Decision ledger

Petrova-hq’s own append-only decision record. Every architectural call against the control plane lands here, dated, with sign-off. Append-only per MR-7; supersession via successor doc.

Index (newest first)

2026-09-24 open — A proposal for the five MARY-REUSE questions Lane L6 left open
2026-09-23 open — 2026-09-23 — Reconcile contract drift for mary-wiki
2026-09-23 open — IR-012 burn-in: prove the cross-process wip-cap lock against two real irina-cycle.yml dispatches
2026-09-22 open — RALPH consumption v2: refresh against rocky-hq’s real phase, re-scope the deferred HTTP source
2026-09-22 closed — Profile→tier-ceiling mapping ratified — min-of-both’s other half
2026-09-22 closed — Mímir reconciliation: scoping, not ratifying — what has to be decided before it grows further
2026-09-22 open — eva.consumption.v1 vendor schema widened for failing status and observed field/length drift
2026-09-22 open — ARES registry reclassification — required → optional/not_applicable across 8 repos
2026-09-22 open — ARES disposition — formally deprecated, plumbing stays dormant
2026-09-15 closed — petrova.irina.trigger gets AT3, matching petrova.sweeps.trigger’s own precedent
2026-09-15 closed — IR-017 — IRINA secret-scope review + cycle-artifact/history retention policy
2026-09-14 closed — IR-004 — irina-cycle.yml goes write-capable, hermes-only, one verb
2026-09-14 closed — IR-003 — findings retrofit scope: fix forward from the convention date, no mandated bulk retrofit
2026-09-14 closed — IR-002 step 4 — seam-tier assignment for the 13 remaining write verbs
2026-09-13 closed — IR-012 — cross-process WIP-cap lease, shipped opt-in behind PETROVA_WIP_CAP_CROSS_PROCESS_LOCK
2026-09-13 closed — A disposable fixture repo, petrova-codes/wip-cap-fixture, for IR-007’s real WIP-cap E2E test — cross-runner locking scoped out to a follow-up
2026-09-12 closed — The verb registry gains a seamTier carrier field — IR-002 step 2, blocked on step 1’s ratification
2026-09-12 closed — Seam-class taxonomy, assignment authority, and profile composition
2026-09-11 closed — IRINA scope: MIS-SCOPED, re-scoped to closure-engine question
2026-09-11 closed — Findings get an explicit Status line, symmetric with decisions
2026-09-10 open — petrova.cupel.trace_status — read-only tool scope
2026-09-05 closed — # Countersign is a recognized synonym for ## Sign-off
2026-09-05 closed — ratified is recognized as MR-7’s closed-equivalent, grandfathered where it predates Sign-off
2026-09-05 open — Proxy countersign is retired — human countersign means a commit authored by the human
2026-09-05 closed — accepted/published/resolved map to closed-equivalent; proposed maps to open
2026-09-04 open — 2026-09-04-scheduled-workflow-digest-wired
2026-09-04 open — 2026-09-04-main-red-alert-webhook-wired
2026-08-31 closed — The host ignore step skipped on author, and dropped three registry deploys
2026-08-31 closed — Preview builds were never guarded, and the fix is the fork point
2026-08-31 closed — petrova-host production deploys move to the deploy hook
2026-08-28 open — Phase integrity has no milestone
2026-08-28 open — The write probe’s first green campaign
2026-08-28 open — Admission of a fleet identity to petrova-canary
2026-08-28 open — 2026-08-28 — Edit registry for console
2026-08-28 open — 2026-08-28 — Register consumer console
2026-08-27 open — P3 verification round — Part A re-evidenced against merged main 71195501
2026-08-25 open — What each deployed surface carries
2026-08-25 open — PTV-SCF-0001 P3 — verification round (G-02)
2026-08-25 open — 2026-08-25 — Reconcile contract drift for null0-toll
2026-08-25 open — A local run may not write state/
2026-08-18 open — Retire PROJECT.xml warning W1; keep name-and-URL citation as a style rule
2026-08-18 open — 2026-08-18 — Edit registry for null0-toll
2026-08-18 open — 2026-08-18 — Register consumer null0-toll
2026-08-18 open — Tenants live in a new tenants.yaml in panto-cloud-hq, not in registry.yaml
2026-08-18 open — The proposal store is a separate repo from published state
2026-08-18 open — Harvest authenticates as a new panto-observer GitHub App via a token broker, never a PAT
2026-08-18 open — There is no break-glass force-publish of a validation-failed state
2026-08-17 open — Why this is written before the sweep, not during it
2026-08-17 open — 2026-08-17 — Backfill contract_sha for traceo-mcp-server
2026-08-17 open — Disclosure first: this is not a pre-registration
2026-08-17 open — Why this is a separate decision and not an amendment
