pt9912 / k-deskflight

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 5 paquetes directos y 51 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 56 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 2 tienen avisos conocidos, de los cuales 0 son directas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "cncf",
        "controller-runtime",
        "go",
        "kubernetes",
        "opendesk",
        "operator",
        "preflight",
        "prometheus",
        "sovereign-workplace"
      ],
      "is_fork": false,
      "size_kb": 804,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 313862,
        "Shell": 61568,
        "Makefile": 18583,
        "Dockerfile": 12234,
        "Go Template": 2826
      },
      "pushed_at": "2026-06-12T18:55:45Z",
      "created_at": "2026-05-15T15:41:48Z",
      "owner_type": "User",
      "updated_at": "2026-06-12T18:55:49Z",
      "description": "Kubernetes-native OpenDesk preflight operator. k-deskflight checks cluster readiness, storage, ingress, cert-manager, resources and RBAC before installing or upgrading OpenDesk.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "Shell"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Dietmar Burkard",
      "type": "User",
      "login": "pt9912",
      "company": null,
      "location": null,
      "followers": 2,
      "avatar_url": "https://avatars.githubusercontent.com/u/66826472?v=4",
      "created_at": "2020-06-12T10:03:02Z",
      "is_verified": null,
      "public_repos": 55,
      "account_age_days": 2234
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-05-20T16:08:34Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b09363681a2ecc4570aa4bad2cb35860fc657bbe",
          "body": "Zwei /Development/…-Verweise auf das Schwester-Repo m-trace durch\nden Repo-Namen ersetzt — Maschinen-Layout-Leaks in lebender Doku,\ngefunden vom neuen d-check-Modul hostpaths (Kalibrierungslauf\nslice-016). ADR-/Planning-Bestände bleiben unverändert (Audit-Trail;\nAusweg bei Modul-Aktivierung: hostpaths.scope.ignore).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(spec): Workspace-Pfade aus der Architektur-Spec entfernt",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-06-12T18:34:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "be9314c5fc7faea939866f4e27826b995b1a3c7e",
          "body": "govulncheck-Container von golang:1.26.3 auf 1.26.4 angehoben (behebt\nGO-2026-5039, GO-2026-5038, GO-2026-5037 in der Stdlib) und\ngolang.org/x/net auf v0.55.0 (behebt GO-2026-5026). security-gates\nund gates lokal grün.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deps): Go 1.26.4 + x/net v0.55.0 für govulncheck-Findings",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-06-12T09:08:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "28ab762cb16a68f4d0d544c486a26f9ee435d525",
          "body": "make doc-refs läuft über das digest-gepinnte d-check-Image v0.2.0\n(.d-check.yml: links + anchors); scripts/verify-doc-refs.sh gelöscht.\nErsetzt ADR 0012 §2.10 und löst die dortige Host-Bash-Ausnahme der\nDocker-only-Konvention auf. Vergleichslauf: Alt 0 / d-check 2 echte\nMehr-Befunde (separat gefixt), final beidseitig 0 bei 49 Dateien.\nDokumentiert im d-check-Repo (slice-014, DC-QA-04).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(adr): ADR 0016 — doc-refs via d-check, Skript ersetzt (LH-QG-008)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-06-12T08:27:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b2ae4fb022e8b4dacea1e0c6431937835037d9e5",
          "body": "Zwei Mehr-Befunde aus dem d-check-Vergleichslauf (Heading nutzt\n„Prüfung: Kubernetes-Version\", die Links erwarteten den Slug der\nGedankenstrich-Form) — das Alt-Skript schnitt Fragment-Anker vor der\nPrüfung ab und konnte das nicht sehen.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: veraltete Roadmap-Anker in done-Slices korrigiert",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-06-12T08:27:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e94db0678a0d165217938e609a9b0c124f5cd1c7",
          "body": "Day-close synchronisation across the user-facing READMEs, the\nnormative architecture spec, and the slice-M8 plan after Steps 1-9\nare committed. M8 is now Ready-for-closure; only Step 11 (final\nclosure note + git mv to done/) remains for the next session.\n\nREADME.md + README.de.md:\n- Status block lif\n[…]\nicit ✓\n  attestation per DoD, pointing at the step that delivered it and\n  the verification anchor (make target, slice-step number, or\n  CI-matrix run). All 10 DoDs are attested.\n\nmake doc-refs green.",
          "is_bot": false,
          "headline": "docs: reflect v0.2 progress and attest slice-M8 DoDs (day-close)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T16:36:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "41f36d6928d32631919d25db9425c9b54f7408f2",
          "body": "Add user-facing release notes for slice M8 (Helm-Chart distribution\npath) to CHANGELOG.md `[Unreleased]`. Format follows the [0.1.0]\nsection (Keep a Changelog 1.1.0, English, LH/AR/ADR tracability\nlinks). The block migrates to a `[0.2.0]`-section at M16 closure.\n\n### Added (5 bullets):\n- Helm-Chart \n[…]\nts own.\n- Bypassed N-1 (added/changed tense mix matches the [0.1.0]-section\n  precedent) and N-3 (chart-sync-crd.sh idempotency is an internal\n  detail, not a CHANGELOG concern).\n\nmake doc-refs green.",
          "is_bot": false,
          "headline": "docs(changelog): M8 entries in [Unreleased] (slice-M8 step 9)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T16:19:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88425e42265dd045137c7ea86ee4f9fb0813d345",
          "body": "Fix the Distributions-Form decision left open by ADR 0005 §4 before\nM16 wires the publish pipeline. Status: Accepted.\n\nADR 0015 decides:\n- Distribution via OCI on GHCR (push to oci://ghcr.io/pt9912/charts,\n  pull/install via oci://ghcr.io/pt9912/charts/k-deskflight — helm\n  appends Chart.yaml.name a\n[…]\n. ADR is normative — every factual claim in\n§2 was cross-checked against Helm 3.8+ release notes, the Helm\nOCI documentation, ArtifactHub docs, GHCR docs, and the\ncert-manager Helm installation guide.",
          "is_bot": false,
          "headline": "docs(adr): ADR 0015 — Helm-Chart-Distributions-Form (slice-M8 step 7)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T14:56:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d1b3c4a6de175769e40fc7eb056e5a942272638",
          "body": "K-1 doc-review uncovered one [Hoch] bug shipping into every chart\nrelease plus four [Mittel] and one [Niedrig] precision issues. All\nfixed before the next step.\n\n[Hoch] H-1 — wrong CR name in chart-shipped artefacts\n`templates/NOTES.txt:13` and `deploy/charts/k-deskflight/README.md:82`\ntold users to\n[…]\n 8 closure note extended with the\nreview outcomes and the explicit list of bypassed items.\n\nmake doc-refs green; make helm-lint green (only the long-standing\n\"Chart.yaml: icon is recommended\" [INFO]).",
          "is_bot": false,
          "headline": "docs(user): fold step-8 review fixes (slice-M8 step 8 review-round)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T14:09:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f94d465ca41083839f55392bbfe08aa180bf58e1",
          "body": "Add a new §8 \"Alternative: Installation via Helm-Chart\" to\ndocs/user/installation.md and a chart-internal README under\ndeploy/charts/k-deskflight/. Both address the two heads-ups carried\nover from earlier review rounds:\n\n- Step-2 review: rbac.create=false + extern verwaltete RBAC is now\n  documented\n[…]\n\n\nVerification: make doc-refs green, make helm-lint green\n(only the pre-existing \"icon recommended\" [INFO]), make\nhelm-manifests-sync still green (README files are not in the\ngate's comparison basis).",
          "is_bot": false,
          "headline": "docs(user): Helm-Chart install path (slice-M8 step 8)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T13:00:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ed2eaee1d9de6f11ae563d155a6b4d36f8d14caf",
          "body": "…M8 step 6)\n\nStep 6 of slice M8: cluster-smoke gains a second install path via\n`helm install`, run in parallel with the existing kubectl/kustomize\npath in the CI cluster-smoke job matrix. Both paths attest identical\nbehaviour (5 MVP conditions, 4 failed-CRs, /metrics scrape via Service\nDNS, Lease fo\n[…]\n5 now link to the\nopen/-triggers instead of an M16-pin.\n\nVerification: both INSTALL_MODE paths run green locally\n(669 /metrics lines, lease present, all CRs reach expected phase).\nmake doc-refs green.",
          "is_bot": false,
          "headline": "feat(smoke): cluster-smoke INSTALL_MODE=helm + open/ triggers (slice-…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T12:55:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4ed11999d137b1879796f9ee1a9adc38f2e6dc77",
          "body": "Step 5 of slice M8: implement the structural drift-detection gate\nbetween deploy/charts/k-deskflight/templates/ and the canonical\nsources (deploy/manifests/ + config/crd/). The gate is now in\n`make gates` and runs green.\n\nTooling:\n- Dockerfile: helm-tools stage gains kubectl (sha256-verified,\n  iden\n[…]\ne; documented as a known future\n  concern in §4 step 5 closure notes.\n\nVerification: make gates green ([gates] passed; helm-manifests-sync\npassed); make chart-sync-crd idempotent; make doc-refs green.",
          "is_bot": false,
          "headline": "feat(chart): helm-manifests-sync drift gate (slice-M8 step 5)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T11:50:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7652ec70aac6791305e1daf19efdcd77e1759a5f",
