chore: planner run 2026-04-19

prerequisites.md

@@ -1,5 +1,5 @@
 # Prerequisite Tree
-<!-- Last updated: 2026-04-08 -->
+<!-- Last updated: 2026-04-19 -->
 
 ## Objective: Foundation — Core agent loop (dev → CI → review → merge)
 - [x] dev-agent picks up backlog issues (dev/dev-agent.sh exists)
@@ -18,7 +18,7 @@ Status: DONE
 ## Objective: Foundation — Planner gap analysis against vision
 - [x] Planner formula exists (run-planner.toml v4)
 - [x] planner-run.sh cron wrapper exists
-- [x] Planning runs established and maintaining prerequisite tree (run 1: 2026-04-05, run 2: 2026-04-08)
+- [x] Planning runs established and maintaining prerequisite tree (runs 1–3)
 Status: DONE
 
 ## Objective: Foundation — Multi-project support
@@ -29,7 +29,7 @@ Status: DONE
 ## Objective: Foundation — Knowledge graph for structural defect detection
 - [x] networkx package installed in agents container (#220 — closed)
 - [x] build-graph.py exists in lib/
-- [x] Graph report generating successfully (165 nodes, 137 edges as of 2026-04-08)
+- [x] Graph report generating successfully (239 nodes, 263 edges as of 2026-04-19)
 Status: DONE
 
 ## Objective: Foundation — Predictor-planner adversarial feedback loop
@@ -45,8 +45,10 @@ Status: DONE
 - [x] disinto init re-run stability (#158 — closed)
 - [x] disinto init repo creation API endpoint (#164 — closed)
 - [x] Prediction labels created during init (#225 — closed)
-- [ ] Ops repo migration for existing deployments (#425 — backlog+priority)
-Status: BLOCKED — #425 ops repo missing dirs on existing deployments
+- [x] Ops repo migration issue filed (#425 — closed)
+- [ ] Ops repo branch protection blocks remote writes (#758 — blocked, HUMAN_BLOCKED, blocked-on-vault vault/pending/disinto-ops-branch-protection.md)
+- [ ] Re-seed ops repo directories (#820 — backlog+priority, blocked on #758)
+Status: BLOCKED — #758 ops repo branch protection needs human admin action
 
 ## Objective: Adoption — Built-in Forgejo + Woodpecker CI
 - [x] Docker compose with Forgejo + Woodpecker
@@ -54,30 +56,50 @@ Status: BLOCKED — #425 ops repo missing dirs on existing deployments
 - [x] WOODPECKER_HOST override fix (#178 — closed)
 Status: DONE
 
+## Objective: Adoption — Nomad+Vault orchestration
+- [x] Step 0: Nomad+Vault installers (cluster-up.sh, install.sh, vault-init.sh, lib-systemd.sh)
+- [x] Step 1: Forgejo on Nomad (nomad/jobs/forgejo.hcl, deploy.sh, S1.3 wiring, S1.4 CI validation)
+- [x] Step 2: Vault policies + secret import (S2.1–S2.6, plus fixes S2-A through S2-G)
+- [x] Step 3: Woodpecker on Nomad (S3.1–S3.4 jobspecs + OAuth + wiring, plus fixes S3-1 through S3-6)
+- [x] Step 4: Agents on Nomad (S4.1 agents.hcl with 7 roles + llama + vault-templated tokens, S4.2 --with agents wiring, plus fixes S4-1 through S4-7)
+- [x] Step 5: Edge + staging + chat + dispatcher + vault-runner on Nomad (S5.1–S5.5, plus fixes S5-1 through S5-7)
+- [ ] Step 6: Cutover runbook from docker-compose to Nomad+Vault (#1037 — vision)
+Status: DONE (Steps 0–5 complete; Step 6 cutover runbook is operational, not a code prerequisite)
+
 ## Objective: Adoption — Landing page communicating value proposition
 - [x] Website addressable exists (disinto.ai)
 - [ ] Website observability — no engagement measurement (#426 — vision)
 Status: BLOCKED — no evidence process connected to website
 
