Repository navigation
Feat/phase2 - #6
Merged
Merged
Conversation
…r settings and state
…uts, retry, idempotency, approval rules; duplicate-call guard, verification in rollback; Python parity
… approval routing with quorum, delegation, escalation and break-glass, scoped halts, advise mode
…execution and impact preview
…ed webhook), event hub, alerts, OpenTelemetry traces, structured logger
…LangGraph, CrewAI, OpenAI Agents, FastMCP, Claude Code hook), Pydantic bindings, webhook signature check
…ersions; lint; manifest contract tests; manifest suggestion; classification banner
… run and action inspection, period reports, capture, simulation, replay, speculation, impact, retention, holds, anchors, delegation, break-glass, halts
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Automations to automatically generate PRs for you. |
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What was built
Console: modes off (default), open and login. open is loopback-only, same-origin, never admin, and the server refuses to start it on a non-loopback HOST. The gateway has the same switch on its own port, and reversi console runs it locally.
Console pages: manifest editor (form, YAML, diff, draft/approve/deprecate/restore, MCP import, contract tests) and policy editor (rule builder, tests, simulation, publish/activate/history). Also impact preview, replay, alerts, connectors, tool inventory, run compare, and settings for keys, roles, holds, retention and channels.
Gateway:
starts without manifests in observe mode, with a banner of what is unclassified
schema validation of arguments and results, and schema_hash drift blocking
an unclassified_reads policy and advise mode
per-manifest timeout and retry
read-back verification during rollback
hot reload
new tools reversi.preview_impact, reversi.search, reversi.classification, reversi.suggest_manifest and reversi.reload
egress check on upstream URLs
CLI: apply, suggest-manifest, gateway and console. apply has --dry-run, --prune and --detailed-exitcode, and works against a local registry or --server. Also --groups on approvals and --reader-cmd on rollback.
Ops: Helm chart with an optional writable registry volume, docker-compose updates, and SECURITY.md pointing to GitHub private vulnerability reporting.
Server main: reads the project config. It adds REVERSI_CONSOLE, REVERSI_COMPENSATOR_CMD, REVERSI_READER_CMD and Slack inbound via REVERSI_SLACK_SIGNING_SECRET and REVERSI_SLACK_USERS.
Bugs found and fixed along the way
A Slack user mapped to the auditor role could approve requests; fixed.
A manifest with an approval: object broke the registry, lint, the server and apply; fixed.
reversi approvals approve|deny wrote only to the store, with no ledger record or notifications; it now goes through the engine.
lint, validate and test failed on registry folders; fixed.
The log:, anchor:, notifications: and alerts.denial_spike settings were ignored, and the CLI ignored REVERSI_CAPTURE; all now take effect.
The standalone server returned 404 for /v1/delegations; fixed.
Docs
Pages rewritten or added for every area above. The new ones are concepts/simulation, operations/gitops, operations/notifications and operations/retention.
Three manual test guides under docs/testing/ (adoption, governance, operations), written by agents who ran each command in a scratch directory. They checked the console with curl, not a real browser.