NianAIGC/.project-docs/80-commitments/commitments.md

Commitments

Track future-facing memory: promised follow-ups, unfinished loops, timed checks, and restart points.

Date	Commitment	Trigger / Due	Owner	Status	Next Action
2026-08-12	Validate migration, TLS, permissions, and readiness against the real Alibaba Cloud RDS instance.	Production hardening follow-up	Deployment owner	Open	Record the live RDS roles/CA/network configuration and validation evidence; public /api/ready currently returns HTTP 200 with PostgreSQL configured.
2026-08-12	Keep each workload at one replica until generated assets use OSS or another shared store.	Before raising replicas	Deployment owner	Open	Configure and validate external object storage.
2026-08-12	Harden the runtime image to non-root after writable paths are designed.	Security hardening follow-up	Application owner	Open	Define ownership for runtime and settings paths, then update Docker/ACK security context.
2026-08-12	Implement ADR-003 only after executable compatibility contracts exist.	Before starting the Go migration	Application owner	Completed	Contracts exist under contracts/; Go implementation merged 2026-08-14.
2026-08-14	Build the Go workload deployment artifacts: container image, ACK Deployment/Service manifests, and Ingress routing that sends page/static paths to Next.js and /api, /uploads, /generated-results to Go.	Before the first production deployment	Application owner	Completed	backend/Dockerfile, deploy/ack/go-api.yaml, and the split Ingress are merged (2026-08-14); remaining work is image build/push and cluster dry-run validation.
2026-08-14	Confirm that the production schema was initialized by manually executing database/migrations/0001_initial_schema.sql, then 0002_generation_lifecycle_fencing.sql, then the application-role grants. No migration Job pod is deployed.	Production configuration audit	Deployment owner	Open	Record execution evidence and application-role grant verification; do not infer completion solely from the public readiness response.
2026-08-14	Confirm the live status of ZHINIAN_BOOTSTRAP_ADMIN_PHONE / ZHINIAN_BOOTSTRAP_ADMIN_PASSWORD / ZHINIAN_BOOTSTRAP_ADMIN_NAME; the Go process creates the first super administrator exactly once.	Production configuration audit	Deployment owner	Open	Verify the deployed configuration and bootstrap outcome without exposing credentials.
2026-08-14	Validate the Go backend against non-production RDS, real OSS, provider credentials, and external Webhooks.	Production hardening follow-up	Deployment owner	Open	Run the contract and recovery suites against representative external dependencies and record any live parity gaps.
2026-08-14	Confirm the public /api/v1 support promise for external consumers.	Production compatibility follow-up	Product owner	Open	Product decision on which v1 endpoints and behaviors are guaranteed for partners.
2026-08-16	Release and smoke-test authenticated /create SSR through the internal Go identity bridge while confirming the updated production Web configuration remains database-free.	Before closing the 498c2fa production repair rollout	Deployment owner	Open	Publish and deploy the updated Web image and ACK configuration, authenticate as a platform user, request /create, verify the RSC error is resolved through Go /api/auth/me, and recheck public readiness.

Use

Record only commitments that should affect future sessions. Routine next steps can stay in 30-worklog/current-state.md.