56 lines
3.2 KiB
Markdown
56 lines
3.2 KiB
Markdown
# OSVauco Working State
|
|
|
|
## Current objective
|
|
The working-state system has been created locally and is awaiting review and
|
|
commit. The next engineering objective, after this documentation commit is
|
|
approved, is to complete the safe source-to-Cloud-Build handoff for the
|
|
existing deploy MCP.
|
|
|
|
## Code state
|
|
- **Last verified code baseline before this documentation change:** `b802a294826e0a55d19f6bf1ec6f8668f06c6783`
|
|
- **Current branch, local SHA, remote SHA, and working-tree status:** Always verify with `bash scripts/workspace-status.sh`; do not duplicate transient Git status manually in this document.
|
|
|
|
## Verified facts
|
|
- The configured Git remote `origin` points to the project Gitea repository. Remote Gitea branch state and immutable commit SHA are the source of truth for versioned repository artifacts.
|
|
- Live cloud runtime, IAM, deployment, build, and traffic state must be verified from the relevant live platform/API; Git alone does not prove live state.
|
|
|
|
## Current deployment state
|
|
- Live deployment state for the current branch was not verified during this documentation-only Phase 2 session. The branch is committed and pushed at the Phase 1 SHA, but committed/pushed status must not be interpreted as built, deployed, traffic-serving, or live.
|
|
- The repository documents an obsolete trigger-based deployment path. A previous read-only investigation reported no active Cloud Build triggers. This fact must be re-verified live before relying on it operationally.
|
|
|
|
## Current blockers
|
|
- The deploy MCP source-to-Cloud-Build handoff is incomplete. The next design must safely resolve an allowed branch to an immutable commit SHA, obtain the corresponding source, submit it to the existing declarative build flow, and return an auditable build result. No Cloud Build trigger creation is approved or assumed.
|
|
|
|
## Next single action
|
|
Perform a read-only design review of the existing deploy MCP path and its
|
|
source-to-Cloud-Build handoff. Identify the smallest safe implementation plan
|
|
that resolves an allowed branch to an immutable commit SHA, obtains only that
|
|
source, submits it to the existing declarative build flow, and returns an
|
|
auditable build result. Do not implement, deploy, change IAM, or create Cloud
|
|
Build triggers without separate explicit approval.
|
|
|
|
## Explicit no-go actions
|
|
- Do not deploy the current branch without explicit separate deployment approval.
|
|
- Do not create a Cloud Build trigger or replacement deployment architecture.
|
|
- Do not modify IAM, VPC Service Controls, Cloud Run services, Dockerfiles, buckets, service accounts, or application behavior as part of this work.
|
|
- Do not delete, deprecate, rename, or replace existing documentation, including `docs/HANDOFF.md`, `.gemini/GEMINI.md`, and `docs/AGENT_RULEBOOK.md`.
|
|
- Do not treat Git history, WORKING_STATE, chat history, terminal output, or agent memory as proof of live cloud state.
|
|
|
|
## Verification commands
|
|
```bash
|
|
# Check Git status
|
|
git status
|
|
git rev-parse HEAD
|
|
git remote show origin
|
|
```
|
|
|
|
### Optional live deployment verification
|
|
Run only when explicitly approved and when authenticated GCP access is available.
|
|
```bash
|
|
# Check for Cloud Build triggers
|
|
gcloud builds triggers list --project=propane-will-491900-m5
|
|
```
|
|
|
|
## Last updated
|
|
2026-09-20
|