docs: executable desktop-v0.5.17 upgrade remediation plan - #39
Open
BrianInAz wants to merge 3 commits into
Open
Conversation
Our accepted desktop artifact is 15 upstream releases behind and the production relay runs fork-only NIP-AD code, so an upgrade needs a single governed plan rather than per-lane improvisation. Records the verified reconciliation against upstream desktop-v0.5.17: the RUSTSEC-2026-0224 deviation is now moot because upstream removed nostr-relay-pool entirely, the private-CA deviation still reproduces and its patch applies cleanly, and 73 of 74 fork commits remain fork-only against only 5 registry entries. Names the blockers that must not be worked around: the Harbor artifact publisher is not source-controlled, and no governed path exists to install a Buzz build on the physical iPhone. Co-authored-by: Cursor <cursoragent@cursor.com>
The plan now points at the created Notion page so the executor updates the existing mirror instead of creating a duplicate, and states that Git wins if the two drift. Co-authored-by: Cursor <cursoragent@cursor.com>
Lock standing decisions (skip mobile, D-1-B native-roots, four-binary Harbor artifact), add fail-fast Vault/AWX/GitHub/Buzz credential bootstrap, and remove leftover human gates so the implementing agent can execute end-to-end without design questions. Co-authored-by: Cursor <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Makes the
desktop-v0.5.17upgrade plan executable for Grok 4.6 Medium: fail-fast credential bootstrap, locked standing decisions (skip mobile, D-1-B native-roots, four-binary Harbor artifact), TDD Harbor publisher contract, and zero leftover human gates.Git is authoritative:
docs/operations/buzz-v0.5.17-upgrade-remediation-plan.mdNotion mirror: https://app.notion.com/p/3c23569aa25581dc83e7ca6ae7e28478
Notes
origin/main, not this docs branch.Made with Cursor