          "body": "Step 4 of slice M8: structural Makefile wiring for the three Helm\ngates. helm-lint and helm-template (both already green from steps 1\nand 3) move into `make gates`; helm-manifests-sync is added as a\ntarget but deliberately kept OUT of `make gates` until step 5\nimplements its drift-detection algorith\n[…]\n to \"siehe Block 'Normalisierung' unten\".\n\nVerification: make gates passes ([gates] passed), make\nhelm-manifests-sync fails with the documented STUB message and\nexit 1 (verified). make doc-refs green.",
          "is_bot": false,
          "headline": "chore(make): wire helm gates into make gates (slice-M8 step 4)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T11:08:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "237a91cab6cb2e6f11cf97a118a8327ec45baabb",
          "body": "Three test-values overlays under deploy/charts/k-deskflight/test-values/\nplus a make helm-template loop that renders each one and reports the\nresource count.\n\nOverlays:\n- default.yaml — comment-only ({} body so it's valid YAML); exercises\n  the values.yaml defaults verbatim. Expected render: 8 resou\n[…]\nspot-check confirms Service port=9090, targetPort=metrics\n  (named ref), containerPort=8080 (static) — the decoupling from\n  step-2 review holds.\n- make doc-refs green; make helm-lint unchanged green.",
          "is_bot": false,
          "headline": "feat(chart): test-values overlays + render loop (slice-M8 step 3)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T09:28:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b5cae2bf933f8da071a46e5a520ae65dd7892f6",
          "body": "Step 2 of slice M8: derive all Chart templates 1:1 from deploy/manifests/\n(slice-M8 §2.2) and add the AR-016 namespace-scope-mode manifests +\ntheir conditional Chart counterparts.\n\nTemplates (10 new under deploy/charts/k-deskflight/templates/):\n- namespace.yaml, serviceaccount.yaml (conditional on n\n[…]\nresources in default (cluster-wide) mode and 10 resources with\n--set operator.mode=namespace-scope (Role + RoleBinding added,\n--namespace=<ns> arg appears in the deployment args). make doc-refs\ngreen.",
          "is_bot": false,
          "headline": "feat(chart): templates + namespace-scope manifests (slice-M8 step 2)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T08:36:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bbf404f5dd9b03456432282cbc473124e63b1769",
          "body": "First step of slice M8: bring up an empty-but-lintable Helm-Chart at\ndeploy/charts/k-deskflight/ plus the Docker-only tooling to gate it.\nNo templates yet (those come in step 2) — the only behavioural\nverification is that `make helm-lint` reports 0 failures.\n\nChart skeleton (deploy/charts/k-deskflig\n[…]\ntive for\n  namespace-scope mode).\n\nVerification: `make helm-lint` reports \"1 chart(s) linted, 0 chart(s)\nfailed\" (only an [INFO] hint about the missing icon, which is\noptional). `make doc-refs` green.",
          "is_bot": false,
          "headline": "feat(chart): scaffold Helm-Chart skeleton (slice-M8 step 1)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T07:51:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54449a799113e81c40bda646f9d194586f857986",
          "body": "Move v0.2 roadmap from next/ to in-progress/ and open the first\nslice M8 covering the Helm-Chart distribution path:\n\n- git mv next/roadmap-0.2.md -> in-progress/roadmap-0.2.md\n  (history-preserving move). Roadmap header status changed from\n  \"Draft (in next/, wartet…)\" to \"In Progress (Roadmap aktiv\n[…]\n  Out-of-scope (§8): Subcharts, Helm-Hooks, chart-testing,\n  helm-docs, Multi-Replica-HA. Risiken (§9): Drift-Gate-Pflege,\n  Schema-Enge, OCI-Auth-Eigenheiten, Versions-Divergenz.\n\nmake doc-refs grün.",
          "is_bot": false,
          "headline": "docs(plan): activate v0.2 roadmap and open slice M8 (Helm-Chart)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T06:39:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba42c153edda45b9c725c06c458f2f551a21fdc8",
          "body": "Tighten the v0.2 roadmap review draft:\n\n- §0 Bewegungspfad now names done/roadmap-0.2.md explicitly as the\n  Sammel-Closure target (parity with the v0.1 roadmap closure pattern).\n- §3 M11 deferral note now uses a proper relative link to\n  ../done/slice-M6-metrics-tests-doku.md so doc-refs resolves i\n[…]\ns/ context is implicit relative to planning/).\n- Quote-style fix on one inline reference.\n- Several minor word-wrap nudges.\n\nSlice cuts M8-M16 and the §2 overview table unchanged. make doc-refs\ngreen.",
          "is_bot": false,
          "headline": "docs(plan): refine roadmap-0.2 review draft",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T05:54:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c2f948b3b19fe1d19065a20fbbb90fe18be2716",
          "body": "Start v0.2 planning by fixing the scope cut and drafting the follow-up\nroadmap as a review artifact:\n\n- ADR 0014 (Accepted, 2026-05-21): full LH-PRI-002 in v0.2.0 with no\n  internal v0.2.x cut; AR-OP-006 (OTel-Tracing-Spans) included;\n  AR-OP-007 (Conversion-Webhook) stays open because the CRD remai\n[…]\ne\n  index reflects the new roadmap draft.\n\nSits in next/ for review; activation is the explicit move to\nplanning/in-progress/roadmap-0.2.md together with the first slice\nplan (slice-M8-helm-chart.md).",
          "is_bot": false,
          "headline": "docs(plan): open v0.2 scope (ADR 0014) and draft roadmap-0.2 in next/",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T05:40:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd31dbefc96120b1cadfa332445d9a0b0c3c175a",
          "body": "Update the four top-level project docs to reflect that the MVP shipped\nas v0.1.0 on 2026-05-20:\n\n- README.md, README.de.md: replace \"implementation in progress / M7\n  pending\" status block with a release-attested block, add an Install\n  snippet (docker pull + kubectl apply), point to deploy/samples \n[…]\n a \"Umsetzungsstand\" attestation pointing at the done/ slice trail\n  and CHANGELOG.\n\nNormative LH-*/AR-* statements and the still-open AR-OP-006/007/008\n(v0.2 / Folge-ADR) are intentionally unchanged.",
          "is_bot": false,
          "headline": "docs(readme,spec): attest v0.1.0 release in READMEs and normative specs",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-21T04:49:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a36c4311a3213cd3f44bf003f6ad3a563daea863",
          "body": "Add the standard OCI image labels to the runtime stage. The most\nimportant one for the GitHub UX is org.opencontainers.image.source,\nwhich GitHub uses to automatically connect the GHCR package to\nthis repository — once an image carrying this label is pushed,\nthe Packages section in the repo sidebar \n[…]\ne gates` is green; no other stage touched, no behavioural\nchange.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(docker): add OCI image labels for automatic repo↔package link",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T16:32:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a9c92ab66c12bf29910f0ddf870e8181be38f30b",
          "body": "The branch protection rule for `main` was applied via\n`gh api -X PUT repos/pt9912/k-deskflight/branches/main/protection`\nwith the §10.5 recommendation:\n\n  - Three required status checks: DCO, gates (full bundle name),\n    security-gates (govulncheck).\n  - Require pull request before merging (0 appro\n[…]\nfully closed\non both planning artefacts and operational settings.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): attest M7 §10.5 — branch protection on main now active",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T16:15:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e9de922c82ae30c6c4d755b856eca3327a9ba1bd",
          "body": "…ously pullable\n\nThe GHCR container package visibility was flipped to `public` via\nthe package-settings web UI today. Verification:\n\n  gh api users/pt9912/packages/container/k-deskflight\n    → \"visibility\": \"public\"\n  docker logout ghcr.io && \\\n    docker pull ghcr.io/pt9912/k-deskflight:v0.1.0\n    \n[…]\n0-tag-blocking and can land whenever the\nmaintainer schedules it.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): attest M7 §10.5 #11b — GHCR package now public and anonym…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T16:12:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4c69eeff150818e0e2b9162b3ed94e29f1f22a0d",
          "body": "Backfill the slice-M7 §10.5 table with the actual data from the\nv0.1.0 release sequence (slice-§4 steps 15–17, executed in the\nsame session as the closure commit).\n\n  §7 #10 — annotated tag v0.1.0 pushed to origin as\n           6e53cc76eaf1773cfe75a5fda9c689193df1d339.\n  §7 #11a — GHCR image v0.1.0 \n[…]\nven when the GitHub-side toggles outlive the slice\ncommit window.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): record M7 §10.5 post-tag Folge-Attest entries",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T16:11:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "61fd77118cf7a1d027a5c6487297a20fcf7ce2a2",
          "body": "Replace the DATE_PLACEHOLDER marker introduced in commit 2cb05a1\nwith the actual release date. release-guard.sh continues to match\nthe `## [0.1.0]` section header regardless of the date — this\nedit is only the human-readable timestamp.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(changelog): finalize [0.1.0] release date to 2026-05-20",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T16:06:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ee924663ec66dee1fcf41f6db13540023677d2a5",
