Skip to content

Add runtime decomposition and signing migration plans#140

Open
scottscott wants to merge 1 commit intonomoticai:mainfrom
scottscott:feat/runtime-signing-plans
Open

Add runtime decomposition and signing migration plans#140
scottscott wants to merge 1 commit intonomoticai:mainfrom
scottscott:feat/runtime-signing-plans

Conversation

@scottscott
Copy link
Collaborator

Summary

Add two implementation-planning documents as follow-ups to repository health analysis:

  • an incremental decomposition roadmap for GovernanceRuntime
  • a phased signing v2 migration plan (HMAC-SHA256 to Ed25519)

Key Changes

  • Added docs/architecture/runtime-decomposition-roadmap.md
    • decomposition targets (CertificateManager, OverrideCoordinator, DelegationManager, LifecycleHookDispatcher, FleetMonitor)
    • phased extraction strategy and guardrails
    • success criteria for behavior-preserving refactor progress
  • Added docs/security/signing-v2-migration-plan.md
    • phased migration model (inventory -> abstraction -> optional v2 -> dual-verify -> reissue/cutover)
    • testing requirements and operational security criteria

Why This PR

These plans let us start high-ROI health-report improvements without immediately changing CI gating behavior. They provide execution structure for future implementation PRs while keeping this change low-risk and docs-only.

Scope

  • Documentation only
  • No runtime code changes
  • No CI/workflow changes

Add runtime decomposition roadmap and signing v2 migration plan as actionable follow-ups from repository health analysis.

These plans define phased execution, guardrails, and acceptance criteria.
@codecov
Copy link

codecov bot commented Mar 20, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant