From bbb8339b505ff2a2f15bebb2f0d4cbd5253e3f92 Mon Sep 17 00:00:00 2001 From: omit-test Date: Tue, 5 May 2026 23:06:53 +0200 Subject: [PATCH 1/4] chore(openspec): park 9 modules-side runtime companions Mirror the core-side parking decision (specfact-cli PR #551) by moving nine modules-side runtime proposals into openspec/parking-lot/. A module runtime cannot land before the core contracts it implements, so these nine proposals are pinned to whatever signal un-parks the core side. Parked: - enterprise-01-module-policy-client (paired core: enterprise-01) - enterprise-02-module-audit-client (paired core: enterprise-02) - finops-01-module-cost-outcome (paired core: finops-01) - knowledge-01-module-memory-runtime (paired core: knowledge-01) - knowledge-02-module-writeback (paired core: knowledge-02) - review-resiliency-01-module (paired core: review-resiliency-01) - security-01-module-sast-sca-secret (paired core: security-01) - security-02-module-license-compliance (paired core: security-02 license) - security-03-module-pii-gdpr-eu (paired core: security-02 GDPR) architecture-02-module-well-architected stays active because its core counterpart is gated (waiting on architecture-01 to ship + 1 usage cycle), not parked. Active changes drop from 33 to 24. CHANGE_ORDER.md collapses the five-pillar runtime table to the single architecture row plus a pointer to parking-lot/README.md for the parked nine and their un-park triggers. Co-Authored-By: Claude Opus 4.7 --- openspec/CHANGE_ORDER.md | 15 ++--- openspec/parking-lot/README.md | 56 +++++++++++++++++++ .../.openspec.yaml | 0 .../design.md | 0 .../proposal.md | 0 .../specs/enterprise-policy-client/spec.md | 0 .../tasks.md | 0 .../.openspec.yaml | 0 .../design.md | 0 .../proposal.md | 0 .../specs/enterprise-audit-client/spec.md | 0 .../tasks.md | 0 .../.openspec.yaml | 0 .../finops-01-module-cost-outcome/design.md | 0 .../finops-01-module-cost-outcome/proposal.md | 0 .../specs/finops-cost-outcome-module/spec.md | 0 .../finops-01-module-cost-outcome/tasks.md | 0 .../.openspec.yaml | 0 .../design.md | 0 .../proposal.md | 0 .../specs/knowledge-memory-runtime/spec.md | 0 .../tasks.md | 0 .../.openspec.yaml | 0 .../knowledge-02-module-writeback/design.md | 0 .../knowledge-02-module-writeback/proposal.md | 0 .../specs/knowledge-writeback/spec.md | 0 .../knowledge-02-module-writeback/tasks.md | 0 .../.openspec.yaml | 0 .../review-resiliency-01-module/design.md | 0 .../review-resiliency-01-module/proposal.md | 0 .../specs/review-resiliency-module/spec.md | 0 .../review-resiliency-01-module/tasks.md | 0 .../.openspec.yaml | 0 .../design.md | 0 .../proposal.md | 0 .../security-sast-sca-secret-module/spec.md | 0 .../tasks.md | 0 .../.openspec.yaml | 0 .../design.md | 0 .../proposal.md | 0 .../specs/license-compliance-module/spec.md | 0 .../tasks.md | 0 .../.openspec.yaml | 0 .../security-03-module-pii-gdpr-eu/design.md | 0 .../proposal.md | 0 .../specs/privacy-gdpr-module/spec.md | 0 .../security-03-module-pii-gdpr-eu/tasks.md | 0 47 files changed, 61 insertions(+), 10 deletions(-) create mode 100644 openspec/parking-lot/README.md rename openspec/{changes => parking-lot}/enterprise-01-module-policy-client/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/enterprise-01-module-policy-client/design.md (100%) rename openspec/{changes => parking-lot}/enterprise-01-module-policy-client/proposal.md (100%) rename openspec/{changes => parking-lot}/enterprise-01-module-policy-client/specs/enterprise-policy-client/spec.md (100%) rename openspec/{changes => parking-lot}/enterprise-01-module-policy-client/tasks.md (100%) rename openspec/{changes => parking-lot}/enterprise-02-module-audit-client/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/enterprise-02-module-audit-client/design.md (100%) rename openspec/{changes => parking-lot}/enterprise-02-module-audit-client/proposal.md (100%) rename openspec/{changes => parking-lot}/enterprise-02-module-audit-client/specs/enterprise-audit-client/spec.md (100%) rename openspec/{changes => parking-lot}/enterprise-02-module-audit-client/tasks.md (100%) rename openspec/{changes => parking-lot}/finops-01-module-cost-outcome/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/finops-01-module-cost-outcome/design.md (100%) rename openspec/{changes => parking-lot}/finops-01-module-cost-outcome/proposal.md (100%) rename openspec/{changes => parking-lot}/finops-01-module-cost-outcome/specs/finops-cost-outcome-module/spec.md (100%) rename openspec/{changes => parking-lot}/finops-01-module-cost-outcome/tasks.md (100%) rename openspec/{changes => parking-lot}/knowledge-01-module-memory-runtime/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/knowledge-01-module-memory-runtime/design.md (100%) rename openspec/{changes => parking-lot}/knowledge-01-module-memory-runtime/proposal.md (100%) rename openspec/{changes => parking-lot}/knowledge-01-module-memory-runtime/specs/knowledge-memory-runtime/spec.md (100%) rename openspec/{changes => parking-lot}/knowledge-01-module-memory-runtime/tasks.md (100%) rename openspec/{changes => parking-lot}/knowledge-02-module-writeback/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/knowledge-02-module-writeback/design.md (100%) rename openspec/{changes => parking-lot}/knowledge-02-module-writeback/proposal.md (100%) rename openspec/{changes => parking-lot}/knowledge-02-module-writeback/specs/knowledge-writeback/spec.md (100%) rename openspec/{changes => parking-lot}/knowledge-02-module-writeback/tasks.md (100%) rename openspec/{changes => parking-lot}/review-resiliency-01-module/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/review-resiliency-01-module/design.md (100%) rename openspec/{changes => parking-lot}/review-resiliency-01-module/proposal.md (100%) rename openspec/{changes => parking-lot}/review-resiliency-01-module/specs/review-resiliency-module/spec.md (100%) rename openspec/{changes => parking-lot}/review-resiliency-01-module/tasks.md (100%) rename openspec/{changes => parking-lot}/security-01-module-sast-sca-secret/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/security-01-module-sast-sca-secret/design.md (100%) rename openspec/{changes => parking-lot}/security-01-module-sast-sca-secret/proposal.md (100%) rename openspec/{changes => parking-lot}/security-01-module-sast-sca-secret/specs/security-sast-sca-secret-module/spec.md (100%) rename openspec/{changes => parking-lot}/security-01-module-sast-sca-secret/tasks.md (100%) rename openspec/{changes => parking-lot}/security-02-module-license-compliance/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/security-02-module-license-compliance/design.md (100%) rename openspec/{changes => parking-lot}/security-02-module-license-compliance/proposal.md (100%) rename openspec/{changes => parking-lot}/security-02-module-license-compliance/specs/license-compliance-module/spec.md (100%) rename openspec/{changes => parking-lot}/security-02-module-license-compliance/tasks.md (100%) rename openspec/{changes => parking-lot}/security-03-module-pii-gdpr-eu/.openspec.yaml (100%) rename openspec/{changes => parking-lot}/security-03-module-pii-gdpr-eu/design.md (100%) rename openspec/{changes => parking-lot}/security-03-module-pii-gdpr-eu/proposal.md (100%) rename openspec/{changes => parking-lot}/security-03-module-pii-gdpr-eu/specs/privacy-gdpr-module/spec.md (100%) rename openspec/{changes => parking-lot}/security-03-module-pii-gdpr-eu/tasks.md (100%) diff --git a/openspec/CHANGE_ORDER.md b/openspec/CHANGE_ORDER.md index fe7e171..7c2f4b0 100644 --- a/openspec/CHANGE_ORDER.md +++ b/openspec/CHANGE_ORDER.md @@ -85,18 +85,13 @@ These changes are the modules-side runtime companions to split core governance a These changes are the modules-side runtime companions to the five-pillar governance wave in `specfact-cli`. Core remains authoritative for schemas, scoring, resolution semantics, and shared report contracts; this repo owns the runnable bundle packages, manifests, and packaged tool integrations. +**Most of this wave is paused.** The core counterparts for FinOps, knowledge, review-resiliency, security, and enterprise have been parked in `specfact-cli` (see [core PR #551](https://github.com/nold-ai/specfact-cli/pull/551)). The corresponding nine modules-side proposals have been moved to [`openspec/parking-lot/`](parking-lot/) until their core contracts are un-parked. See [`parking-lot/README.md`](parking-lot/README.md) for the full mapping and un-park triggers. + +The architecture pillar remains active because `architecture-02-well-architected-review` in core is gated (waiting on `architecture-01` to ship and be used for one cycle), not parked. + | Module | Order | Change folder | GitHub # | Blocked by | |--------|-------|---------------|----------|------------| -| telemetry + finops | 01 | finops-01-module-cost-outcome | [#223](https://github.com/nold-ai/specfact-cli-modules/issues/223) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#220](https://github.com/nold-ai/specfact-cli-modules/issues/220); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); paired core changes `telemetry-01-opentelemetry-default-on` and `finops-01-telemetry-and-outcomes` | -| knowledge | 02 | knowledge-01-module-memory-runtime | [#224](https://github.com/nold-ai/specfact-cli-modules/issues/224) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#221](https://github.com/nold-ai/specfact-cli-modules/issues/221); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); paired core change `knowledge-01-distillation-engine`; uses default markdown-graph runtime | -| review | 03 | review-resiliency-01-module | [#226](https://github.com/nold-ai/specfact-cli-modules/issues/226) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#217](https://github.com/nold-ai/specfact-cli-modules/issues/217); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); paired core change `review-resiliency-01-contracts`; optional evidence hooks depend on `knowledge-01-module-memory-runtime` | -| security | 03 | security-01-module-sast-sca-secret | [#227](https://github.com/nold-ai/specfact-cli-modules/issues/227) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#218](https://github.com/nold-ai/specfact-cli-modules/issues/218); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); paired core change `security-01-unified-findings-model`; shared policy semantics from `policy-02-packs-and-modes` | -| architecture | 03 | architecture-02-module-well-architected | [#230](https://github.com/nold-ai/specfact-cli-modules/issues/230) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#219](https://github.com/nold-ai/specfact-cli-modules/issues/219); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); paired core change `architecture-02-well-architected-review`; boundary rules align with `ALLOWED_IMPORTS.md` | -| security | 04 | security-02-module-license-compliance | [#228](https://github.com/nold-ai/specfact-cli-modules/issues/228) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#218](https://github.com/nold-ai/specfact-cli-modules/issues/218); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); `security-01-module-sast-sca-secret`; paired core changes `security-01-unified-findings-model` and shared policy semantics | -| security | 05 | security-03-module-pii-gdpr-eu | [#229](https://github.com/nold-ai/specfact-cli-modules/issues/229) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#218](https://github.com/nold-ai/specfact-cli-modules/issues/218); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); `security-01-module-sast-sca-secret`; paired core changes `security-01-unified-findings-model` and `security-02-eu-gdpr-baseline` | -| knowledge | 06 | knowledge-02-module-writeback | [#225](https://github.com/nold-ai/specfact-cli-modules/issues/225) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#221](https://github.com/nold-ai/specfact-cli-modules/issues/221); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); `knowledge-01-module-memory-runtime`; paired core change `knowledge-02-preflight-context-assembly` | -| enterprise | 09 | enterprise-01-module-policy-client | [#231](https://github.com/nold-ai/specfact-cli-modules/issues/231) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#222](https://github.com/nold-ai/specfact-cli-modules/issues/222); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); paired core change `enterprise-01-policy-resolution-extension`; depends on prior five-pillar runtime bundles being available for policy application targets | -| enterprise | 10 | enterprise-02-module-audit-client | [#232](https://github.com/nold-ai/specfact-cli-modules/issues/232) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#222](https://github.com/nold-ai/specfact-cli-modules/issues/222); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); `enterprise-01-module-policy-client`; paired core change `enterprise-02-rbac-and-audit-trail` | +| architecture | 03 | architecture-02-module-well-architected | [#230](https://github.com/nold-ai/specfact-cli-modules/issues/230) | Parent Epic: [#216](https://github.com/nold-ai/specfact-cli-modules/issues/216); Parent Feature: [#219](https://github.com/nold-ai/specfact-cli-modules/issues/219); core umbrella [specfact-cli#511](https://github.com/nold-ai/specfact-cli/issues/511); paired core change `architecture-02-well-architected-review` (gated on `architecture-01-solution-layer` shipping + 1 usage cycle); boundary rules align with `ALLOWED_IMPORTS.md` | ### Code review and sidecar validation improvements diff --git a/openspec/parking-lot/README.md b/openspec/parking-lot/README.md new file mode 100644 index 0000000..7d4467d --- /dev/null +++ b/openspec/parking-lot/README.md @@ -0,0 +1,56 @@ +# Parking Lot (modules side) + +These module-runtime change proposals are **paused, not abandoned**, because +their core-side counterparts in `nold-ai/specfact-cli` have been parked. A +module runtime cannot land before the core contracts it implements, so these +nine proposals are pinned to whatever signal un-parks the core side. + +For background and the parent triage rationale, see: + +- Core PR: +- Core parking-lot README: + +## Restoration policy + +A modules-side proposal can be returned to `openspec/changes/` only after: + +1. The core counterpart has itself been un-parked (i.e. moved back into + `nold-ai/specfact-cli/openspec/changes/`). +2. The current core API surface has been re-validated against this module's + proposal — six months of drift may have invalidated assumptions. +3. The directory is moved back under `openspec/changes/` here, and + `openspec validate ` passes. + +## Contents and un-park triggers + +| Modules change | Paired core change | GH issue | Un-park trigger | +|---|---|---|---| +| `enterprise-01-module-policy-client` | `enterprise-01-policy-resolution-extension` | [#231](https://github.com/nold-ai/specfact-cli-modules/issues/231) | Core enterprise-01 un-parked | +| `enterprise-02-module-audit-client` | `enterprise-02-rbac-and-audit-trail` | [#232](https://github.com/nold-ai/specfact-cli-modules/issues/232) | Core enterprise-02 un-parked | +| `finops-01-module-cost-outcome` | `finops-01-telemetry-and-outcomes` | [#223](https://github.com/nold-ai/specfact-cli-modules/issues/223) | Core finops-01 un-parked | +| `knowledge-01-module-memory-runtime` | `knowledge-01-distillation-engine` | [#224](https://github.com/nold-ai/specfact-cli-modules/issues/224) | Core knowledge-01 un-parked | +| `knowledge-02-module-writeback` | `knowledge-02-preflight-context-assembly` | [#225](https://github.com/nold-ai/specfact-cli-modules/issues/225) | Core knowledge-02 un-parked | +| `review-resiliency-01-module` | `review-resiliency-01-contracts` | [#226](https://github.com/nold-ai/specfact-cli-modules/issues/226) | Core review-resiliency-01 un-parked | +| `security-01-module-sast-sca-secret` | `security-01-unified-findings-model` | [#227](https://github.com/nold-ai/specfact-cli-modules/issues/227) | Core security-01 un-parked | +| `security-02-module-license-compliance` | `security-02-eu-gdpr-baseline` (license aspect) | [#228](https://github.com/nold-ai/specfact-cli-modules/issues/228) | Core security-02 un-parked | +| `security-03-module-pii-gdpr-eu` | `security-02-eu-gdpr-baseline` (GDPR aspect) | [#229](https://github.com/nold-ai/specfact-cli-modules/issues/229) | Core security-02 un-parked | + +## Not parked here (still active) + +The following modules-side proposals remain in `openspec/changes/` because +their core counterparts are still active or in the core repo's modify queue: + +- `architecture-01-solution-layer` *(paired core: active)* +- `architecture-02-module-well-architected` *(paired core: gated, not parked)* +- `requirements-02-module-commands`, `requirements-03-backlog-sync` +- `traceability-01-index-and-orphans`, `validation-02-full-chain-engine` +- `governance-01-evidence-output`, `governance-02-exception-management` +- `policy-02-packs-and-modes`, `sync-01-unified-kernel`, + `ceremony-02-requirements-aware-output` +- `openspec-01-intent-trace` *(paired core: in modify queue, will be trimmed)* +- All `backlog-*` and `docs-*` changes +- `marketplace-07-pr-auto-sign-updates` *(already complete, archive pending)* +- `codebase-import-runtime-hardening`, `project-runtime-01-safe-artifact-write-policy` + +The core marketplace-06 work (`marketplace-06-ci-module-signing`) was already +archived here on 2026-04-16 — no parking action needed. diff --git a/openspec/changes/enterprise-01-module-policy-client/.openspec.yaml b/openspec/parking-lot/enterprise-01-module-policy-client/.openspec.yaml similarity index 100% rename from openspec/changes/enterprise-01-module-policy-client/.openspec.yaml rename to openspec/parking-lot/enterprise-01-module-policy-client/.openspec.yaml diff --git a/openspec/changes/enterprise-01-module-policy-client/design.md b/openspec/parking-lot/enterprise-01-module-policy-client/design.md similarity index 100% rename from openspec/changes/enterprise-01-module-policy-client/design.md rename to openspec/parking-lot/enterprise-01-module-policy-client/design.md diff --git a/openspec/changes/enterprise-01-module-policy-client/proposal.md b/openspec/parking-lot/enterprise-01-module-policy-client/proposal.md similarity index 100% rename from openspec/changes/enterprise-01-module-policy-client/proposal.md rename to openspec/parking-lot/enterprise-01-module-policy-client/proposal.md diff --git a/openspec/changes/enterprise-01-module-policy-client/specs/enterprise-policy-client/spec.md b/openspec/parking-lot/enterprise-01-module-policy-client/specs/enterprise-policy-client/spec.md similarity index 100% rename from openspec/changes/enterprise-01-module-policy-client/specs/enterprise-policy-client/spec.md rename to openspec/parking-lot/enterprise-01-module-policy-client/specs/enterprise-policy-client/spec.md diff --git a/openspec/changes/enterprise-01-module-policy-client/tasks.md b/openspec/parking-lot/enterprise-01-module-policy-client/tasks.md similarity index 100% rename from openspec/changes/enterprise-01-module-policy-client/tasks.md rename to openspec/parking-lot/enterprise-01-module-policy-client/tasks.md diff --git a/openspec/changes/enterprise-02-module-audit-client/.openspec.yaml b/openspec/parking-lot/enterprise-02-module-audit-client/.openspec.yaml similarity index 100% rename from openspec/changes/enterprise-02-module-audit-client/.openspec.yaml rename to openspec/parking-lot/enterprise-02-module-audit-client/.openspec.yaml diff --git a/openspec/changes/enterprise-02-module-audit-client/design.md b/openspec/parking-lot/enterprise-02-module-audit-client/design.md similarity index 100% rename from openspec/changes/enterprise-02-module-audit-client/design.md rename to openspec/parking-lot/enterprise-02-module-audit-client/design.md diff --git a/openspec/changes/enterprise-02-module-audit-client/proposal.md b/openspec/parking-lot/enterprise-02-module-audit-client/proposal.md similarity index 100% rename from