          "body": "…3/-014)\n\nClose the M7 release-slice with the §10 closure note inside the\nslice plan (delivered file set, §7 verification table, v0.2\nhand-overs, lessons learned, post-tag Folge-Attest placeholder),\nthen physically move three planning artefacts into `done/` as the\ncollective MVP-roadmap closure:\n\n  \n[…]\n will record themselves in §10.5 + CHANGELOG.md when\nthey happen.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): close slice M7 + collective MVP roadmap closure (LH-AK-01…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T15:57:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a9cab39b2c0de78db9b981a1c2c595faf0c42ba4",
          "body": "chore(changelog): seed [Unreleased] sub-section hint + DCO bot probe",
          "is_bot": false,
          "headline": "Merge pull request #1 from pt9912/chore/dco-bot-activation-probe",
          "author_name": "Dietmar Burkard",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T15:35:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53adb18dfa730907b1d4c9893ad26dca3c7fa4bb",
          "body": "Drop a comment-only hint into the [Unreleased] section so that\npost-v0.1.0 contributors know which Keep a Changelog sub-section\norder this project uses. The hint is invisible in rendered\nmarkdown and does not affect release-guard semantics.\n\nAlso serves as the probe commit for DCO bot activation in \n[…]\nplan/planning/in-progress/slice-M7-release-v0.1.0.md §4\nstep 10).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(changelog): seed [Unreleased] sub-section ordering hint",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T14:46:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c33ceb55634e9dfef8480fe71e7bd5dfca1787ea",
          "body": "…chkante\n\nStrengthen the grandfathering clause so that the bounded set of\nunsigned commits between ADR acceptance and operational\nDCO-bot activation is explicitly counted and bounded, rather than\nsilently inherited from the prior \"ab Akzeptanz dieser ADR\" wording\nthat the slice-M7 §2.7 audit reveals\n[…]\ning of when strict enforcement begins). `make\ndoc-refs` is green.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): ADR 0011 §2.4 — DCO bot-activation as the enforcement Bru…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T14:36:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2cb05a15c151db4acc07b648c1c51ec0bcc45573",
          "body": "Land the first CHANGELOG.md per Keep a Changelog 1.1.0 and the\nslice-M7 §2.2 decision: English, manual maintenance, release-tag\ngranularity, no separate ADR. The file is also the canonical\nrelease-notes source for the v0.1.0 tag (slice-M7 §2.6).\n\nThe [0.1.0] section covers the full MVP feature surfa\n[…]\n M7 slice plan\n(slice-M7-release-v0.1.0.md §2.2, §2.6 and §4 #9).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(changelog): seed CHANGELOG.md with [Unreleased] and [0.1.0] section",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T14:17:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8a236e7cfbc612aeaca310598c0a86ab82531bf0",
          "body": "…-M7 §2.5)\n\nLand the pre-release consistency guard as an m-trace-adapted shell\npattern. The guard validates only — it never creates a tag, pushes\na ref, or modifies the working tree. Tag creation (`git tag -a\nv0.1.0`) remains a separate explicit step (slice-M7 §4 step 15).\n\nscripts/release-guard.sh \n[…]\nof the M7 slice plan (slice-M7-release-v0.1.0.md\n§2.5 and §4 #8).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(release): add release-guard pre-release consistency check (slice…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T13:07:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3d5b90128da1a0acceaf8a4e4b5c5ace33c05f6f",
          "body": "…ice-M7 §2.4)\n\nExtend the security-gates target so that running `make security-gates\nVER=X.Y.Z` is the canonical release-gate invocation: govulncheck\nkeeps its inner-loop position and runs unconditionally, image-scan\nis added as a conditional prerequisite via `$(if $(strip $(VER)),\nimage-scan)` so i\n[…]\nof the M7 slice plan (slice-M7-release-v0.1.0.md\n§2.4 and §4 #7).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(make): bundle image-scan into security-gates when VER is set (sl…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T12:18:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "da1cff5b4b79bda5a2d2e1620f4dda0d1ac955fb",
          "body": "…(LH-QG-007)\n\nLand the Trivy image-scan gate that ADR 0012 §2.9 and slice-M7 §2.4\nrequire for the v0.1.0 release: every release candidate image is\nscanned with `aquasec/trivy:0.59.1`; CRITICAL and HIGH findings\nbreak the build, MEDIUM is reported but does not block.\n\nThe runtime logic lives in scrip\n[…]\nof the M7 slice plan (slice-M7-release-v0.1.0.md\n§2.4 and §4 #6).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(security): add Trivy image-scan with expires-checked vulnignore …",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T12:10:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee5802b6c3b0850ecc417e447771d1f782b2dd3b",
          "body": "Promote the image-build alias to a two-mode target and add the\nrelease-flow companions image-publish-dry-run, image-publish-guard\nand image-publish, adapted from m-trace.\n\nimage-build is now bimodal:\n  - without VER → builds $(IMAGE):go (the dev tag; existing behaviour)\n  - with VER=X.Y.Z → builds $\n[…]\nof the M7 slice plan (slice-M7-release-v0.1.0.md §2.3\nand §4 #5).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(make): add m-trace-style image-publish pattern (slice-M7 §2.3)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T11:31:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7196852eb88553cd1d6c0c96903728c9141b44af",
          "body": "…R-026)\n\nActivate the AR-026 production-mode leader election that the\ncontroller-runtime manager has carried in option-but-unconfigured form\nsince M2. The MVP keeps `replicas: 1`, but the flag wiring is now\nsharp so a future bump to >1 is a Deployment edit rather than a code\nchange. The follow-up HA\n[…]\nof the M7 slice plan (slice-M7-release-v0.1.0.md\n§2.8 and §4 #4).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(operator): wire leader election and single-pod topology guard (A…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T09:58:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5641af361d2413985dfadd5b8634402d843eb61b",
          "body": "K-1 review fixup M-3: the slice plan §3 file inventory row for\ndocs/user/installation.md described the update as\n\"§6-Erweiterung\", but the actual Step 3 delivery inserts a new §6\n(\"Beispiel-CR applizieren\") and renumbers the former §6/§7 to\n§7/§8. The terminology mismatch could mislead a later revie\n[…]\noubleshooting.md anchors on installation.md\n§2/§4/§5 stay stable.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): clarify M7 §3 installation.md update description",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T08:39:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d7497a20f27a393449c264b9020783d066b8d5a0",
          "body": "Update the user-facing documentation to point at the deploy/samples/\ntemplates introduced in the previous commit while keeping the\npedagogical inline examples intact.\n\ndocs/user/cr-examples.md:\n\n- §2 (evaluation) and §3 (production) each gain a blockquote at\n  the top calling out the corresponding d\n[…]\nslice-M7-release-v0.1.0.md\n§3 row for installation.md and §4 #3).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(user): wire CR examples and installation docs to deploy/samples",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T08:29:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8f9cad2eaed48d9765516e71053bce0ec0960dbd",
          "body": "Add two user-facing CR templates under deploy/samples/ for the\nv0.1.0 MVP release. These complement the existing\nconfig/samples/k-deskflight_v1alpha1_opendeskpreflightcheck.yaml\n(the smoke-tailored CR for cluster-smoke runs) and target real\nproduction/evaluation clusters rather than the bare-kind sm\n[…]\n\npath; functional Passed-smoke remains on the config/samples/ CR.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(samples): add MVP example manifests for production and evaluation",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T08:08:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5970ec98418f275578431a0f3f0bef2d7d9ced19",
          "body": "…n path\n\nTwo K-1 review fixups against the active M7 slice plan.\n\n§2.1 evaluation bullet: kubernetesVersion.min was incorrectly set\nto \"1.33\" with a misleading \"(ADR-0009-Default evaluation)\" gloss.\nADR 0009 §2.2 explicitly states both evaluation and production\nuse the same Kubernetes minimum defaul\n[…]\ne §7 LH-AK-001..-009 re-attest bullet are aligned\nwith the split.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): correct M7 §2.1 evaluation K8s default and §7 verificatio…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T08:05:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c3a1360d1bcc44dcf73d39ff43c144cc658bc6a8",
          "body": "The lastenheft examples for LH-PROD-003a (MVP) and LH-PROD-003b\n(target picture) were stale: they showed the pre-M2 field names\n(ingress.required/className, certManager.required,\nstorage.requiredClasses, resources.minCpu) which were renamed\nduring the M2 CRD-schema closure to the post-M2 names now i\n[…]\nof the M7 slice plan (slice-M7-release-v0.1.0.md\n§2.9 and §4 #1).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(spec): align LH-PROD-003a/-003b with current CRD field schema",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T07:43:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47f5f38c4d2d9afe99b015058d769c7a651460f1",
          "body": "Open the final MVP slice before the v0.1.0 tag. The slice plan\n(`slice-M7-release-v0.1.0.md`, 9 sections) follows the M5/M6 format\nand covers: user-ready example manifests under deploy/samples/,\nfirst CHANGELOG.md (Keep-a-Changelog 1.1.0, English, manual),\nm-trace-adapted image-publish / release-gua\n[…]\n  findings (consistent with §9 risk path and §7 verification #4).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nSigned-off-by: pt9912 <66826472+pt9912@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs(plan): activate slice M7 — release v0.1.0 (in-progress)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T07:41:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6ebdeaec3732f82d438b210f62b9611a73f835c4",
          "body": null,
          "is_bot": false,
          "headline": "docs(plan): fix M7 slice plan consistency",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T06:41:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0564fca4029cbecc03d71dc0ba0877f41540e260",
          "body": null,
          "is_bot": false,
          "headline": "docs(plan): fix M7 roadmap link target",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T06:40:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6255079ac6988104f5d84c45fbe68eaf358dad76",
          "body": null,
          "is_bot": false,
          "headline": "docs(plan): clean up M7 release plan placeholders",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T06:37:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45ca72d2d0a4ca5c4a10af0108a1802d159307fb",
          "body": null,
          "is_bot": false,
          "headline": "docs(plan): fix roadmap link in M7 slice plan",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T06:36:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "624d7e936b9630db3afbd89567d8bb26b13eac8e",
          "body": null,
          "is_bot": false,
          "headline": "docs(plan): fix M7 image tag consistency",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-20T06:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "735b565aa38b0f0a4376bac1902baddecc758069",
          "body": "Mehrere Status-Drift-Stellen im Dokumentations-Stand nachgezogen\n(analog 1d9330e nach M5-Closure).\n\nREADME.md + README.de.md:\n- Status-Zeile „M1–M5 done — M6 and M7 pending\" auf\n  „M1–M6 done — M7 pending\" gehoben.\n- Erweiterungs-Absatz „New in M6\" / „Neu in M6\" fasst die\n  M6-Errungenschaften zusam\n[…]\nCoverage 92.5 %, drei Code-Review-Runden + eine Doku-Review-Runde\n  + Closure-Review (5 Fixup-Commits).\n\nmake doc-refs lokal grün.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: sync status/DoD indicators after M6 closure + M6-lessons",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T16:53:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06e6ba4f3dbaa928bfc8db44f146dfba44032453",
          "body": "Vier Lessons aus M6 §10.4, die als Repo-weite Konventionen für alle\nkünftigen Slices wirken, an den passenden Stellen verankert.\n\ndocs/plan/planning/in-progress/README.md — neuer Block „Slice-\nKonventionen (kumulativ aus M1–M6 Lessons)\" mit zwei Punkten:\n\n  K-1 Doku-Review obligatorisch nach jedem D\n[…]\nide AR-OP-Punkte tragen Quelltext-Pointer und verweisen auf die\nkonkreten M6 §4 Step-1-Round-2-Befunde.\n\nmake doc-refs lokal grün.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan,arch): M6-Lessons als bindende Konventionen verankert",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T16:34:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a2322895bada5706ba666a33223055cce267b20a",
          "body": "Review-Befunde der M6-Closure-Notiz adressiert. Vier sinnvolle\nKorrekturen — drei davon sprachlich/konsistenz-bezogen, eine\nsubstantiell (AR-OP-005-Schließung tatsächlich einlösen).\n\n[Hoch] Befund 2 — AR-OP-005 in spec/architecture.md tatsächlich\ngeschlossen. §10.5 der Closure hatte einen „spec/arch\n[…]\neferziel-Pattern in\nroadmap §3 M6 analog M3-M5 (Lieferziel-Text bleibt Plan-Anker,\nCheckboxen flippen).\n\nmake doc-refs lokal grün.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): M6 closure-review fixups (Befunde 1-3, 9)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T16:04:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7f73e126f283f4d6fa190514e87c442805b4d1b1",
          "body": "M6 in einem Tag von Aktivierung bis Closure durchgezogen: sechs\nImplementierungs-Steps (§4 Step 1-6) + sechs Review-Fixup-Commits\nüber drei Code-Review-Runden + eine Doku-Review-Runde + dieser\nClosure-Commit. Insgesamt 13 Commits.\n\nslice-Plan nach `done/` gezogen + §10 Closure-Notiz ausgefüllt:\n\n  §\n[…]\n `done/`\n    umgebogen (sed-Refactor; 5 Verweise insgesamt).\n\nmake doc-refs lokal grün — alle alten + neuen Querverweise auflösen.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): close slice M6 — metrics endpoint, tests, docs (LH-AK-013)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T14:58:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fe23925e452cc913644c82bac4be72b4c076e059",
          "body": "Review-Befunde der docs/user/-Trilogie (Step 4+5+6) adressiert.\n\n[Hoch] Befund 1 — troubleshooting §6: wget-Diagnose unbrauchbar im\ndistroless-Image. Auf `kubectl get --raw .../proxy/metrics` umgestellt\nplus alternativer `kubectl run scrape-probe`-Pfad mit curl-Image.\n\n[Hoch] Befund 2+12 — Annotatio\n[…]\nribe formatiert\nField-Namen mit Leerzeichen), Verweis auf .cluster-smoke-attest.yaml\nals echten Output.\n\nmake doc-refs lokal grün.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(user): M6 step-4/5/6 review-fixups (Befunde 1-12)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T14:15:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fd95506b28d0e62c0bc814afae3ecbb96fcd6598",
          "body": "…4 Step 6)\n\nSchließt slice-M6 §2.4 Doku-Pflichten — der Conditions-Katalog\n(Step 5) + dieses Troubleshooting + die installation/cr-examples\n(Step 4) bilden den vollständigen docs/user/-Block der M6-Slice.\n\ndocs/user/troubleshooting.md (neu, 10 Sektionen):\n\n  §1 Operator-Pod startet nicht / CrashLoop\n[…]\nerverweise auflösen.\n\nBezug: LH-AK-013, LH-NF-013, LH-QA-004 (Bewertungskriterien\ntransparent), AR-010.1, slice-M5 §10.3-Übergabe.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(user): troubleshooting (8 M6-Fehlerbilder + v0.2-Vorgriff) (M6 §…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T13:27:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "485f60fe8ebbb0b5ab093482a975be2ca6af35e0",
          "body": "…Pfade) (M6 §4 Step 5)\n\nSchließt slice-M6 §2.4 Doku-Pflicht für den Conditions-Katalog; nur\nnoch troubleshooting.md (§4 Step 6) bleibt für die M6-Doku-Komplettierung.\n\ndocs/user/conditions.md (neu, 12 Sektionen):\n\n  §1 Lese-Konvention + Severity→Phase-Mapping (AR-014) + Pflicht-\n     Schema `**Reaso\n[…]\nrn,\n    in §1 als bewusste Lücke verankert.\n\nmake doc-refs lokal grün.\n\nBezug: LH-AK-013, LH-NF-013, LH-QA-004, LH-AK-011, AR-014.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(user): conditions-Katalog (8 Types × Reasons + Per-Check-Runner-…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T13:20:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ca074fbf6f1d72574e84ed34b8c149c60b6ce296",
          "body": "…Step 4)\n\nSchließt slice-M6 §2.4 Doku-Pflichten für Installation und\nCR-Examples; Conditions-Katalog (§4 Step 5) und Troubleshooting\n(§4 Step 6) folgen in Folge-Commits.\n\ndocs/user/README.md (erweitert): Stub durch ToC mit Verweisen auf\ninstallation.md und cr-examples.md ersetzt (conditions.md/\ntrou\n[…]\n-AK-013, LH-NF-013, LH-PROF-002/-003, LH-F-025, AR-OP-005.\n\nmake doc-refs lokal grün — alle Querverweise (10+ pro Datei) auflösen.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(user): installation + CR-Beispiele evaluation/production (M6 §4 …",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T13:12:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "26c32c45d77e8d4c8a2544de6cd5e5c03efe15aa",
          "body": "…gress/Resources (M6 §4 Step 3)\n\nVier failed-CRs unter hack/cluster-smoke/failed-crs/ angelegt (slice-M6\n§2.8 + §3.4). Jede CR kopiert den passed-Sample und ändert genau ein\nFeld auf failed-Wert:\n\n  - version.yaml      → smoke-failed-version,   kubernetesVersion.min=99.99\n  - storage.yaml      → smo\n[…]\nditions=True (keine Co-Failures)\n\nRe-Attestiert: LH-AK-005/-006/-007/-009 jetzt mit failed-Pfad\nzusätzlich zu M3/M4-passed-Pfaden.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(smoke): failed-CR-Cluster-Smoke für KubernetesVersion/Storage/In…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T13:02:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "313c93e3a8e217d43d7bc8b81d84c6cfa84d435c",
          "body": "Round-2-Review-Befunde aus dem fix(deploy)-Vorgänger adressiert —\nalle Niedrig, nur Doku- und Diagnose-Polish.\n\n[Niedrig] Befund 1 — Env-Override-Header: PROBE_NAMESPACE und\nMETRICS_SERVICE_FQDN sind jetzt im strukturierten \"Env-Overrides:\"-\nBlock des Script-Headers gelistet, neben den anderen fünf \n[…]\nr Skript-Comments und ein zusätz-\nliches kubectl-Flag. make gates lokal grün; cluster-smoke nicht neu\ngefahren (Pure-Doku-Commit).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deploy): M6 step-2 review-fixups Runde 2 (Befunde 1-3)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T12:53:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ffa693b727332861e0ae42edfc39818907870ea0",
          "body": "Round-1-Review-Befunde aus dem M6-Step-2-Commit adressiert:\n\n[Mittel] Befund 1+2 — Step 9b: Retry-Loop analog operator-http-smoke.sh\n(10× sleep 1) gegen Manager-Init-Race + explizites if-let-Capture um\ndas curl-Aufruf. Bei Fehler kommt jetzt ein `curl -v`-Diagnose-\nAufruf statt `set -e`-Silence. Vor\n[…]\n gates lokal grün. make cluster-smoke gegen kind grün: alle drei\nneuen Steps attestiert (HTTP-Smoke, Service-DNS, ClusterRole-jq).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deploy): M6 step-2 review fixups (Befunde 1-6, 9-10)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T12:43:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "26af0e469706e98f7f6b198f9d9ff3f516de8817",
          "body": "…E (M6 §4 Step 2)\n\ndeploy/manifests/service.yaml (neu): ClusterIP-Service\nk-deskflight-operator-metrics, Port 8080→metrics, Selector matched\ndas Operator-Deployment.\n\ndeploy/manifests/metrics-clusterrole.yaml (neu): ClusterRole\nk-deskflight-metrics-scrape mit nonResourceURLs=[/metrics],\nverbs=[get].\n[…]\n664 non-empty lines\n  - Step 9b Service-DNS: 664 lines via kubectl exec\n  - Step 9c jq-Inhaltscheck: ClusterRole strukturell valid\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(deploy): /metrics Service + Pattern-Asset-ClusterRole + Smoke-E2…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T09:42:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f4d21f86d45a0d60776a145b37ffe38fe56e555e",
          "body": "Round-2-Review-Befunde aus dem fix(application)-Vorgänger adressiert:\n\n[Hoch] Befund 1 — RequeueAfter+err-Konflikt: controller-runtime\nverwirft Result.RequeueAfter bei non-nil err und loggt zusätzlich\neine Warnung. Lösungen:\n  - markPhase Pending/Running: bei apierrors.IsConflict → Result\n    {Reque\n[…]\nag (M7) angelegt wird, müssen diese Einträge in den\n„Changed\"-Block.\n\nmake gates lokal grün (Coverage 92.5% ≥ 90%, Lint 0 issues).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(application): M6 step-1 review-fixups Runde 2 (Befunde 1-6)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T09:32:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dc4a14db5be5ea2d28f09b17271dced264978280",
          "body": "Review-Befunde aus dem M6-Step-1-Commit-Review adressiert:\n\n[Hoch] Befund 1 — Panic-Recover-Pfad merged jetzt intervalWarning und\nsetzt RequeueAfter. interval/intervalWarning werden im äußeren\nReconcile-Scope deklariert; handleReconcilePanic bekommt\nintervalWarning, reconcilePanicOutputAt nimmt now \n[…]\n10/AR-010.1.\n\nGenerated-Drift via make manifests (CRD-Schema-Update).\nmake gates lokal grün (Coverage 92.0% ≥ 90%, Lint 0 issues).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(application): M6 step-1 review fixups (Befunde 1-8)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T08:27:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8d9bb00be196e84c0b729c78e8fdd5867e14b8b0",
          "body": "…Step 1)\n\napi/v1alpha1: OpenDeskPreflightCheckSpec.Interval *string mit\n+kubebuilder:default=\"5m\"; bewusst ohne +kubebuilder:validation:Pattern\ngemäß slice-M6 §2.3.1 — AR-010.1 verlangt liveness-sicheres CR-Spec-\nScope-Verhalten, der Reconciler-Normalisierer ist alleinige\nValidierungsstelle.\n\nintern\n[…]\nlamped).\n\nGenerated-Drift via make manifests (CRD-Schema + DeepCopy).\nmake gates lokal grün (Coverage 92.9% ≥ 90%, Lint 0 issues).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(application): Spec.Interval normalization + RequeueAfter (M6 §4 …",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T07:42:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "585bc9b7aacab90b55772fe93d1a6c1044126d66",
          "body": "Eröffnet 2026-05-19 (1043 Zeilen) nach fünf Review-Runden:\nSpec.Interval *string ohne CRD-Schema-Pattern (AR-010-konsistent;\n-5m clampt auf 30s, \"abc\" auf Default 5m); /metrics-Endpoint via\nService-Objekt + Pattern-Asset-ClusterRole (Auth-Filter v0.2,\nADR-Folge zu ADR 0007); Integrationstests via ki\n[…]\ng); Coverage-/govulncheck-/depguard-\nGates strikt geschaltet.\n\nRoadmap §3-M6-Tabelle und §7-Statuszeile auf \"In Progress\" gehoben.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): activate slice M6 — metrics endpoint, tests, docs",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-19T07:11:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1d9330e5312746aa123112e43d436b8e15da82f4",
          "body": "…ixups\n\nMehrere Status-Drift-Stellen im Dokumentations-Stand nachgezogen:\n\nroadmap.md §3:\n- M4-DoD-Checkboxen (5 Lieferziel-Items) und Verifikations-Items\n  (LH-AK-006/-007/-008/-009) alle auf [x] gesetzt; pro AK-Item\n  ein Verweis auf den konkreten Unit-Test plus Cluster-Smoke-\n  Attestation.\n- M5-\n[…]\nor (Reconcile-Outer-Recover in handleReconcilePanic-\n  Methode extrahiert) und Lint-Folge-Fixes dokumentiert.\n\nmake doc-refs grün.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: sync status/DoD indicators after M4 + M5 closures + M5 review-f…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T17:02:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ea9db837339eeaa05b235e5695b415ca37d2004e",
          "body": "Implementation-Review-Befunde aus dem code-reviewer-Agent (Slice M5\nist bereits geschlossen, daher Post-Closure-Fixups statt Plan-Iteration):\n\n[hoch]\n\n- Befund #1 (runner.go): Late-Recover-Send in runWithTimeout-Worker\n  ist jetzt non-blocking via select-default. Verhindert Goroutine-\n  Leak bei ung\n[…]\nstring lowercase\n(staticcheck ST1005), result-always-nil-Return-Wert entfernt\n(unparam).\n\nmake gates grün, Coverage 93.2% (≥ 90%).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(application): M5 post-closure review fixups (Befunde #1–#10)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T16:44:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b09e3de8709701b6902b891bb4688422e6b359fe",
          "body": "…0/-012/-015/-016)\n\nslice-M5 von in-progress/ nach done/ gezogen und §10-Closure-Notiz\nergänzt: Datei-Set (9 Commits inkl. zwei Plan-Iterationen,\nConditionType-Interface-Erweiterung, CI-Hotfix-Wiring), Verifikations-\nErgebnis aller §7-Items (lokal + CI-attestiert), Out-of-Scope-\nÜbergaben an M6/M7/v\n[…]\nt-Discrimination.\n\nRoadmap-Status M5 = Done; M6 und M7 weiterhin Pending. M6\naktiviert durch eigenen slice-M6-…md in in-progress/.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): close slice M5 — RBAC self-check and robustness (LH-AK-01…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T15:56:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4340874b5231259ad668f4d0e2e12261559e3e01",
          "body": "…tep 6)\n\nSchritt 4 hat den Reconciler-Pfad für SAR-Pre-Execution gebaut, aber\ndas main.go-Wiring lag noch nicht. Folge: in cluster-smoke panicken\ndie drei Checks mit RequiredPermissions (Storage, Ingress, Cluster-\nResources) auf nil.CanI; per-Check-Recover liefert InternalError,\nPhase=Unknown. Genau\n[…]\n\n  landen.\n\nLokal verifiziert: make cluster-smoke grün gegen kindest/node v1.34.0\nmit allen fünf Conditions=True und Phase=Passed.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(operator): wire AccessReviewer + Logger into reconciler (M5 §4 S…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T13:17:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "43d6beca6423385f53eb937a8f5b7116ca42a729",
          "body": "…4 Step 5)\n\nSlice-M5 Schritt 5: zwei Code-Audit-Tests verifizieren statisch, dass\ndie +kubebuilder:rbac:-Marker am Reconciler konsistent zur Hex-\nArchitektur und zu LH-SEC-005 sind.\n\ninternal/audit/markers/ (neues Mini-Package):\n\n- parser.go: ParseRBACFile(path) liest eine Go-Datei via go/parser,\n  \n[…]\n shared markers-Package, keine Code-Imports\nzwischen application und adapter (depguard-konform).\n\nmake gates grün, Coverage 94.7%.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(audit): destructive-audit + RBAC-consistency via go/parser (M5 §…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T13:03:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c9f2e3b8ad461a96ff304660f543b42e59bc1479",
          "body": "…nitize (M5 §4 Step 4)\n\nSlice-M5 Schritt 4: Reconciler übernimmt die Runner-Mechanik aus\nSchritt 3 und ergänzt die drei Pflicht-Sanitize-Stellen aus §2.6.\n\nReconciler struct:\n\n- AccessReviewer port.AccessReviewer — wird an RunCheckSafely pro\n  Check durchgereicht (nil-safe für M3/M4-Tests ohne Permi\n[…]\ner recover →\n  Status Phase=Unknown, Condition=ReconcileError, Reason=\n  ReconcilePanic.\n\nmake gates grün, Coverage 94.5% (≥ 90%).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(application): reconciler wires M5 runner with SAR + recover + sa…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T12:50:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ddcc9a4a31df98dc12565240bfa57928e9eefa5f",
          "body": "…s (M5 §4 Step 3b)\n\nSlice-M5 Schritt 3b: der zentrale Runner-Helper plus die Sanitize-\nHooks aus §2.6.\n\ninternal/hexagon/application/runner.go:\n\n- RunCheckSafely orchestriert pro Check: SAR-Pre-Execution mit\n  Run-lokalem PermissionCache (slice-M5 §2.3) → klassifiziert\n  RBACCheckFailed > RBACInsuff\n[…]\n-Standard-Attrs (check/status/reason/severity/\n  message + extras), nil-Logger-Toleranz.\n\nmake gates grün, Coverage 94.2% (≥ 90%).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(application): runner with SAR-pre-execution + secret-filter hook…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T12:20:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "282208faf1dbf5ebdfaffe570b8baaf6ddac3d1a",
          "body": "…p 3a)\n\nVorbereitend für den Runner (Schritt 3b): Check-Interface bekommt\neine zusätzliche ConditionType() string-Methode. Der Application-\nLayer (Runner) darf adapter/check nicht importieren (depguard\napplication-no-adapter), kann also die existierenden\nConditionTypeXxx*-Konstanten nicht direkt ref\n[…]\ns Feld in stubCheck und recordingCheck\n(Default ist name + \"Ready\" für M3/M4-Kompat-Tests).\n\nSlice-Plan §2.2 entsprechend amended.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(domain,check): add ConditionType() to Check interface (M5 §4 Ste…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T12:20:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d2ea8805239ff14b8af03caed09b626ea4750460",