2026-08-16 open — The n8n close-out: what it covers, what it excludes, and what authority the register carries
2026-08-16 open — N8N-05: the two discharge paths for PTV-SR-0015 qualification 1, costed — an unsigned ruling for FLIGHT
2026-08-15 open — PTV-SCF-0001 P3 · C0 — canary registered and credential scoped, G-P3-1 PASS
2026-08-15 open — A proxy countersign is permitted, and must be legible as one in the tick
2026-08-15 open — N-01’s alert budgets are separate from the console’s display threshold
2026-08-15 open — The canary is public, so its non-merge boundary is enforced by the repository
2026-08-14 open — PTV-SCF-0001 P3 — phase open
2026-08-13 open — Waiver — PTV-SCF-0001 P2 · G-P2-2 and G-P2-3
2026-08-13 open — PTV-SCF-0001 P2 — verification round
2026-08-13 open — PTV-SCF-0001 P2 — phase open
2026-08-13 open — PTV-SCF-0001 P2 — phase close
2026-08-13 open — PTV-SCF-0001 P2 · C4 — proposed DR-block allocation and per-slug ownership ledger
2026-08-13 open — PTV-SCF-0001 P2 · C3 — gate G4 implemented
2026-08-13 open — PTV-SCF-0001 P2 · C2 — the eight golden prompts as skills
2026-08-13 open — The shape of an acceptance-gate waiver
2026-08-12 closed — The requirement tree has four roots, not two — admit PTV-SR-0003, 0004, 0009 and 0011 as premises
2026-08-12 open — The automation plane gets its own token, and the host enforces the boundary
2026-08-12 open — pwplz is the write-probe canary — WITHDRAWN, do not countersign
2026-08-12 open — The canary is a purpose-built repo, not a borrowed one
2026-08-12 closed — Ratify PTV-SR-0015 — the automation plane is an observer and composer, never a mutator
2026-08-12 closed — PTV-SCF-0001 P1 — verification round
2026-08-12 closed — PTV-SCF-0001 P1 — phase close
2026-08-12 open — 2026-08-12 — Edit registry for sparki-tools
2026-08-12 open — 2026-08-12 — Edit registry for sparki-tools
2026-08-11 open — 2026-08-11 — Record contract_sha for tektree-io
2026-08-11 open — 2026-08-11 — Edit registry for tektree-io
2026-08-11 open — CAIRN delivery authenticates with the service trust path, not client_credentials
2026-08-10 open — A refusal is a precondition failure, so retry semantics are derived and not ruled per-code
2026-08-10 open — The machine surface is bound to its sources, and petrova.codes is where artefacts live
2026-08-10 open — A pending human countersign keeps a decision open
2026-08-10 open — A stale cli/dist is a build failure, not an operator’s problem
2026-08-10 open — Airtable is retired fleet-wide; DSN Postgres is the structured-data substrate
2026-08-06 closed — The state sweep prunes state files no registry entry can refresh
2026-08-06 open — petrova.host is re-rooted to the console: a public shell at the apex, detail behind airlock
2026-08-06 open — petrova.blue is the apex, and it ships as a fourth surface in this repo
2026-08-06 closed — The petrova.blog version band is bound to its sources, not written down
2026-08-06 closed — adr-emitter kebab-cases the verb segment; three existing ADRs renamed
2026-08-05 closed — last_full_sweep is a liveness heartbeat; stale threshold drops to 2h
2026-08-04 open — 2026-08-04 — Edit registry for mary-wiki
2026-08-03 open — 2026-08-03 — Edit registry for mary-wiki
2026-08-03 open — 2026-08-03 — Add default_branch to the mary-wiki registry entry
2026-08-03 open — 2026-08-03 — Backfill contract_sha for mary-wiki
2026-08-03 open — 2026-08-03 — Admit petrova-codes/templates to the registry
2026-08-03 open — 2026-08-03 — Admit mary-wiki to the registry as a placeholder
2026-08-01 open — 2026-08-01 — Promote arno-host scaffold → experimental
2026-07-29 open — 2026-07-29 — Register consumer bhava-blue
2026-07-29 open — 2026-07-29 — Register consumer arno-host
2026-07-28 open — Canonicalize the PETROVA governance model
2026-07-28 open — Cosign auto-merge opt-out from the MR-12 control-plane firewall
2026-07-14 open — Publish a spec-compliant MCP endpoint, and collapse the tool registry to one source
2026-07-07 open — Register the SO1 Rover automation product (so1-console)
2026-07-07 open — 2026-07-07 — Edit registry for so1-console
2026-07-07 open — P2 council pipeline is GRACE-governed: STRATT owns, ZOID consumes via GRACE
2026-07-07 open — Neverland — a fleet integration tier above per-repo north stars
2026-07-07 open — E9 STRATT federation is blocked on a STRATT read surface
2026-07-07 superseded — Consumption v1: promote RALPH queue; defer the HTTP source modality
2026-06-05 open — Add the daedalus_distribute verb
2026-05-24 open — Register hermes slug into petrova-codes registry
2026-05-24 superseded — petrova cairnet-onboard --wire-keys (“D”)