openspec/changes/enterprise-02-module-audit-client/proposal.md rename to openspec/parking-lot/enterprise-02-module-audit-client/proposal.md diff --git a/openspec/changes/enterprise-02-module-audit-client/specs/enterprise-audit-client/spec.md b/openspec/parking-lot/enterprise-02-module-audit-client/specs/enterprise-audit-client/spec.md similarity index 100% rename from openspec/changes/enterprise-02-module-audit-client/specs/enterprise-audit-client/spec.md rename to openspec/parking-lot/enterprise-02-module-audit-client/specs/enterprise-audit-client/spec.md diff --git a/openspec/changes/enterprise-02-module-audit-client/tasks.md b/openspec/parking-lot/enterprise-02-module-audit-client/tasks.md similarity index 100% rename from openspec/changes/enterprise-02-module-audit-client/tasks.md rename to openspec/parking-lot/enterprise-02-module-audit-client/tasks.md diff --git a/openspec/changes/finops-01-module-cost-outcome/.openspec.yaml b/openspec/parking-lot/finops-01-module-cost-outcome/.openspec.yaml similarity index 100% rename from openspec/changes/finops-01-module-cost-outcome/.openspec.yaml rename to openspec/parking-lot/finops-01-module-cost-outcome/.openspec.yaml diff --git a/openspec/changes/finops-01-module-cost-outcome/design.md b/openspec/parking-lot/finops-01-module-cost-outcome/design.md similarity index 100% rename from openspec/changes/finops-01-module-cost-outcome/design.md rename to openspec/parking-lot/finops-01-module-cost-outcome/design.md diff --git a/openspec/changes/finops-01-module-cost-outcome/proposal.md b/openspec/parking-lot/finops-01-module-cost-outcome/proposal.md similarity index 100% rename from openspec/changes/finops-01-module-cost-outcome/proposal.md rename to openspec/parking-lot/finops-01-module-cost-outcome/proposal.md diff --git a/openspec/changes/finops-01-module-cost-outcome/specs/finops-cost-outcome-module/spec.md b/openspec/parking-lot/finops-01-module-cost-outcome/specs/finops-cost-outcome-module/spec.md similarity index 100% rename from openspec/changes/finops-01-module-cost-outcome/specs/finops-cost-outcome-module/spec.md rename to openspec/parking-lot/finops-01-module-cost-outcome/specs/finops-cost-outcome-module/spec.md diff --git a/openspec/changes/finops-01-module-cost-outcome/tasks.md b/openspec/parking-lot/finops-01-module-cost-outcome/tasks.md similarity index 100% rename from openspec/changes/finops-01-module-cost-outcome/tasks.md rename to openspec/parking-lot/finops-01-module-cost-outcome/tasks.md diff --git a/openspec/changes/knowledge-01-module-memory-runtime/.openspec.yaml b/openspec/parking-lot/knowledge-01-module-memory-runtime/.openspec.yaml similarity index 100% rename from openspec/changes/knowledge-01-module-memory-runtime/.openspec.yaml rename to openspec/parking-lot/knowledge-01-module-memory-runtime/.openspec.yaml diff --git a/openspec/changes/knowledge-01-module-memory-runtime/design.md b/openspec/parking-lot/knowledge-01-module-memory-runtime/design.md similarity index 100% rename from openspec/changes/knowledge-01-module-memory-runtime/design.md rename to openspec/parking-lot/knowledge-01-module-memory-runtime/design.md diff --git a/openspec/changes/knowledge-01-module-memory-runtime/proposal.md b/openspec/parking-lot/knowledge-01-module-memory-runtime/proposal.md similarity index 100% rename from openspec/changes/knowledge-01-module-memory-runtime/proposal.md rename to openspec/parking-lot/knowledge-01-module-memory-runtime/proposal.md diff --git a/openspec/changes/knowledge-01-module-memory-runtime/specs/knowledge-memory-runtime/spec.md b/openspec/parking-lot/knowledge-01-module-memory-runtime/specs/knowledge-memory-runtime/spec.md similarity index 100% rename from openspec/changes/knowledge-01-module-memory-runtime/specs/knowledge-memory-runtime/spec.md rename to openspec/parking-lot/knowledge-01-module-memory-runtime/specs/knowledge-memory-runtime/spec.md diff --git a/openspec/changes/knowledge-01-module-memory-runtime/tasks.md b/openspec/parking-lot/knowledge-01-module-memory-runtime/tasks.md similarity index 100% rename from openspec/changes/knowledge-01-module-memory-runtime/tasks.md rename to openspec/parking-lot/knowledge-01-module-memory-runtime/tasks.md diff --git a/openspec/changes/knowledge-02-module-writeback/.openspec.yaml b/openspec/parking-lot/knowledge-02-module-writeback/.openspec.yaml similarity index 100% rename from openspec/changes/knowledge-02-module-writeback/.openspec.yaml rename to openspec/parking-lot/knowledge-02-module-writeback/.openspec.yaml diff --git a/openspec/changes/knowledge-02-module-writeback/design.md b/openspec/parking-lot/knowledge-02-module-writeback/design.md similarity index 100% rename from openspec/changes/knowledge-02-module-writeback/design.md rename to openspec/parking-lot/knowledge-02-module-writeback/design.md diff --git a/openspec/changes/knowledge-02-module-writeback/proposal.md b/openspec/parking-lot/knowledge-02-module-writeback/proposal.md similarity index 100% rename from