          "body": "…5 §4 Step 2)\n\nSlice-M5 Schritt 2: SAR-Adapter implementiert port.AccessReviewer\ngegen authorization.k8s.io/v1.SelfSubjectAccessReview (AR-018).\n\nadapter/k8s/access_review.go:\n\n- AccessReviewAdapter nimmt kubernetes.Interface aus dem geteilten\n  ClusterClients-Bundle entgegen.\n- CanI mapped Permissi\n[…]\nhared sarReactor-Helper captured optional die einkommende SAR\n  zur Mapping-Verifikation.\n\nmake gates grün, Coverage bleibt ≥ 90%.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(adapter,k8s): AccessReviewAdapter for SelfSubjectAccessReview (M…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T11:50:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6cde019ebee16b49b0e0eff1dd6bc9e67aaaf44d",
          "body": "…s (M5 §4 Step 1)\n\nSlice-M5 Schritt 1: SAR-Modellierung im Domain-/Port-Layer.\n\nNeue Files:\n\n- domain/permission.go: PermissionRequest-Struct (Group, Resource,\n  Subresource, Verb, Namespace) als k8s-freie Domain-Repräsentation\n  + CanonicalString-Helper für Logging/Cache-Keys/Test-Vergleich.\n  Form\n[…]\nMarker (rbac_consistency\n  _test in Schritt 5 wird das automatisch erzwingen).\n\nmake gates grün, Coverage 96.0% (≥ 90% Threshold).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(domain,port,check): RequiredPermissions interface + 5 check decl…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T11:40:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "868314ce2b0ca70d8106017b36a2640810692f7e",
          "body": "…og-attrs\n\nFolge-Review-Befunde adressiert:\n\n- §2.5 race-hardened: select-Block validiert nach <-resultCh\n  zusätzlich runCtx.Err(), damit eine simultane Context-Beendigung\n  immer als Context-Klassifikation gewinnt — nicht als\n  Check-Erfolg. Verhindert Go-select-Non-Determinismus bei exakt\n  zeitg\n[…]\ngger und Per-Reconcile-Summary.\n\n§1 Lieferziele, §7 Akzeptanzkriterien #10, §9 Risiken und §3.1\nInventar entsprechend angeglichen.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): slice M5 review-fixups — select race, parent-deadline, sl…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T11:28:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2bc223857b531e60801ac24233657d071b4492bd",
          "body": "Eröffnet slice-M5-rbac-self-check-robustness.md (SelfSubjectAccessReview\npro Check, Panic-Härtung, Per-Check-Timeout, Secret-Filter-Konvention)\nund setzt Roadmap-Status M5 auf In Progress.\n\nScope: Roadmap-§3-M5-eng — AR-010 Interval, AR-026 Leader-Election\nund AR-009 Worker-Pool sind explizit ausgel\n[…]\natisch abgeglichen, Drift\n  in beide Richtungen bricht den Build.\n\nSieben Implementation-Schritte plus Closure als Tasks angelegt.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): activate slice M5 — RBAC self-check and robustness",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T10:19:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5802b2d4b9f1bb619f2e7a2c9a90d7e41364200",
          "body": "…ntity reason\n\nReview-Befund nach Slice-Closure: §2.5 und §3.1 listeten einen\nInvalidNodeQuantity-Reason für den ClusterResources-Check, der in\nder Implementierung nicht existiert. Hintergrund: Node-Allocatable\nwird bereits adapter-seitig (internal/adapter/k8s/nodes.go) per\nQuantity.MilliValue()/Val\n[…]\nden tatsächlichen\nCode-Stand (ResourcesSufficient, InsufficientCPU/-Memory/-Resources,\nInvalidSpec, ClusterResourcesLookupFailed).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): slice M4 closure-review fixup — drop stale InvalidNodeQua…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T08:02:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fbe759ebedc04a56ce3b447bf74fbe5983faddaa",
          "body": "slice-M4-cluster-state-checks.md von in-progress/ nach done/ gezogen\nund §10-Closure-Notiz ergänzt: Datei-Set (10 Commits inkl. zwei\nPlan-Review-Fixups und einem Coverage-Boost-Commit), Verifikations-\nErgebnis aller §7-Items (lokal + CI-attestiert), Out-of-Scope-\nÜbergaben an M5/v0.2/M6, fünf Lesson\n[…]\nen v0.2 mit LH-F-014.\n\nRoadmap-Status M4 = Done; M5–M7 weiterhin Pending. M5 aktiviert\ndurch eigenen slice-M5-…md in in-progress/.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): close slice M4 — cluster-state checks (LH-AK-006..009)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T07:11:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d74de95cc68752a3361b28a22487071ace36ef8",
          "body": "cmd/operator/main.go zieht jetzt NewClusterClients statt direkt\nNewDiscoveryAdapter — die vier neuen Adapter (StorageClass,\nIngressClass, APIGroup, Node) teilen sich Clientset + Discovery-Client\nund werden mit den vier neuen Checks zusammen in der Registry\nregistriert. Damit kennt der Operator alle \n[…]\nchen wäre.\n\nLokal verifiziert: make cluster-smoke grün gegen kindest/node v1.34.0\nmit allen fünf Conditions=True und Phase=Passed.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(operator,smoke): wire M4 checks + smoke prep stubs (M4 §4 Step 5)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T06:41:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cb13f5a45959fe31ceb70883c34596fc62310554",
          "body": "…hold to 90 %\n\nCoverage von 76.9 % auf 95.8 % gehoben durch:\n\n- 5 neue Test-Files unter internal/adapter/k8s/ via\n  k8s.io/client-go/kubernetes/fake (StorageClass-/IngressClass-/Node-\n  Listing inkl. Default-Annotationen-Toleranz + NodeReady-Filter +\n  PrependReactor-Fehlerpfade) und k8s.io/client-g\n[…]\nne weitere Hebung. envtest-basierte\nIntegrationstests bleiben als M6-Erweiterung offen, sind aber\nnicht mehr Coverage-blockierend.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(coverage): adapter k8s tests + cover small branches, hoist thres…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T06:19:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c83bcc441dbaff7be05596c0e135f0ff540177ad",
          "body": "buildSpecMap erweitert um die vier neuen Check-Specs gemäß slice-M4\n§2.2-Aktivierungsregeln:\n\n- StorageClass + IngressClass: nur bei explizitem Sub-Spec aktiviert,\n  Names-Liste wird defensiv kopiert.\n- CertManager: parameterlos und immer aktiviert.\n- ClusterResources: immer aktiviert mit code-seiti\n[…]\nlt-Werte pro\n  Profil empfängt, wenn die CR keinen expliziten Sub-Spec liefert.\n\nmake gates grün, Coverage 76.9 % (Threshold 0 %).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(application): reconciler runs all M4 checks (M4 §4 Step 4)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T05:36:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2a9f2aa7bd5fe3d4494a76349349b670e7c333c9",
          "body": "api/v1alpha1/opendeskpreflightcheck_types.go bekommt vier neue\nCheckSpec-Typen und ChecksSpec wird um vier Sibling-Pointer\nerweitert:\n\n- StorageClassCheckSpec mit Names (MinItems=1) + RequireDefault\n- IngressClassCheckSpec mit Names (MinItems=1)\n- CertManagerCheckSpec parameterlos (Existence-only)\n-\n[…]\npcopy.go + CRD-YAML) ist\nmitcommittet; config/rbac/role.yaml bleibt unverändert (M2-Pre-Grant\ndeckt M4-Bedarf 1:1, slice-M4 §3.5).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(api): extend CRD with M4 sub-specs (M4 §4 Step 3)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T05:25:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "98e058156d9be0bc5cc5f440f112783a11719069",
          "body": "Fünf neue Files unter internal/adapter/k8s/ und vier neue Checks\nunter internal/adapter/check/ schließen das MVP-Pflichtset der\nCluster-State-Prüfungen:\n\n- k8s.NewClusterClients(cfg) baut Clientset + Discovery-Client als\n  geteiltes Bundle; vier neue Adapter (StorageClass, IngressClass,\n  APIGroup, \n[…]\nvtest-\nPflicht M6) und drücken die Coverage erwartungsgemäß auf 76.8 %;\nThreshold 0 % bleibt eingehalten. M6 hebt strikt auf 90 %.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(adapter,k8s,check): cluster-state adapters + checks (M4 §4 Step 2)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T05:15:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb85806a7c33c1db1b79b0768908d3319247cce6",
          "body": "§3.3 clusterresources_test.go-Zeile präzisiert, welche Pfade vom\nCheck-Layer aus überhaupt erreichbar sind: passed, failed-cpu/-mem/\n-both, lookup-error, invalid spec-MinCPU/-MinMemory, invalid CheckSpec-\nType. Adapter-interner Node-Quantity-Parse-Fehler ist von oben nicht\ntestbar, weil der Port bereits int64-Werte liefert — wird in M6\nvia envtest gegen den realen Adapter abgedeckt.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): slice M4 — clarify cluster-resources test scope",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T05:15:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "99cc9ffcfdba6fdcbad48c6f4758679d4e2d9bb0",
          "body": "…manager message bridge\n\nDrei weitere Klarstellungen aus dem Folge-Review:\n\n- §2.7 Versionspins-Tabelle: Quelle-Spalte verweist jetzt direkt auf\n  hack/cluster-smoke/*.yaml, nicht mehr auf \"gepinnt in\n  cluster-smoke.sh\". Damit ist die Pin-Semantik (Upstream-Version-\n  Tracking) klar von der Manifes\n[…]\nt. Damit\n  überbrückt M4 die M6-Doku-Verbindlichkeit aus §9 schon im\n  CR-Status — Unit-Test fixiert Severity + Message-Substring.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): slice M4 review-fixups — manifest-source language + cert-…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T05:04:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cbb04a3e18aff1a249adb2bee9f88f9c2889a492",
