docs
+
+- TBD