sixfold-space/madtea

SHA256

Fork 0

guard: declare the effects of every operation and every spec endpoint #654

New issue

Closed

opened 2026-09-29 16:37:06 +00:00 by hexajon · 1 comment

hexajon commented

2026-09-29 16:37:06 +00:00

Owner

What to build

Each first-class operation declares its effects in the operation registry (ADR 0008).
Each endpoint in the vendored Forgejo and Gitea specs in docs/api-specs/ has its effects declared, keyed by method and path.
The gate fails on an operation or an endpoint with no declaration. A spec refresh that adds an endpoint must declare its effects in the same change.

This is the mechanism #572 asks for, widened from deletes to every effect the guard knows.

Depends on

#538, because the vendored specs must come from the live forges, so that every endpoint in them is real and current.

Acceptance

Removing one declaration fails the gate, and the failure names the operation or the endpoint.
The ADR 0029 table, docs/reference/destructive.md, and the parity pin test can read the declarations.

## What to build - Each first-class operation declares its effects in the operation registry (ADR 0008). - Each endpoint in the vendored Forgejo and Gitea specs in `docs/api-specs/` has its effects declared, keyed by method and path. - The gate fails on an operation or an endpoint with no declaration. A spec refresh that adds an endpoint must declare its effects in the same change. This is the mechanism #572 asks for, widened from deletes to every effect the guard knows. ## Depends on - #538, because the vendored specs must come from the live forges, so that every endpoint in them is real and current. ## Acceptance - Removing one declaration fails the gate, and the failure names the operation or the endpoint. - The ADR 0029 table, `docs/reference/destructive.md`, and the parity pin test can read the declarations.

hexajon added a new dependency

2026-09-29 16:37:45 +00:00

#538 api-specs: the vendored specs are hand-refreshed and Gitea's is a minor version stale

hexajon referenced this issue

2026-09-29 16:40:31 +00:00

guard: the forge client send functions call the guard #660

hexajon added a new dependency

2026-09-29 16:41:10 +00:00

#660 guard: the forge client send functions call the guard

hexajon referenced this issue

2026-09-29 18:52:59 +00:00

docs(adr): consolidate the decision records into their end-state form #667

hexajon referenced this issue

2026-09-29 19:05:28 +00:00

guard: the raw API passthrough keeps every limit #668

hexajon added a new dependency

2026-09-29 19:05:51 +00:00

#668 guard: the raw API passthrough keeps every limit

hexajon referenced this issue

2026-09-29 19:06:46 +00:00

epic: one guard enforces the recorded limits on every surface #670

hexajon added a new dependency

2026-09-29 19:06:51 +00:00

#670 epic: one guard enforces the recorded limits on every surface

hexajon referenced this issue

2026-10-15 20:24:12 +00:00

guard: allowlist the pure-toggle DELETE endpoints the raw passthrough may pass #774

hexajon referenced this issue from a commit

2026-10-15 22:29:21 +00:00

feat(guard): #654 declare effects for every operation and spec endpoint

hexajon referenced this issue from a commit

2026-10-15 22:29:22 +00:00

refactor(guard): #654 use slices.Contains in effect membership checks

hexajon referenced this issue

2026-10-15 22:29:22 +00:00

feat(guard): #654 declare the effects of every operation and spec endpoint #779

hexajon referenced this issue

2026-10-17 16:49:11 +00:00

guard: the forge client send functions call the guard #660

hexajon removed a dependency

2026-10-18 05:21:50 +00:00

#538 api-specs: the vendored specs are hand-refreshed and Gitea's is a minor version stale

hexajon commented

2026-10-18 05:23:09 +00:00

Author

Owner

The v0.20.0 breaking set is complete and green on main. The code landed across the v0.20.0 branches, the full local gate passes, and the forge suite is green on both forges at both pinned versions on current main (31693766). Closing as done.

hexajon closed this issue

2026-10-18 05:23:09 +00:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks

#660 guard: the forge client send functions call the guard

sixfold-space/madtea

#668 guard: the raw API passthrough keeps every limit

sixfold-space/madtea

#670 epic: one guard enforces the recorded limits on every surface

sixfold-space/madtea

Reference

sixfold-space/madtea#654

No description provided.

Rows
Columns