[jeremylongshore]

Summary

This PR combines the already-prepared upstream synchronization with the fork-governance cleanup that followed it. The large upstream-owned diff is intentional: those paths are byte-for-byte from current block/buzz upstream, while Intent Solutions changes remain confined to the additive fork allowlist.

• sync fork source with current block/buzz upstream
• prove the synchronized, upstream-owned AGENTS.md is byte-identical to upstream/main and document that authority boundary
• retire the two phantom Buzz repositories and reconcile the canonical four-asset, three-plane model
• add fork-specific reviewer guidance and register it in the additive-only, must-survive, and hash-pin surfaces
• clarify that deployment authority and private operator detail live only in intent-os/ops/buzz/

Supersedes #23, whose useful content is incorporated here on top of the synchronized branch.

Validation

• scripts/fork-gates/check-additive-only.sh
• scripts/fork-gates/test-additive-only.sh
• scripts/fork-gates/check-must-survive.sh
• scripts/audit-harness verify
• git diff --check
• sha256sum AGENTS.md matches git show upstream/main:AGENTS.md
• GitHub upstream build/test matrix is running for the synchronized source

Tracked by closed beads buzz-31b and buzz-1ga; buzz-v2p is superseded.

Summary by CodeRabbit

• Documentation
  • Updated deployment guidance to recommend operator-initiated, staging-first upgrades using pinned image digests, with human approval for restoring production data.
  • Clarified backup, recovery, fork governance, and repository boundaries.
  • Added guidance for reviewing contributions to the public fork.
• Checks
  • Added a regression check for fork change-allowlist rules and included it in automated validation.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Warning

Review limit reached

Next included review available in 7 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: dec83ae4-9ec8-469d-8225-eb3121ec5603

📥 Commits

Reviewing files that changed from the base of the PR and between e7e4214 and ec711d3.

📒 Files selected for processing (16)

• .github/workflows/fork-gates.yml
• .harness-hash
• .harness-hash-extra-patterns
• 000-docs/000-INDEX.md
• 000-docs/001-PP-PLAN-buzz-adoption-master-blueprint.md
• 000-docs/003-OD-DEPL-deploy-posture-public.md
• 000-docs/005-DR-DECR-dedicated-vps-topology.md
• 000-docs/006-DR-STND-authoritative-naming-and-boundaries.md
• 000-docs/007-AA-AUDR-fork-contract-breach-2026-08-03.md
• CLAUDE.md
• FORK.md
• REVIEW.md
• lefthook-local.yml
• scripts/fork-gates/check-additive-only.sh
• scripts/fork-gates/check-must-survive.sh
• scripts/fork-gates/test-additive-only.sh

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 69eba38a-2be9-41f4-b60c-f60094f68c7d

📥 Commits

Reviewing files that changed from the base of the PR and between d7bf08f and e7e4214.

📒 Files selected for processing (16)

• .github/workflows/fork-gates.yml
• .harness-hash
• .harness-hash-extra-patterns
• 000-docs/000-INDEX.md
• 000-docs/001-PP-PLAN-buzz-adoption-master-blueprint.md
• 000-docs/003-OD-DEPL-deploy-posture-public.md
• 000-docs/005-DR-DECR-dedicated-vps-topology.md
• 000-docs/006-DR-STND-authoritative-naming-and-boundaries.md
• 000-docs/007-AA-AUDR-fork-contract-breach-2026-08-03.md
• CLAUDE.md
• FORK.md
• REVIEW.md
• lefthook-local.yml
• scripts/fork-gates/check-additive-only.sh
• scripts/fork-gates/check-must-survive.sh
• scripts/fork-gates/test-additive-only.sh

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The PR revises public fork and deployment documentation to describe a manual, digest-pinned operating posture, adds reviewer guidance, and updates fork governance checks. The additive-only gate now distinguishes exact paths from directory prefixes, with regression coverage wired into local and CI checks.

Changes

Public fork governance

Layer / File(s)	Summary
Public operating and deployment posture 000-docs/000-INDEX.md, 000-docs/001-PP-PLAN-buzz-adoption-master-blueprint.md, 000-docs/003-OD-DEPL-deploy-posture-public.md, 000-docs/005-DR-DECR-dedicated-vps-topology.md, 000-docs/007-AA-AUDR-fork-contract-breach-2026-08-03.md, .harness-hash	The public documents describe stable relay images pinned by digest, manual staging-first upgrades, recovery requirements, and human-gated live store restoration. Historical records and index entries are updated to reflect the current posture.
Fork boundaries and review rules 000-docs/006-DR-STND-authoritative-naming-and-boundaries.md, FORK.md, REVIEW.md, CLAUDE.md, .harness-hash, .harness-hash-extra-patterns	The documents clarify repository boundaries and governance and contribution lanes. REVIEW.md defines review checks for fork-contract alignment, evidence, disclosure, and changed-line findings. Hash pins and contributor instructions are updated.
Additive-only matching and regression checks scripts/fork-gates/*, .github/workflows/fork-gates.yml, lefthook-local.yml, .harness-hash	The allowlist treats entries ending in / as directory prefixes and other entries as exact paths. A regression script checks allowed and rejected paths, and pre-push and workflow checks run it.

Priority: ➖ Normal

Estimated code review effort: 3 (Moderate) | ~25 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to e7e42

The governance and deployment guidance appears consistent with the updated fork checks. No actionable merge-blocking issue is identified; normal checks can complete before merge.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 3 files. (13 skipped: 1…	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main changes: synchronizing upstream content and updating Buzz self-hosting guidance. It is concise and specific.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 3 files. (13 skipped: 13 unsupported.)

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}