openspec/changes/knowledge-02-module-writeback/proposal.md rename to openspec/parking-lot/knowledge-02-module-writeback/proposal.md diff --git a/openspec/changes/knowledge-02-module-writeback/specs/knowledge-writeback/spec.md b/openspec/parking-lot/knowledge-02-module-writeback/specs/knowledge-writeback/spec.md similarity index 100% rename from openspec/changes/knowledge-02-module-writeback/specs/knowledge-writeback/spec.md rename to openspec/parking-lot/knowledge-02-module-writeback/specs/knowledge-writeback/spec.md diff --git a/openspec/changes/knowledge-02-module-writeback/tasks.md b/openspec/parking-lot/knowledge-02-module-writeback/tasks.md similarity index 100% rename from openspec/changes/knowledge-02-module-writeback/tasks.md rename to openspec/parking-lot/knowledge-02-module-writeback/tasks.md diff --git a/openspec/changes/review-resiliency-01-module/.openspec.yaml b/openspec/parking-lot/review-resiliency-01-module/.openspec.yaml similarity index 100% rename from openspec/changes/review-resiliency-01-module/.openspec.yaml rename to openspec/parking-lot/review-resiliency-01-module/.openspec.yaml diff --git a/openspec/changes/review-resiliency-01-module/design.md b/openspec/parking-lot/review-resiliency-01-module/design.md similarity index 100% rename from openspec/changes/review-resiliency-01-module/design.md rename to openspec/parking-lot/review-resiliency-01-module/design.md diff --git a/openspec/changes/review-resiliency-01-module/proposal.md b/openspec/parking-lot/review-resiliency-01-module/proposal.md similarity index 100% rename from openspec/changes/review-resiliency-01-module/proposal.md rename to openspec/parking-lot/review-resiliency-01-module/proposal.md diff --git a/openspec/changes/review-resiliency-01-module/specs/review-resiliency-module/spec.md b/openspec/parking-lot/review-resiliency-01-module/specs/review-resiliency-module/spec.md similarity index 100% rename from openspec/changes/review-resiliency-01-module/specs/review-resiliency-module/spec.md rename to openspec/parking-lot/review-resiliency-01-module/specs/review-resiliency-module/spec.md diff --git a/openspec/changes/review-resiliency-01-module/tasks.md b/openspec/parking-lot/review-resiliency-01-module/tasks.md similarity index 100% rename from openspec/changes/review-resiliency-01-module/tasks.md rename to openspec/parking-lot/review-resiliency-01-module/tasks.md diff --git a/openspec/changes/security-01-module-sast-sca-secret/.openspec.yaml b/openspec/parking-lot/security-01-module-sast-sca-secret/.openspec.yaml similarity index 100% rename from openspec/changes/security-01-module-sast-sca-secret/.openspec.yaml rename to openspec/parking-lot/security-01-module-sast-sca-secret/.openspec.yaml diff --git a/openspec/changes/security-01-module-sast-sca-secret/design.md b/openspec/parking-lot/security-01-module-sast-sca-secret/design.md similarity index 100% rename from openspec/changes/security-01-module-sast-sca-secret/design.md rename to openspec/parking-lot/security-01-module-sast-sca-secret/design.md diff --git a/openspec/changes/security-01-module-sast-sca-secret/proposal.md b/openspec/parking-lot/security-01-module-sast-sca-secret/proposal.md similarity index 100% rename from openspec/changes/security-01-module-sast-sca-secret/proposal.md rename to openspec/parking-lot/security-01-module-sast-sca-secret/proposal.md diff --git a/openspec/changes/security-01-module-sast-sca-secret/specs/security-sast-sca-secret-module/spec.md b/openspec/parking-lot/security-01-module-sast-sca-secret/specs/security-sast-sca-secret-module/spec.md similarity index 100% rename from openspec/changes/security-01-module-sast-sca-secret/specs/security-sast-sca-secret-module/spec.md rename to openspec/parking-lot/security-01-module-sast-sca-secret/specs/security-sast-sca-secret-module/spec.md diff --git a/openspec/changes/security-01-module-sast-sca-secret/tasks.md b/openspec/parking-lot/security-01-module-sast-sca-secret/tasks.md similarity index 100% rename from openspec/changes/security-01-module-sast-sca-secret/tasks.md rename to openspec/parking-lot/security-01-module-sast-sca-secret/tasks.md diff --git a/openspec/changes/security-02-module-license-compliance/.openspec.yaml b/openspec/parking-lot/security-02-module-license-compliance/.openspec.yaml similarity index 100% rename from openspec/changes/security-02-module-license-compliance/.openspec.yaml rename to openspec/parking-lot/security-02-module-license-compliance/.openspec.yaml diff --git a/openspec/changes/security-02-module-license-compliance/design.md b/openspec/parking-lot/security-02-module-license-compliance/design.md similarity index 100% rename from openspec/changes/security-02-module-license-compliance/design.md rename to openspec/parking-lot/security-02-module-license-compliance/design.md diff --git a/openspec/changes/security-02-module-license-compliance/proposal.md b/openspec/parking-lot/security-02-module-license-compliance/proposal.md similarity index 100% rename from