 ## Objective: Adoption — Example project demonstrating full lifecycle
-- [ ] No example project exists
-- [ ] Requires verified bootstrap (#425)
+- [ ] No example project exists (#697 — vision+priority)
+- [ ] Requires verified bootstrap (blocked on #758/#820)
 Status: BLOCKED — depends on bootstrap completion and ops repo migration
 
+## Objective: Adoption — Core pipeline reliability
+- [ ] dev-poll blocked label not cleared on re-claim (#1047 — backlog+priority+bug-report)
+- [ ] Woodpecker agent unhealthy; log truncation on short-duration failures (#1044 — backlog+bug-report)
+Status: BLOCKED — two open pipeline bugs degrading CI-fix loop and debugging
+
+## --- ADOPTION MILESTONE: IN PROGRESS ---
+
 ## Objective: Ship (Fold 2) — Deploy profiles per artifact type
 - [ ] No deploy profiles defined
 - [x] CI pipeline working (Woodpecker OAuth fixed)
+- [x] Nomad jobspec infrastructure available (Steps 1–5 complete)
 Status: BLOCKED — not started, needs design (vision-level)
 
 ## Objective: Ship (Fold 2) — Vault-gated fold transitions
 - [x] Vault redesign complete (#73-#77 — all closed)
 - [x] Vault PR workflow documented (docs/VAULT.md)
-- [ ] Vault directories complete in ops repo (#425 — approved/fired/rejected missing)
-Status: BLOCKED — #425 ops repo dirs needed for vault workflow
+- [x] Vault + Nomad integration (template stanzas, JWT auth, policies)
+- [ ] Vault lifecycle directories on remote ops repo (blocked on #758/#820)
+Status: BLOCKED — #758/#820 ops repo dirs needed for vault workflow
 
 ## Objective: Ship (Fold 2) — Engagement measurement baked into deploy pipelines
 - [ ] No engagement measurement exists
 - [ ] No observables yet (AGENTS.md confirms)
+- [ ] collect-engagement.sh never commits evidence (#982 — backlog+priority, blocked on #758)
 Status: BLOCKED — depends on deploy profiles + website observability (#426)
 
 ## Objective: Ship (Fold 2) — Rent-a-human for gated channels

vault/pending/disinto-ops-branch-protection.md

@@ -0,0 +1,32 @@
+# Request: Ops repo branch protection — add planner-bot to merge whitelist
+
+## What
+Forgejo branch protection on `disinto-ops` repo blocks all agent writes (git push AND API file commits). The `planner-bot` user needs to be added to the merge whitelist so the planner can push prerequisite tree updates, memory, and vault items.
+
+## Why
+Blocks #758 (ops repo branch protection), which blocks:
+- #820 (re-seed ops repo directories)
+- #982 (collect-engagement evidence commit)
+- All planner tree persistence (prerequisites.md stuck since run 2, 2026-04-08)
+- Vault lifecycle directories (pending/approved/fired/rejected)
+- Evidence collection for all agents
+
+Waiting since 2026-04-08 (first identified in planner run 2).
+
+## Human action
+1. Open Forgejo admin → `disinto-ops` repo → Settings → Branches → Branch Protection for `main`
+2. Add `planner-bot` to the "Merge Whitelist" (and optionally `gardener-bot`, `dev-qwen`, `dev-qwen2` for future ops writes)
+3. Test: `cd disinto-ops && git push` from the agents container (or planner container)
+4. Comment on #758 confirming resolution
+
+## Factory will then
+- Planner pushes updated prerequisites.md, knowledge/planner-memory.md, vault items
+- #820 (re-seed ops repo) becomes unblocked and enters dev-agent pipeline
+- #982 (collect-engagement commit) becomes unblocked
+- Vault lifecycle directories are created and populated
+- Evidence collection begins for all agents
+
+## Unblocks
+- #758 — ops repo branch protection blocks all agent writes
+- #820 — re-seed ops repo directories
+- #982 — collect-engagement.sh never commits evidence