2026-05-24 open — 2026-05-24 — Edit registry for hermes
2026-05-24 open — HATCH bulk agent-key issuance (“A”)
2026-05-24 open — 2026-05-24 — Correct hermes contract_sha to git-blob-sha1; surface substrate inconsistency
2026-05-24 open — cairnet-provision-keys verb + airlock provisioning-key class (“D’”)
2026-05-21 open — Rename registry slug nestr-tools → nestr; repoint URL to umbrella monorepo
2026-05-20 open — 2026-05-20-traceo-optional-deferral
2026-05-18 open — Cairnet bridge principal binding — canonical value is agent:petrova-cairnet-bridge
2026-05-18 open — Agentic-emission schema versioning — additive-only evolution + frozen canonical projection as integrity anchor
2026-05-16 open — 2026-05-16 — Playbook prompts resolve siblings via Fleet MCP, not filesystem paths
2026-05-15 open — 2026-05-15 — Edit registry for choco-hq
2026-05-14 open — 2026-05-14-prompt-service-architecture
2026-05-14 open — 2026-05-14 — META-RULES authoring migrates into eva-hq
2026-05-13 open — 2026-05-13-petrova-onboarding-flow-v2
2026-05-13 open — 2026-05-13 — petrova.codes content partition
2026-05-13 open — 2026-05-13 — petrova.codes build plan and stack decision
2026-05-13 open — 2026-05-13-petrova-baseline-v4
2026-05-13 open — 2026-05-13-petrova-baseline-v3
2026-05-13 open — 2026-05-13-petrova-baseline-v2
2026-05-13 superseded — 2026-05-13-petrova-baseline-v1
2026-05-13 open — 2026-05-13-outranks-default-convention
2026-05-13 open — Decision: ratify MR-16 and add MR-17 to META-RULES.md
2026-05-13 open — 2026-05-13-host-multi-installation-app-auth
2026-05-13 open — 2026-05-13-host-installation-auto-discovery
2026-05-13 open — Cross-platform navigation contract for petrova.{host,codes,blog}
2026-05-12 open — 2026-05-12-ares-phase1-gate-review
2026-05-10 closed — 2026-05-10 — Phase transitions derived from decision-doc history; KAHN placeholder retired
2026-05-10 closed — 2026-05-10 — TASKSET 6 — Operator ergonomics
2026-05-10 closed — 2026-05-10 — TASKSET 5b-ii — open_decision form on /console (eight verbs over HTTP)
2026-05-10 closed — 2026-05-10 — TASKSET 5a — petrova-act activated
2026-05-10 closed — 2026-05-10 — Govern smo1-io at the org level only; deregister 8 sub-repos
2026-05-10 open — Move /rpc into Astro; one function owns /api/**
2026-05-10 open — 2026-05-10 — Phase-aware governance UI (TASKSET 3)
2026-05-10 open — 2026-05-10 — Per-user auth via Airlock cross-apex handoff (TASKSET 4)
2026-05-10 closed — 2026-05-10 — Phase 8: server-side governance audit (MR-4, MR-7, MR-10)
2026-05-10 open — TASKSET 2 — completed governance audit (MR-1, MR-3, MR-5, MR-8, MR-12, MR-13)
2026-05-10 open — TASKSET 1 — sweeper-derived needs_human and ci_status signals
2026-05-10 closed — 2026-05-10 — Resync registry contract_sha pointers (6 repos)
2026-05-09 closed — 2026-05-09 — petrova.host v1 — fleet dashboard
2026-05-09 closed — 2026-05-09 — petrova.host v0 launch (Fleet MCP server live on Railway)
2026-05-09 open — Dashboard a11y — aria-current, faint-text contrast, decision-body markdown rendering
2026-05-08 open — 2026-05-08 — Onboard smo1-io (meta + 8 sub-repos) to the petrova line
2026-05-08 open — 2026-05-08 — Onboard skyflow-hq to the petrova line
2026-05-08 open — 2026-05-08 — Petrova brand pivot to host / codes / blog
2026-05-08 open — 2026-05-08 — GitHub org rename petrova-hq → petrova-codes
2026-05-08 open — Adopt eva.consumption.v1 in petrova-hq
2026-05-06 open — Sub-project G — rocky-hq + eva-hq surface ratification
2026-05-06 closed — Sub-project G — closure (G.1 + G.2 + G.3 ratified)
2026-05-06 open — Sub-project F — petrova contract bootstrap backfill
2026-05-06 closed — ROCKY ownership transfer (LORE+CAIRNET) and EVA introduction
2026-05-01 open — Decision: adopt Traceo + Ariel wiring + ratify applicability for 5 repos
2026-05-01 open — 2026-05-01-lore-cairnet-wire-adoption
2026-05-01 open — Defer governance enforcement of contract_committers + integrations_applicability to sub-project G
2026-05-01 open — Decision: adopt CRUMB wiring + ratify applicability for 2 repos (conservative)
2026-05-01 open — Decision: adopt ARES wiring + ratify applicability for 6 repos
2026-04-30 open — Decision: add MR-13, MR-14, MR-15 for the integration spine
2026-04-30 open — Decision: petrova-hq canary self-entry — all integrations not_applicable
2026-04-29 closed — Petrova evolves into a control plane with a thin centre

Conventions

Filenames: YYYY-MM-DD-<slug>.md. Status field: open/closed/superseded. Closed docs are not edited; supersession is via a new dated doc with Supersedes: pointer.