NianAIGC/.project-docs/80-commitments/commitments.md

Commitments

Track future-facing memory: promised follow-ups, unfinished loops, timed checks, and restart points.

Date	Commitment	Trigger / Due	Owner	Status	Next Action
2026-08-12	Validate migrations, plaintext connectivity, permissions, and readiness against the real Alibaba Cloud RDS instance.	Production hardening follow-up	Deployment owner	Open	Deploy ed97814, then record live roles, internal endpoint, VPC/security-group/allowlist controls, bootstrap, and readiness evidence. Do not treat the earlier public /api/ready response as evidence for the new image.
2026-08-12	Keep Go at one replica until generated assets use OSS or another shared store; static Web may scale independently.	Before raising Go replicas or replacing a Pod whose local files must survive	Deployment owner	Open	Configure and validate external object storage; absent OSS, emptyDir files are lost on Pod replacement.
2026-08-12	Harden production runtimes to non-root with explicit writable paths.	Security hardening follow-up	Application owner	Completed	Go already uses UID 10001; b14b4fc moves Web to unprivileged Nginx UID/GID 101 with read-only root and a /tmp volume.
2026-08-12	Implement ADR-003 only after executable compatibility contracts exist.	Before starting the Go migration	Application owner	Completed	Contracts exist under contracts/; Go implementation merged 2026-08-14.
2026-08-14	Build the Go workload deployment artifacts and split Ingress routing.	Before the first production deployment	Application owner	Completed	Go artifacts merged 2026-08-14; b14b4fc completes static Nginx Web and direct browser-to-Go routing. Remaining work is image build/push and target-cluster validation.
2026-08-14	Confirm that the production schema was initialized by manually executing database/migrations/0001_initial_schema.sql, then 0002_generation_lifecycle_fencing.sql, then the application-role grants. No migration Job pod is deployed.	Production configuration audit	Deployment owner	Open	Record execution evidence and application-role grant verification; do not infer completion solely from the public readiness response.
2026-08-14	Confirm the live status of ZHINIAN_BOOTSTRAP_ADMIN_PHONE / ZHINIAN_BOOTSTRAP_ADMIN_PASSWORD; the Go process creates the first super administrator exactly once and uses the default name when ZHINIAN_BOOTSTRAP_ADMIN_NAME is absent.	Production configuration audit	Deployment owner	Open	Verify deployed configuration and bootstrap outcome without exposing credentials.
2026-08-14	Validate the Go backend against non-production RDS, real OSS, provider credentials, and external Webhooks.	Production hardening follow-up	Deployment owner	Open	Run the contract and recovery suites against representative external dependencies and record any live parity gaps.
2026-08-14	Confirm the public /api/v1 support promise for external consumers.	Production compatibility follow-up	Product owner	Open	Product decision on which v1 endpoints and behaviors are guaranteed for partners.
2026-08-16	Release and smoke-test authenticated /create SSR through the internal Go identity bridge.	Superseded by the static architecture decision	Deployment owner	Superseded	Do not deploy the SSR bridge as the target architecture; deploy the static Web + Go release containing ed97814 instead.
2026-08-16	Publish and deploy ed97814 static Web + Go under immutable image references, then smoke PostgreSQL bootstrap and the full same-origin boundary.	Before closing the production login repair	Deployment owner	Open	Build/container-smoke both images, server-side dry-run ACK, verify no PostgreSQL SSLRequest, confirm live path owners, anonymous login, /create?mode=video, logout, role pages, Web /healthz, Go /api/health, and Go /api/ready.

Use

Record only commitments that should affect future sessions. Routine next steps can stay in 30-worklog/current-state.md.