          "body": "…ger severity\n\nDrei Klarstellungen aus Slice-Plan-Review:\n\n- §2.6 macht die Smoke-Manifest-Quelle eindeutig: ausschließlich der\n  Repo-Spiegel hack/cluster-smoke/, kein Network-Fetch zur Laufzeit.\n  §9-Risiko angeglichen — Decision-Trigger-Sprache entfernt, weil\n  die Mitigation upfront verbindlich \n[…]\nIsDefault explizit: Adapter toleriert beide Default-Annotationen\n  (Legacy storageclass.beta.* + GA storageclass.kubernetes.io/*).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): slice M4 review-fixups — smoke manifest source, cert-mana…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T04:59:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f88d43e1cf8e10dce3c982b40dbf51813f5ada23",
          "body": "Vier neue CheckSpec-Typen plus vier eng geschnittene Discovery-Ports\nfür die M4-Cluster-State-Checks:\n\n- domain.StorageClassSpec mit Names + RequireDefault (LH-F-010/-011)\n- domain.IngressClassSpec mit Names (LH-F-012)\n- domain.CertManagerSpec parameterlos + CertManagerAPIGroup-Konstante\n  (LH-F-013\n[…]\nInfo-Allocatable-Werte sind bereits in\nMilli-CPU/Bytes skalarisiert, damit Domain-/Port-Vergleiche ohne\nQuantity-Import auskommen.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(domain,port): cluster-state check types (M4 §4 Step 1)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T04:51:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fed4b50ec142c1e6b1c36b66535f21ecf1415ab6",
          "body": "Eröffnet `slice-M4-cluster-state-checks.md` (StorageClass, IngressClass,\ncert-manager, ClusterResources) und setzt Roadmap-Status M4 auf\nIn Progress. Zentrale Slice-Entscheidungen: Port-Segregation pro\nDiscovery-Domain, Default-Aktivierung nur für cert-manager und\nClusterResources, Profile-Defaults \n[…]\nbleibt\nWarning mit verbindlicher M6-Doku-Pflicht, Cluster-Smoke wird um\ningress-nginx- und cert-manager-Vorinstallation erweitert.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): activate slice M4 — cluster-state checks",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-18T04:51:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "51bc1abfe5602b874e0292c0aabe282955a3c407",
          "body": "Status-Drift in `spec/architecture.md` §11 (Offene Architektur-Punkte):\ndrei Punkte sind durch M2/M3 implementiert, standen aber noch als\n„offen\". Vierter ist teil-implementiert.\n\nAR-OP-001 — Konkrete CRD-Spec-Feld-Typen + kubebuilder-Marker:\n  Geschlossen mit M2 (api/v1alpha1/opendeskpreflightcheck\n[…]\n)\". Bleibt formal offen, klarer Pfad zur\n  Schließung dokumentiert.\n\nAR-OP-006/-007/-008 bleiben legitim offen (v0.2 / Folge-ADR).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(spec): close AR-OP-001/-002/-004, refine AR-OP-005",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T19:22:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "803c6e4464a0ef39f03fdb58e6fda15c79247fe4",
          "body": "User-Frage „Ist der Status in den Dokumenten aktuell?\" — vier Drift-\nStellen gefunden und angepasst:\n\n1. README.md + README.de.md Status-Block: sagte noch\n   „specification phase, no code yet\" und „11 ADRs\". Stand jetzt:\n   - V-Modell-Phase auf LH-VM-004 (Implementierung im Gang).\n   - 13 ADRs (inkl\n[…]\nrrekt (LH-OP-001..-011 alle geschlossen mit ADRs;\nADR 0012/0013 sind nicht aus LH-OP-Triggern entstanden, daher kein\n§22-Eintrag).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: sync status indicators with current implementation state",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T19:20:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "50a3f81f2d90adcaf92abb429580ace7aa860fa0",
          "body": "Erster cluster-smoke-CI-Lauf (Run 25999750149, SHA 2d81cdd) hat alle\ndrei strikt cluster-pflichtigen Lastenheft-Items real verifiziert:\n\n- LH-AK-001 (CRD installierbar): `kubectl apply -f config/crd/…yaml`\n  + `kubectl wait --for=condition=Established` gegen kind 0.31.0 +\n  kindest/node:v1.34.0 grün\n[…]\n01, LH-AK-002 in M2-Block;\nLH-AK-005-Begründung um Real-Cluster-Verweis erweitert in M3-Block).\nGesamtstand jetzt 31 [x] / 41 [ ].\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): attest LH-AK-001/-002/-005 via cluster-smoke CI run",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T19:07:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cacb104c32469c217763bb13e4c620b3f63cc7e8",
          "body": "Node-20-Deprecation-Warnung im ersten cluster-smoke-Run gegen\n`actions/upload-artifact@v4.6.2`. Bump auf v7.0.1 (Release 2026-04-10),\nNode-24-fähig — analog der actions/checkout-Hebung in Commit d17bb25.\n\nPin: 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a (v7.0.1). Pin-Hebung\nbleibt Routine ohne ADR (ADR 0012 §2.8 Abs. 3).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): bump actions/upload-artifact v4.6.2 → v7.0.1 (Node 24)",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T19:03:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2d81cddea3021c49ba8115bd79693717d4b74401",
          "body": "User-Anforderung: HTTP-Smoke gegen Operator-Endpoints. Bezieht den\ncontroller-runtime-HTTP-Pfad (healthz, readyz, /metrics) als\nzusätzliche Cluster-Smoke-Stufe ein. Bewusst minimaler M6-Vorgriff\n— der vollständige Prometheus-Scrape-Pfad (RBAC, ServiceMonitor,\nAuth-Filter, Doku) bleibt in M6 (Roadmap\n[…]\ngen unter\n                          cmd/operator, das hat keinen Layer-Restrict)\n  make security-gates  → No vulnerabilities found\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(operator,smoke): expose healthz/readyz/metrics + HTTP-Smoke script",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T18:56:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cd48343838655a580d0469dfa1c5fdc672a1f0d1",
          "body": "…DR 0013)\n\nImplementiert ADR 0013 — Docker-only-konforme E2E-Verifikation der\nLastenheft-Items LH-AK-001/-002/-005 gegen einen real laufenden\nkind-Cluster.\n\nDockerfile: neuer `smoke`-Stage auf alpine:3.20 mit gepinnter\n- kind v0.31.0 (matched zu kindest/node:v1.34.0 — ältere kind-\n  Versionen können\n[…]\nchärft (kind+kubectl-\nPins via Dockerfile-ARG; CI ohne externe Actions außer checkout;\nDocker-only-Konvention bleibt eingehalten).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(smoke): cluster-smoke against kind via Dockerfile smoke stage (A…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T18:48:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3cf396856bc2446db6ea642b7b8d8e2a52d1d84e",
          "body": "Drei lokale Kubernetes-Cluster-Provisionierungs-Optionen (kind / k3d /\nminikube) für die LH-AK-001/-002-Attestation und zusätzliche\nobservational Cluster-Smoke aus M2/M3 §10.5 abgewogen. Entscheidung:\nkind als Default, mit kontrollierter Folge-Aktivierung von k3d für das\nk3s-Profil (LH-PROF-001) ab \n[…]\nript-Implementierung,\nMulti-Version-Matrix, k3d-Aktivierung, envtest, Trivy-Scan. Diese\nADR bindet nur Plattform und CI-Verortung.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): ADR 0013 — kind als Cluster-Smoke-Default-Plattform",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T18:15:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f7393694f05bbd21780076352a4f6e44bbee6413",
          "body": "Reanalyse der M2/M3-Verifikations-Bullets gegen den Lastenheft-§17-\nWortlaut: drei der fünf M2-Items und ein M3-Item sind bereits durch\nfake-client-Tests verifiziert, nicht erst durch Cluster-Smoke.\n\nTickungen mit Begründung:\n\n  LH-AK-001 [ ] — „lässt sich in einem Kubernetes-Cluster installieren\"\n \n[…]\nTest-Quellen. Cluster-Smoke bleibt für LH-AK-001/-002 echte Pflicht\nund für LH-AK-003/-004/-005/-011 ein optionales Zusatz-Attest.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): tick verifiable LH-AK items based on existing test coverage",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T18:08:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8e9e6bccef9a4c5c15d519088b61833c6206799a",
          "body": "Jede Slice-Section in der Roadmap (M1–M7) bekommt jetzt explizite\nGitHub-Markdown-Checkboxen `[x]` / `[ ]` an den Lieferziel- und\nVerifikations-Bullets. Damit sind der Done-Stand und die offenen\nPunkte auf einen Blick lesbar, ohne den Slice-Plan in done/ oder\nin-progress/ aufzumachen.\n\nGesamtstand:\n\n[…]\nmit Hinweis\n    auf den M3-§10.6-Fix, weil das Versprechen tatsächlich erst\n    mit slice-M3 eingelöst wurde (siehe Befund-Trail).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): add Definition-of-Done checkboxes to roadmap slices",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T18:04:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "42f067bda86f7cfb2c3f3b2a4b2e3cb22a0ef0d9",
          "body": "…minal idempotency, phase transitions\n\nDrei Befunde aus dem Post-Closure-Code-/Manifest-Review adressiert.\nSlice-M3-Closure-Notiz §10.6 fasst die Fixes zusammen.\n\nBefund 1 — Default-Pfad führt keinen Check aus:\n- buildSpecMap (internal/hexagon/application/reconciler.go) aktiviert\n  KubernetesVersion\n[…]\n make gates + make security-gates grün (Coverage-Schwelle\nweiterhin 0 in M3; Schnitt bewegt sich, weil ein paar Pfade dazukommen).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(application): post-closure review fixes — default activation, ter…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T17:53:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "315b5dd4dd5fe5881c983a47a1d19ccf48e2441a",
          "body": "Slice M3 Step 6 (slice-M3 §4). Alle Code-Items aus §3 sind committet,\nalle lokal verifizierbaren Abnahmekriterien aus §7 (#1–#8) grün:\n\n  gates              — build + lint (depguard AR-005 voll scharf,\n                       ireturn-Allow um Domain/Port erweitert)\n                       + test (27 T\n[…]\nuf Done für M3.\n- in-progress/README.md: Slice-M3-Zeile entfernt.\n- done/README.md: Slice-M3-Closure-Eintrag mit Datum 2026-05-17.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(plan): close slice M3 — closure note + roadmap status Done",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T17:29:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "113951d389e49c9a3b6ee91effe1dfea08ab4de7",
