Description
doc-0004 W2: a provisioner mirroring the grafana_agento11y_* provider resources exactly, serial apply with read-back, destination-bound ownership and teardown, cross-blueprint claims on rule_id, agent_name and judge model. Design review before code.
Acceptance Criteria
- #1 Design review recorded before implementation
- #2 Apply is serial and every object is read back
- #3 Teardown removes only objects this deployment owns
Definition of Done
- #1 just check (fmt-check, lint, gen-check, env-check, docs-check, test, race, hygiene, ui-check, compose-check, helm-test, lab-check, signal-fidelity)
- #2 just gen (only if a blueprint field, construct/workload config struct, or a skill under plugins/synthkit/skills/ changed)
- #3 just dump — inventory diffed against signals/
Implementation Plan
Design destination-bound serial provisioning and exact provider fields; independent design review before implementation.
Deliver separately gated evaluator-hook transport, remaining-resource transport and local custody components, then a manual create-only command and receipt-backed root integration under the reviewed lifecycle. Do not mark the parent complete for component delivery.
Implementation Notes
Independent lifecycle revision-two review accepts the narrow manual create-only design and bounded transport/state partitions; it is not implementation or live-activation proof. Initial transport component independently passed repair review; remaining runtime and custody criteria stay open.
Original four-hour convergence boundary reached with transport, custody and private one-PUT prerequisite delivered separately; parent apply/teardown acceptance remains incomplete. Engine stopped before any mutation on an absence-proof contract contradiction requiring owner policy choice; parent parked with options, no silent repair/clock reset. Private helper b8dcc3cea4e088458c7fbe38f9deacc082d4307d preserves public preflight and passed independent guarded review, aggregate CodeRabbit and full gate. Its delivery supplies no runtime/admission or whole-provisioner proof.
Owner explicitly approved inventory-backed current absence: typed exact-ID404 plus authenticated healthy complete scoped inventory confirming no ID, under matching destination/exclusivity assumptions. Never404alone; cannot distinguish selective routing/proxy failure and is not noncommit/drain/fencing or pending-clear/retry/adoption authority. C contract and diagnostic will be reconciled openly, old stronger-requirement red preserved; revised policy review precedes engine production continuation.
Owner requested immediate loop closeout; work is parked and no continuation is authorised by background CI events. Preserve delivered source and partial work; resume only under an explicit new instruction, reconciling current Git, board, runtime and the recorded acceptance blockers. Engine hosted AMD64 race/e2e result remains pending at closeout; no full-estate completion or runtime/live activation claim.