open-platform/mitosis
3
0
Fork 0
Code Issues 27 Pull requests 9 Releases 4 Packages 1 Wiki Activity Actions

upstream propagation: signed release manifest, seed pubkey, germinate bake, P1/P2 gate #169

Merged
plat merged 2 commits from feat/upstream-propagation into main 2026-08-20 18:26:59 +00:00
Conversation 0 Commits 2 Files changed 11 +342 -10
plat commented 2026-08-20 18:02:31 +00:00
Owner
Copy link

See the branch commit message for the full design. Gate note: on THIS PR the coldstart gate germinates from the current seed (mcp 0.40.x), so P1/P2 SKIP loudly; the first reseed after plat/mcp 0.41.0 pins carries the new mcp + upstream.pub + signed manifest, and its PR gate runs P1/P2 for real.

🤖 Generated with Claude Code

See the branch commit message for the full design. Gate note: on THIS PR the coldstart gate germinates from the current seed (mcp 0.40.x), so P1/P2 SKIP loudly; the first reseed after plat/mcp 0.41.0 pins carries the new mcp + upstream.pub + signed manifest, and its PR gate runs P1/P2 for real. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
upstream propagation: daughters follow the mother's signed releases by PR (P1/P2 gate, manifest in reseed, pubkey in the seed)
Some checks failed
guard-ppt / no-ppt (push) Successful in 27s
Details
guard-ppt / no-ppt (pull_request) Successful in 27s
Details
coldstart / coldstart (pull_request) Has been cancelled
Details
78aac19f31 
- scripts/upstream-manifest.sh: emit + ECDSA-sign genesis/upstream.json from
  the seed's own integration pins; reseed commits it beside the seed
  (UPSTREAM_SIGNING_KEY repo secret; pubkey committed at genesis/upstream.pub).
- bin/seed ships upstream.pub sha-pinned in the seed manifest; bin/germinate
  verifies it and bakes UPSTREAM_MANIFEST_URL (mother's raw path, from
  createdFrom) + UPSTREAM_PUBKEY into the daughter's plat-mcp-secrets — the
  only mother-identity a daughter carries, and it is public.
- coldstart gate P1/P2: a signed fixture release must yield a pin-bump PR
  (tracked path) and a forked-FYI issue (foreign path) in the daughter's own
  gitops within one cycle. Mechanics only; artifact delivery is the next lane.
- also: the-org-is-the-unit proposal doc + operator-vs-admin edit ride along.

Pairs with plat/mcp 0.41.0 (reconcileUpstream).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
upstream: a release may only be published from an aligned tree — the manifest's one version must be true of both the image and the chart pin (validator finding #1)
All checks were successful
guard-ppt / no-ppt (push) Successful in 42s
Details
guard-ppt / no-ppt (pull_request) Successful in 42s
Details
coldstart / coldstart (pull_request) Successful in 17m56s
Details
7bbdda81d0
plat merged commit 7ab1a21322 into main 2026-08-20 18:26:59 +00:00
plat deleted branch feat/upstream-propagation 2026-08-20 18:27:00 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something is not working

  
discussion
An idea that is still being discussed

  
duplicate
This issue or pull request already exists

  
enhancement
New feature

  
goal

   
help wanted
Need some help

  
horizon:backlog

   
horizon:governance

   
horizon:mvp

   
invalid
Something is wrong

  
operator-decision
Blocked on the owner's call — no agent work until decided

  
question
More information is needed

  
roadmap

   
wontfix
This won't be fixed

No labels
bug
discussion
duplicate
enhancement
goal
help wanted
horizon:backlog
horizon:governance
horizon:mvp
invalid
operator-decision
question
roadmap
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
open-platform/mitosis!169
No description provided.