Preparing the repo to go public (ADR-0007): - CI: kernel-build moves from the self-hosted runner to ubuntu-latest (installs its own cross toolchain + qemu, caches the pristine tarball). On a public repo a registered self-hosted runner is reachable from approved fork-PR workflows — i.e. arbitrary code on private infrastructure — and the build never actually needed the SDK host. ADR-0004 marked superseded-in-part; docs/ci-cd.md rewritten (site specifics now live only in the private deployment log). - Licensing: LICENSE gains the GPL-2.0 carve-out for patches/ and the kernel source excerpts (Linux derivatives; per-driver provenance was already tracked in PROVENANCE.md); patches/README.md states it too. - Scrubbed from the tip: bench-unit dev credentials and its gadget IP (m2-boot notes), the site AP SSID+BSSID and a neighboring AP's BSSID and the device WLAN MAC (wifi bring-up evidence — BSSIDs are geolocatable), the runner mesh IP. NOTE: these remain in git history; decision on a pre-publication history rewrite is separate. - Emoji cleanup across 21 tracked files (kernel port docs, review report, enforce-mcdc.sh) per repo text conventions: status marks became [x]/[wip]/[ ]/OK plain text. - "[maintainer]-gated" process phrasing normalized to "maintainer-gated" (attributions in dated evidence docs kept). Verified: zero emojis tracked; scrub grep clean; patches carry no internal references; ci.yml parses; shellcheck unchanged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018HUayid7W5w7jBdb9Rrj1K
21 lines
974 B
Markdown
21 lines
974 B
Markdown
# ADR 0003 — warden-sdk is a standalone repo
|
|
|
|
**Status:** Accepted (2026-08-25).
|
|
|
|
## Context
|
|
Our real SDK changes lived as uncommitted edits in a 2GB opaque vendor fork, with
|
|
no CI, tests, or versioning of their own. The SDK requirement (future-features-2
|
|
§SDK) calls for "its own repo, held to firmware standards."
|
|
|
|
## Decision
|
|
A **private** `bfe-noah/warden-sdk` GitHub repo, standalone from day one with its own
|
|
CI/versioning. Work lands on a `bringup` branch; the first commit to `main` is gated
|
|
on a passing code-review-harness run, green CI, and the maintainer's fresh explicit go-ahead.
|
|
|
|
## Consequences
|
|
- flare-edge consumes warden-sdk later (flared depending on `warden-sim`, drivers
|
|
built from here) — a separate, maintainer-gated integration step; flare-edge is not
|
|
edited by the SDK-completion effort.
|
|
- Private for now (references bench devices / in-progress hardening); can be opened
|
|
later once scrubbed, matching how `flare-deployment` is handled.
|