This file keeps the high-priority proof gaps visible in the repo. The goal is to prevent the project from quietly drifting back into prose-only claims.
| Issue | Current status | What is now contract-backed | Still open |
|---|---|---|---|
| #4 HelmPlan pain report per chart | Redis acceptance satisfied | Redis now has helm-pain-report.yaml; HelmPlan links it; verifier checks that default Redis has no unhandled pain points. | Scale the richer report shape to every catalog chart. |
| #5 EffectiveValues@sha | Redis acceptance satisfied | Redis effective values include file/tree digests and provenance; render receipts and variant revisions bind the effective-values digest. | Full Helm value precedence across defaults, globals, and subcharts remains chart-by-chart work. |
| #6 Dead/unknown/ignored values | Redis acceptance satisfied | Redis has values-diagnostics.yaml with a synthetic wrong-key test; HelmPlan and ValueModel link it; verifier checks the finding. | Automate dead-key detection more broadly. |
| #7 Value-to-field explanation | Redis acceptance satisfied | Redis has value-source-map.yaml explaining replica count, release name, namespace, and password effects; verifier checks those entries. | Scale field-level provenance to the rest of the catalog. |
| #24 Artifact schemas and receipt verifier | P0 acceptance satisfied | schemas/ defines the core artifact contracts; npm run p0:contracts validates artifact kind/version, corpus invariants, observation evidence, capability refs, generated facts, and upgrade/rollback receipts; npm run verify checks the full graph. | Full JSON Schema validation of every artifact can be added after contract shape settles. |
| #25 Top-N adversarial harness | P0 acceptance satisfied | data/adversarial10/ has a locked corpus, generated HelmPlan/render receipts, proof-readiness.csv, control-point-summary.csv, and matrix.xlsx; top-500 catalog analysis exists separately. | Grow from adversarial-10 to automated top-20/top-100/top-500 execution with promotion gates. |
| #27 Observation freshness SLO | P0 acceptance satisfied | docs/reference/observation-freshness-slo.md defines fresh, stale, failed, unknown, not-observed, and drifted states; verifier checks receipt fields and evidence digests. | UI/API display of freshness status remains outside this repo. |
| #28 Generated fact receipt schema | Redis acceptance satisfied | Schema exists and Redis default emits a concrete generated fact receipt bound into the render receipt and variant revision. | The top secret-generating charts should emit concrete GeneratedFactReceipt examples. |
| #29 Capability profile catalog | Redis acceptance satisfied | Capability catalog exists with verified digests; Redis variants, render receipts, and variant revisions bind k8s-1.30-default. | Migrate every chart from inline kubeVersion/API lists to named profile references. |
| #30 Upgrade and rollback simulation receipts | First Redis exemplar landed | Schema exists and Redis has concrete upgrade/rollback simulation receipts for the default <-> reuse-existing-secret transition. | Add true old-version chart upgrade simulations next. |
Current Priority
- Keep
npm run verifygreen. - Convert Redis from "proof-grade" to the first complete production-support exemplar, including generated fact and upgrade/rollback receipts.
- Apply the same contracts to the other 19 catalog entries without making the user journey feel heavier than Helm.