Decisiones — índice¶
¿Qué vive aquí?¶
ADRs (ADR-*): decisiones arquitectónicas, inmutables una vez aceptadas, con lifecycle propio (draft→proposed→accepted→superseded). Cada ADR: contexto, decisión, consecuencias, quién decide.
¿Qué NO pertenece aquí?¶
Conceptos (→ concepts/), RFCs abiertos (→ donde convivan), runbooks (→ operations/runbooks/).
Estado¶
T1.5 (repo docs) migrado (2026-09-07) — fichas presentes.
Inventario de decisiones¶
| ADR | Título | Estado |
|---|---|---|
| ADR-0001 | Dedicated RKE2 node LAN | accepted |
| ADR-0002 | Minimal expandable bootstrap sizing | accepted |
| ADR-0003 | OpenTofu and Ansible responsibility split | accepted |
| ADR-0004 | RKE2 API endpoint and routing to Ceph | proposed |
| ADR-0005 | Cilium as the CNI from day one (no Canal provisional CNI) | accepted |
| ADR-0006 | Edge v1 WAN exception — direct Traefik exposure without L4 layer for docs.wetopi.net | proposed |
| ADR-0007 | Ceph client access via direct storage-network attachment | accepted |
| ADR-0008 | Harness V3.1 objective governance — versioned Git Objectives with separated THINK, OWN, DO and JUDGE | accepted |
| ADR-0009 | Secrets vault harness — Infisical self-hosted in-cluster (ns vault), identidades por perfil y contrato ai-hub | accepted |
| ADR-0010 | "Docs runtime channel (G1) — rebuild-on-webhook" | accepted |
| ADR-0011 | "Webhook + atomic swap + fail-safe (G2, precondition of G1)" | accepted |
| ADR-0012 | "Image channel retirement (G3)" | accepted |
| ADR-0013 | "Docs status liveness (G4, deferred)" | accepted |
| ADR-0014 | Edge source-IP allow-list (capa VPN del operador) y retirada del basic-auth en los servicios de control-plane | accepted |
| ADR-0015 | Memory Intent capture y memoria corporativa continua | accepted |
| ADR-0016 | Convención de IDs: sin DES; diseños nuevos = ADR proposed; DES- → ARCH- (draft) | proposed |
| ADR-0017 | WPDoctor — Memoria Ejecutiva v1.0 | proposed |
| ADR-0018 | WPDoctor — Durable Work Orchestration, Semantic Activity Feed and Runtime WebUI | proposed |
| ADR-0019 | Edge traffic & security architecture — egress Cilium EG, firewall feeds DaemonSet, IDS, WAF per-site | proposed |
| ADR-0021 | app-manager en d — adapter k8s nativo (sin Ansible), sandbox-first, CI externo+GHCR | accepted |
| ADR-0022 | wepod en d — espejo GitLab→GitHub, build en d (builder GOAL-REGISTRY) y store en Zot | accepted |