openspec/changes/security-02-module-license-compliance/proposal.md rename to openspec/parking-lot/security-02-module-license-compliance/proposal.md diff --git a/openspec/changes/security-02-module-license-compliance/specs/license-compliance-module/spec.md b/openspec/parking-lot/security-02-module-license-compliance/specs/license-compliance-module/spec.md similarity index 100% rename from openspec/changes/security-02-module-license-compliance/specs/license-compliance-module/spec.md rename to openspec/parking-lot/security-02-module-license-compliance/specs/license-compliance-module/spec.md diff --git a/openspec/changes/security-02-module-license-compliance/tasks.md b/openspec/parking-lot/security-02-module-license-compliance/tasks.md similarity index 100% rename from openspec/changes/security-02-module-license-compliance/tasks.md rename to openspec/parking-lot/security-02-module-license-compliance/tasks.md diff --git a/openspec/changes/security-03-module-pii-gdpr-eu/.openspec.yaml b/openspec/parking-lot/security-03-module-pii-gdpr-eu/.openspec.yaml similarity index 100% rename from openspec/changes/security-03-module-pii-gdpr-eu/.openspec.yaml rename to openspec/parking-lot/security-03-module-pii-gdpr-eu/.openspec.yaml diff --git a/openspec/changes/security-03-module-pii-gdpr-eu/design.md b/openspec/parking-lot/security-03-module-pii-gdpr-eu/design.md similarity index 100% rename from openspec/changes/security-03-module-pii-gdpr-eu/design.md rename to openspec/parking-lot/security-03-module-pii-gdpr-eu/design.md diff --git a/openspec/changes/security-03-module-pii-gdpr-eu/proposal.md b/openspec/parking-lot/security-03-module-pii-gdpr-eu/proposal.md similarity index 100% rename from openspec/changes/security-03-module-pii-gdpr-eu/proposal.md rename to openspec/parking-lot/security-03-module-pii-gdpr-eu/proposal.md diff --git a/openspec/changes/security-03-module-pii-gdpr-eu/specs/privacy-gdpr-module/spec.md b/openspec/parking-lot/security-03-module-pii-gdpr-eu/specs/privacy-gdpr-module/spec.md similarity index 100% rename from openspec/changes/security-03-module-pii-gdpr-eu/specs/privacy-gdpr-module/spec.md rename to openspec/parking-lot/security-03-module-pii-gdpr-eu/specs/privacy-gdpr-module/spec.md diff --git a/openspec/changes/security-03-module-pii-gdpr-eu/tasks.md b/openspec/parking-lot/security-03-module-pii-gdpr-eu/tasks.md similarity index 100% rename from openspec/changes/security-03-module-pii-gdpr-eu/tasks.md rename to openspec/parking-lot/security-03-module-pii-gdpr-eu/tasks.md From 6ce288587ebd00881d6d8d8320b485d0810177d7 Mon Sep 17 00:00:00 2001 From: omit-test Date: Wed, 6 May 2026 21:46:32 +0200 Subject: [PATCH 2/4] docs(openspec): mark marketplace-06 as archived in CHANGE_ORDER MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Reconcile single source of truth: parking-lot/README.md correctly states marketplace-06-ci-module-signing was archived 2026-04-16 (the dir exists at openspec/changes/archive/2026-04-16-marketplace-06-ci-module-signing/), but the Module trust chain and CI security table still listed it as pending. Apply the same ✅-prefix + "(archived YYYY-MM-DD)" convention already used by packaging-01 (line 119) so both files agree. --- openspec/CHANGE_ORDER.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openspec/CHANGE_ORDER.md b/openspec/CHANGE_ORDER.md index 7c2f4b0..8a788f2 100644 --- a/openspec/CHANGE_ORDER.md +++ b/openspec/CHANGE_ORDER.md @@ -104,7 +104,7 @@ The architecture pillar remains active because `architecture-02-well-architected | Module | Order | Change folder | GitHub # | Blocked by | |--------|-------|---------------|----------|------------| -| marketplace | 06 | marketplace-06-ci-module-signing | [#185](https://github.com/nold-ai/specfact-cli-modules/issues/185) | Parent Feature: [#187](https://github.com/nold-ai/specfact-cli-modules/issues/187); Parent Epic: [#186](https://github.com/nold-ai/specfact-cli-modules/issues/186); paired core [specfact-cli#500](https://github.com/nold-ai/specfact-cli/issues/500) | +| marketplace | 06 | ✅ marketplace-06-ci-module-signing (archived 2026-04-16) | [#185](https://github.com/nold-ai/specfact-cli-modules/issues/185) | Parent Feature: [#187](https://github.com/nold-ai/specfact-cli-modules/issues/187); Parent Epic: [#186](https://github.com/nold-ai/specfact-cli-modules/issues/186); paired core [specfact-cli#500](https://github.com/nold-ai/specfact-cli/issues/500) | ### Documentation restructure From 97ec6059f8e7c14064effc1889f0e30dc8a257d0 Mon Sep 17 00:00:00 2001 From: omit-test Date: Thu, 7 May 2026 00:32:40 +0200 Subject: [PATCH 3/4] Fix modules release PR OpenSpec classifications --- openspec/CHANGE_ORDER.md | 9 ++------- openspec/parking-lot/README.md | 7 +++++-- 2 files changed, 7 insertions(+), 9 deletions(-) diff --git a/openspec/CHANGE_ORDER.md b/openspec/CHANGE_ORDER.md index 8a788f2..097d29e 100644 --- a/openspec/CHANGE_ORDER.md +++ b/openspec/CHANGE_ORDER.md @@ -33,6 +33,7 @@ | ✅ packaging-01-bundle-resource-payloads | archived 2026-04-05 | | ✅ module-bundle-deps-auto-install | archived 2026-04-05 | | ✅ governance-03-github-hierarchy-cache | archived 2026-04-09 | +| ✅ marketplace-06-ci-module-signing | archived 2026-04-16; [#185](https://github.com/nold-ai/specfact-cli-modules/issues/185); paired core [specfact-cli#500](https://github.com/nold-ai/specfact-cli/issues/500) | ## Pending @@ -100,12 +101,6 @@ The architecture pillar remains active because `architecture-02-well-architected | code-review + codebase | 01 | code-review-bug-finding-and-sidecar-venv-fix | [#174](https://github.com/nold-ai/specfact-cli-modules/issues/174) | Parent Feature: [#175](https://github.com/nold-ai/specfact-cli-modules/issues/175); Epic: [#162](https://github.com/nold-ai/specfact-cli-modules/issues/162) | | codebase + project-runtime | 02 | codebase-import-runtime-hardening | [#235](https://github.com/nold-ai/specfact-cli-modules/issues/235) | Parent Feature: [#234](https://github.com/nold-ai/specfact-cli-modules/issues/234); Epic: [#162](https://github.com/nold-ai/specfact-cli-modules/issues/162); no known blockers | -### Module trust chain and CI security - -| Module | Order | Change folder | GitHub # | Blocked by | -|--------|-------|---------------|----------|------------| -| marketplace | 06 | ✅ marketplace-06-ci-module-signing (archived 2026-04-16) | [#185](https://github.com/nold-ai/specfact-cli-modules/issues/185) | Parent Feature: [#187](https://github.com/nold-ai/specfact-cli-modules/issues/187); Parent Epic: [#186](https://github.com/nold-ai/specfact-cli-modules/issues/186); paired core [specfact-cli#500](https://github.com/nold-ai/specfact-cli/issues/500) | - ### Documentation restructure | Module | Order | Change folder | GitHub # | Blocked by | @@ -122,4 +117,4 @@ The architecture pillar remains active because `architecture-02-well-architected | Module | Order | Change folder | GitHub # | Blocked by | |--------|-------|---------------|----------|------------| -| peer-deps | 01 | ✅ module-bundle-deps-auto-install (archived 2026-04-05) | [#135](https://github.com/nold-ai/specfact-cli-modules/issues/135) | — | \ No newline at end of file +| peer-deps | 01 | ✅ module-bundle-deps-auto-install (archived 2026-04-05) | [#135](https://github.com/nold-ai/specfact-cli-modules/issues/135) | — | diff --git a/openspec/parking-lot/README.md b/openspec/parking-lot/README.md index 7d4467d..be4abc3 100644 --- a/openspec/parking-lot/README.md +++ b/openspec/parking-lot/README.md @@ -8,7 +8,7 @@ nine proposals are pinned to whatever signal un-parks the core side. For background and the parent triage rationale, see: - Core PR: -- Core parking-lot README: +- Core parking-lot README: ## Restoration policy @@ -49,8 +49,11 @@ their core counterparts are still active or in the core repo's modify queue: `ceremony-02-requirements-aware-output` - `openspec-01-intent-trace` *(paired core: in modify queue, will be trimmed)* - All `backlog-*` and `docs-*` changes -- `marketplace-07-pr-auto-sign-updates` *(already complete, archive pending)* - `codebase-import-runtime-hardening`, `project-runtime-01-safe-artifact-write-policy` +## Completed / awaiting archive + +- `marketplace-07-pr-auto-sign-updates` + The core marketplace-06 work (`marketplace-06-ci-module-signing`) was already archived here on 2026-04-16 — no parking action needed. From 0bb0a93eeb0030ad803f7952a02d97ed516e679a Mon Sep 17 00:00:00 2001 From: omit-test Date: Thu, 7 May 2026 00:33:39 +0200 Subject: [PATCH 4/4] Correct parked license compliance core mapping --- openspec/parking-lot/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openspec/parking-lot/README.md b/openspec/parking-lot/README.md index be4abc3..d1af6fc 100644 --- a/openspec/parking-lot/README.md +++ b/openspec/parking-lot/README.md @@ -32,7 +32,7 @@ A modules-side proposal can be returned to `openspec/changes/` only after: | `knowledge-02-module-writeback` | `knowledge-02-preflight-context-assembly` | [#225](https://github.com/nold-ai/specfact-cli-modules/issues/225) | Core knowledge-02 un-parked | | `review-resiliency-01-module` | `review-resiliency-01-contracts` | [#226](https://github.com/nold-ai/specfact-cli-modules/issues/226) | Core review-resiliency-01 un-parked | | `security-01-module-sast-sca-secret` | `security-01-unified-findings-model` | [#227](https://github.com/nold-ai/specfact-cli-modules/issues/227) | Core security-01 un-parked | -| `security-02-module-license-compliance` | `security-02-eu-gdpr-baseline` (license aspect) | [#228](https://github.com/nold-ai/specfact-cli-modules/issues/228) | Core security-02 un-parked | +| `security-02-module-license-compliance` | `security-01-unified-findings-model` (license findings aspect) | [#228](https://github.com/nold-ai/specfact-cli-modules/issues/228) | Core security-01 un-parked | | `security-03-module-pii-gdpr-eu` | `security-02-eu-gdpr-baseline` (GDPR aspect) | [#229](https://github.com/nold-ai/specfact-cli-modules/issues/229) | Core security-02 un-parked | ## Not parked here (still active)