gsadmin/spinifex
1
0
Fork 0
mirror of https://github.com/mulgadc/spinifex.git synced 2026-10-15 17:11:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: record Ochre vector store move

Browse Source
This commit is contained in:
joshsiv-mulga
2026-10-06 17:06:39 +10:00
parent 93f101c0f6
commit cf150073dd
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/PACKAGE_BOUNDARY_MIGRATION.md
+1
View File
@@ -255,6 +255,7 @@ while the branch is in flight; they do not describe the umbrella repository's
| `001aa2d42` | `spinifex/admin` (`TenantCACertPath`, `TenantCAKeyPath`) | `spinifex/domains/acm` | The tenant private CA's on-disk layout belongs to ACM, beside `LoadTenantCA` and `LoadOrCreateTenantCA`, which consume it; the daemon and the `spx admin acm` command now call the ACM domain. Full preflight (excluding the pre-existing containerd advisory), focused ACM, admin, daemon and CLI suites and tagged integration/E2E compilation passed. |
| `454defb00` | `spinifex/admin` (IPsec certificate paths, peer issuance, strongSwan CA install and reread) | `spinifex/network/host` | IPsec peer credentials belong with the host IPsec owner that consumes them; `network/host` no longer imports admin. Peer keys use their own `ipsecCertKeyBits` seam (4096, lowered in tests) instead of admin's `certKeyBits`, a deliberate duplicate of the key-size policy. The moved test now builds its throwaway CA locally instead of calling admin's `GenerateCACert`. Full preflight (excluding the pre-existing containerd advisory), the four moved tests, focused network-host, admin and CLI suites and tagged integration/E2E compilation passed. |
| `2c467988d` | `spinifex/handlers/bedrock` | `spinifex/domains/ochre` | Ochre is the platform service and owns model serving placement, launch, readiness, capacity and reaping; the Bedrock name now marks only the AWS API surface, per the amended ADR-0001 map row. Package renamed from `handlers_bedrock` to `ochre`, callers drop the alias, and KV bucket names, NATS subjects, metric names and error strings keep their `bedrock` names. The comment in the shipped `bedrock-serve` image script still names the old path because editing it changes image build input. Full preflight apart from the known govulncheck finding, focused Ochre, vector, Bedrock gateway, daemon, account teardown, awsgw, config and CLI tests, and tagged integration/E2E compilation passed. |
| `93f101c0f` | `spinifex/handlers/ochrevector` | `spinifex/domains/ochre/vector` | The tenant vector store (pgvector backend, KV index registry, ingest, jobs, backup and appliance orchestration) is Ochre domain state and now sits under the Ochre domain as the ADR-0001 map requires. Package renamed from `handlers_ochrevector` to `vector` with its existing package comment; callers use the `ochrevector` alias because `vector` is a common local identifier in the gateway, daemon and CLI. Error strings keep their `ochrevector:` prefix. The service-interface manifest names the new path. Full preflight apart from the known vulnerability-scan finding, focused Ochre, gateway, daemon, awsgw and CLI tests, tagged integration/E2E compilation and the manifest check passed. |
The EC2 contract row is intentionally different from the directory moves: it creates
a compatibility boundary. `ec2.cmd.*` retains its deployed one-token NATS