          "body": "…ersion (M3 §4 Steps 4-5)\n\nSlice M3 Step 4+5 (slice-M3-kubernetes-version-check.md §4)\nzusammengefasst, weil cmd-Wiring und Reconciler-Tests beide den neuen\nReconciler-Constructor brauchen.\n\nReconciler (internal/hexagon/application/reconciler.go):\n- AR-009 Phasen 1, 2 (minimal: CheckSpec.Validate), \n[…]\nr alle internal/-Pakete;\ndiscovery.go bleibt untestet, drückt aber den Schnitt nicht unter den\nM2-Stand. M6 envtest holt das nach.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(application,cmd): reconciler runs real checks + wire KubernetesV…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T17:27:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c101a1feecd14222271ca657619f8b71bfeb6711",
          "body": "…sort (M3 §4 Step 3)\n\nSlice M3 Step 3 (slice-M3-kubernetes-version-check.md §4): AR-014\nscharf in internal/hexagon/application/aggregator.go.\n\n`Aggregate(results []domain.Result, now time.Time) AggregationOutput`\nist eine reine Funktion ohne Seiteneffekt — Reconciler ruft sie nach\nCheck-Execution, d\n[…]\n\nCoverage über `internal/hexagon/application` steigt mit dem\nAggregator deutlich; `make coverage-gate` bleibt grün bei Schwelle 0.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(application): Aggregator — severity → phase + conditions dedupe/…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T17:18:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b6e0aa23206ccf26576bafb7d72caecf6be3d288",
          "body": "…Step 2)\n\nSlice M3 Step 2 (slice-M3-kubernetes-version-check.md §4): drei\nAdapter-Implementierungen, alle per Constructor-Injection wirebar.\n\ninternal/adapter/check/registry.go:\n- Map-basierter, threadsafe (sync.RWMutex) CheckRegistry per AR-013.\n- Register überschreibt bei Dup (M3-Wiring ist single\n[…]\nt\nenvtest, kommt mit M6.\n\nVerifikation: `make gates` grün (build + lint mit ireturn-allow,\ntest, coverage, doc-refs, drift-check).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(adapter): KubernetesVersion check + Registry + Discovery (M3 §4 …",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T17:15:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b39a4d332a2d5c9417ae513a814365707d08fa9f",
          "body": "…3 §4 Step 1)\n\nSlice M3 Step 1 (slice-M3-kubernetes-version-check.md §4): die reinen\nDomain-/Port-Definitionen, ohne Logik. Adapter-Implementierungen folgen\nin Step 2.\n\nDomain (internal/hexagon/domain/):\n- check.go: Severity (info/warning/critical), ConditionStatus (True/\n  False/Unknown), Result-St\n[…]\nel()\n  einsetzbar, weil reine Wertelogik.\n\n.gitkeep-Stubs in domain/ und port/ entfernt — Verzeichnisse haben\njetzt echten Inhalt.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(domain,port): Check interface + KubernetesAPI + CheckRegistry (M…",
          "author_name": "pt9912",
          "author_login": "pt9912",
          "committed_at": "2026-05-17T17:07:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 1,
      "commits_last_year": 161,
      "latest_release_at": "2026-05-20T16:08:34Z",
      "latest_release_tag": "v0.1.0",
      "releases_from_tags": false,
      "days_since_last_push": 42,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 65,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 85,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/pt9912/k-deskflight",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/pt9912/k-deskflight",
          "is_deprecated": false,
          "latest_version": "v0.1.0",
          "repository_url": "https://github.com/pt9912/k-deskflight",
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-05-20T16:06:22Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 65
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "samples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 56116,
      "source_files_sampled": 69,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 10
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 10
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2
        },
        "advisory_count": 2,
        "affected_count": 2,
        "assessed_count": 56,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/Masterminds/semver/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.4.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": true,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.19.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.1",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260317180543-43fb72c5454a",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20260210185600-b8788abfbbc2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 56,
        "direct_count": 5,
        "indirect_count": 51
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 1,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "pt9912",
          "commits": 128,
          "avatar_url": "https://avatars.githubusercontent.com/u/66826472?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "cluster-smoke.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/27 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 4,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b09363681a2ecc4570aa4bad2cb35860fc657bbe",
        "ran_at": "2026-07-25T14:03:00Z",
        "aggregate_score": 4.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-06-12T18:58:27Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-05-20T15:35:29Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/pt9912/k-deskflight",
    "host": "github.com",
    "name": "k-deskflight",
    "owner": "pt9912"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 57,
      "inputs": {
        "security": 57,
        "vitality": 56,
        "community": 40,
        "governance": 50,
        "engineering": 84
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 56,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "at_risk",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "commits_last_year": 161,
              "human_commit_share": 1,
              "days_since_last_push": 42,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 42 days ago",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 42
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "161 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 161
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.1.0",
              "releases_from_tags": false,
              "days_since_latest_release": 65,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 65 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 65
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 40,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 1,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1/1 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/27 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "followers": 2,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "pt9912",
              "public_repos": 55,
              "account_age_days": 2234
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "2 followers of pt9912",
                "points": 3.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 2,
                      "login": "pt9912"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "55 public repos, account ~6 yr old",
                "points": 24.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 55
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "good",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "packages": [
                "github.com/pt9912/k-deskflight"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 65
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 65 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 65
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "1 published versions",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 84,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "topics": [
                "cncf",
                "controller-runtime",
                "go",
                "kubernetes",
                "opendesk",
                "operator",
                "preflight",
                "prometheus",
                "sovereign-workplace"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "9 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 57,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 4.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/27 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 56 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 56
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 2,
              "affected_packages": 2,
              "assessed_packages": 56,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 56,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 67,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.79,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "79 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 79,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 56116,
              "source_files_sampled": 69,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/69 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 69,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "samples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "samples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "samples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T14:03:10.767347Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pt9912/k-deskflight.svg",
  "full_name": "pt9912/k-deskflight",
  "license_state": "standard",
  "license_spdx": "MIT"
}