proposal: every org owns its ground + the one-MCP decision #117

Merged

plat merged 1 commit from docs/org-ground into main

2026-08-05 14:26:38 +00:00

plat commented

2026-08-04 03:02:51 +00:00

Owner

Two design artifacts that anchor the completion push:

docs/proposals/every-org-owns-its-ground.md — every org gets <org>/gitops; deployment config becomes subject to the same Forgejo access panel as everything else. Staged writers (A: MCP-only + org read → B: org PRs + verify gate → C: per-org SA + Kyverno bounds), tier-in-tenant-file resource envelopes, and a migration that is Flux ownership transfer with a hard 2-before-3 ordering. Lazy org-repo creation means germinate threads nothing and daughters get it free.
docs/design/one-mcp-front-door.md — decision record: no second MCP server. mcp.<domain> already authenticates via Forgejo and authorizes per call; the gap was access-management tools and documentation.

Implementation is up for review alongside this:

plat/mcp#20 — Stage A routing + lazy provisioning + migration CLI
plat/mcp#21 — org/access tools (stacked on #20)
plat/agents#59 — asker propagation + audit mode
plat/gitops#27 — allocation pane + tiered quota policy

🤖 Generated with Claude Code

Two design artifacts that anchor the completion push: - **`docs/proposals/every-org-owns-its-ground.md`** — every org gets `<org>/gitops`; deployment config becomes subject to the same Forgejo access panel as everything else. Staged writers (A: MCP-only + org read → B: org PRs + verify gate → C: per-org SA + Kyverno bounds), tier-in-tenant-file resource envelopes, and a migration that is Flux ownership transfer with a hard 2-before-3 ordering. Lazy org-repo creation means germinate threads nothing and daughters get it free. - **`docs/design/one-mcp-front-door.md`** — decision record: no second MCP server. `mcp.<domain>` already authenticates via Forgejo and authorizes per call; the gap was access-management tools and documentation. Implementation is up for review alongside this: - [plat/mcp#20](https://git.open-platform.sh/plat/mcp/pulls/20) — Stage A routing + lazy provisioning + migration CLI - [plat/mcp#21](https://git.open-platform.sh/plat/mcp/pulls/21) — org/access tools (stacked on #20) - [plat/agents#59](https://git.open-platform.sh/plat/agents/pulls/59) — asker propagation + audit mode - [plat/gitops#27](https://git.open-platform.sh/plat/gitops/pulls/27) — allocation pane + tiered quota policy 🤖 Generated with [Claude Code](https://claude.com/claude-code)

plat added 1 commit

2026-08-04 03:02:51 +00:00

proposal: every org owns its ground; decision: one MCP front door

guard-ppt / no-ppt (push) Successful in 11s

Details

guard-ppt / no-ppt (pull_request) Successful in 11s

Details

009a918d9c

Per-org gitops repos along the cut line the tree already shows, with
staged writers, tier-in-tenant-file envelopes, and a Flux
ownership-transfer migration. Lazy org-repo creation means germinate
threads nothing. The MCP decision record: no second server — the gap
was access tools and documentation, not authentication.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

plat merged commit 87e1ed287e into main

2026-08-05 14:26:38 +00:00

plat referenced this pull request from a commit

2026-08-05 14:26:38 +00:00

Merge pull request 'proposal: every org owns its ground + the one-MCP decision' (#117) from docs/org-ground into main