108 lines
3.6 KiB
JSON
108 lines
3.6 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"product": "AWatch-rus",
|
|
"status": "registry-readiness infrastructure evidence manifest",
|
|
"updated_at": "2026-06-22",
|
|
"primary_source_repository": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus",
|
|
"primary_git_clone_url_https": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus.git",
|
|
"primary_git_platform": "self-hosted Gitea",
|
|
"primary_git_provider": "REG.RU VPS / cloud server",
|
|
"github_role": "public_mirror_only",
|
|
"wiki_policy": {
|
|
"github_wiki_detected": false,
|
|
"gitea_builtin_wiki": "navigation_only",
|
|
"authoritative_docs_path": "docs/registry"
|
|
},
|
|
"infrastructure": {
|
|
"git_url": "https://git.iri1968.dpdns.org",
|
|
"organization": "awatch-rus",
|
|
"repository": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus",
|
|
"https_enabled": true,
|
|
"reverse_proxy": "Nginx",
|
|
"gitea_local_http_endpoint": "127.0.0.1:3000",
|
|
"external_3000_tcp_expected_exposed": false,
|
|
"legal_sufficiency_confirmed": false
|
|
},
|
|
"backup": {
|
|
"enabled": true,
|
|
"tool": "gitea dump",
|
|
"path": "/var/backups/gitea",
|
|
"script": "/usr/local/sbin/awatch-gitea-backup.sh",
|
|
"format": "zip",
|
|
"checksum": "sha256",
|
|
"retention_days": 14,
|
|
"systemd_service": "awatch-gitea-backup.service",
|
|
"systemd_timer": "awatch-gitea-backup.timer",
|
|
"schedule_target": "daily 03:20 with RandomizedDelaySec=10m",
|
|
"restore_runbook": "docs/registry/GITEA_BACKUP_AND_RESTORE_RUNBOOK_RU.md",
|
|
"restore_tested": false,
|
|
"production_ready": false
|
|
},
|
|
"build_runner": {
|
|
"status": "planned",
|
|
"target_hostname": "awatch-build-01",
|
|
"target_provider": "REG.RU VPS / cloud server or another Russian-hosted server",
|
|
"target_location": "Russian Federation",
|
|
"separate_from_git_server": true,
|
|
"recommended_specs": {
|
|
"cpu": "4 vCPU",
|
|
"ram": "8-16 GB",
|
|
"disk": "120+ GB SSD/NVMe",
|
|
"os": [
|
|
"Debian 12",
|
|
"Ubuntu 24.04 LTS"
|
|
]
|
|
},
|
|
"required_checks": [
|
|
"cargo fmt --all --check",
|
|
"cargo test --workspace",
|
|
"cargo clippy --workspace --all-targets -- -D warnings",
|
|
"cargo build --workspace --release",
|
|
"registry_readiness_check",
|
|
"release_evidence_check"
|
|
],
|
|
"release_evidence": {
|
|
"source_archive": true,
|
|
"binary_archive": true,
|
|
"sha256sums": true,
|
|
"cargo_metadata": true,
|
|
"cargo_tree": true,
|
|
"sbom_cyclonedx": "if_tool_available",
|
|
"sbom_spdx": "if_tool_available",
|
|
"smoke_logs": true,
|
|
"release_manifest": true
|
|
}
|
|
},
|
|
"public_engineering_transparency": {
|
|
"github_actions_ci": true,
|
|
"github_actions_ci_status": "passed",
|
|
"coverage_baseline": true,
|
|
"coverage_workflow_status": "passed",
|
|
"security_scanning": true,
|
|
"security_workflow_status": "passed",
|
|
"secret_scan_status": "passed",
|
|
"issue_templates": true,
|
|
"public_roadmap": true,
|
|
"github_role": "public_mirror_validation_only",
|
|
"registry_release_build": "requires_russian_build_runner"
|
|
},
|
|
"github_role_note": "GitHub is a public mirror only, not the target primary source/build/release contour for registry-readiness.",
|
|
"remaining_gaps": [
|
|
"legal rightsholder confirmation",
|
|
"Russian build-runner",
|
|
"release artifacts storage in RF",
|
|
"tested restore procedure",
|
|
"documented access control policy",
|
|
"documented backup offsite copy",
|
|
"final registry legal review"
|
|
],
|
|
"forbidden_claims_not_made": [
|
|
"not_claimed: FSTEC/FSB certification",
|
|
"not_claimed: SIEM replacement",
|
|
"not_claimed: DLP replacement",
|
|
"not_claimed: ML/LLM-based detection",
|
|
"not_claimed: cloud dependency",
|
|
"not_claimed: automatic remediation"
|
|
]
|
|
}
|