This page exists so any operator, human, agent, or the review loop, can continue the work from a cold start. Every item links an issue that stands alone, and the deeper context lives in the linked planning docs. When an item lands, close its issue and strike it here in the same change.
The state of the site itself: the vocabulary is settled (cub-noun-vocabulary.md), the value ladder is on the spine, two audit rounds are acted on, and the homepage carries the recorded-live platform story. The site is ready for real visitors.
Continue the replica track, in order
The staged plan is eks-inf-replica-plan.md. Stage A.1 landed with the closure map in data/eks-inf-replica.
- ~~#1671 Stage A.2. Rebuild the three rendered components from catalog inputs and compare object sets.~~ Done: the parity report shows byte-exact literals, spec parity except the ACK deletion policy, sync-wave ordering as the one metadata class, and seven authored objects.
- ~~#1672 Stage B. Run the composition verdict of composition-certification.md over the assembled stack, its first real target.~~ Done: the verdict passes five checks, names findings on three, catches the hand-caught karpenter-aws defect and more, and proves every check can fail via self-test.
- ~~#1673 Stage C. Rebuild the ConfigHub organization with generic tooling and compare it with the plugin's own sandbox build.~~ Done, shape parity: the comparison finds the twenty-space rebuild identical to the plugin's on every compared dimension, and the run leaves the server as it found it.
- ~~#1674 Stage D. Accept the inference workloads on simulated GPU capacity through the governed path.~~ Done: the receipt shows the governed delivery, the pre-capacity refusal, both GPU pods scheduling onto simulated capacity, and the smoke pod's own log naming the boundary.
- #1581 The real H100 serving run stays the final rung, blocked on GPU capacity and NGC access. Its receipt is what earns the AI story a homepage card; until then the homepage keeps the calm AI door by owner decision.
Close the delivery and proof follow-ups
- ~~#1675 Repeat the proven Argo delivery lane with Flux as the reconciler, kind only.~~ Done: the receipt shows two exact digest handoffs, the initial release and a governed change, with Flux applying precisely the digests ConfigHub published.
- ~~#1677 Record an AI operator driving the whole ladder, check, upload, release, promote, as committed evidence with the human approving at the gates.~~ Done: the receipt carries every rung, the refused-then-approved gate, the reproduced clone trap and its fix, and the promoted set equal to the base head canonically.
- #1667 Surface the existing package and index signing on the security page, with the trust anchor named exactly.
Finish the vocabulary alignment
- ~~#1676 Align the prototype cub scripts under examples/cub-* with the settled noun and verb table.~~ Done: check inspects a config or an app, sandbox renders a stack, upload replaces install, and the help text carries the same one-line meanings.
Prepare the human-gated proofs
- ~~#1678 Write the real-human trial protocol.~~ Done: the protocol and the Site trial feedback issue template are committed, and running the first three trials needs only three links sent by the owner.
- The fresh-organization acceptance run for the Kubara example is staged in confighub/kubara-confighub#8. Everything is preparable by an agent; creating and selecting the fresh organization is the owner's step.
- The commercial roadtest and the config-versus-component naming decision are owner conversations. The pitch materials exist outside this repository.
The spine, checked
On 2026-08-31 every entry door and midpoint was checked live on the deployed site and against its proof. All doors serve the shipped copy, the machine entries parse, and the in-browser check and promote assets load. Each entry and midpoint carries a current or continuously re-verified proof: the Catalog and its receipts run in the verify chain on every pull request, the check and the gated promotion ran live in the operator-ladder record, the governed delivery holds for Argo CD and Flux, and the platform keystone carries the replica track. The named gaps are unchanged: the real-GPU run, the hosted no-sign-in path the offering page already calls planned, and the human-gated proofs below.
Hand the engineering builds to their owners
- #1660 The disruptive-change classifier on proven blast-radius evidence.
- #1582 The GPU Operator release review and promotion test.
- A live-state reporter that feeds fleet state back into ConfigHub is named in the demand map but has no owner or issue yet, because it belongs to the product rather than this repository.
Leave the parked work parked
The cub 0.4 migration PRs, #1635, #1651, and #1652, stay with the review loop that owns merges. Do not rebase or absorb them from here.