ahmido
dedca3c612
What’s included • specs/039-inventory-program/ — program/epic overview (vision + phased plan) • specs/041-inventory-ui/ — UI skeleton (Inventory list, Coverage, Sync Runs) • specs/042-inventory-dependencies-graph/ — dependency graph skeleton (assignments/filters/scope tags → later) • specs/043-cross-tenant-compare-and-promotion/ — compare/promotion skeleton (read-only first; writes gated later) • specs/044-drift-mvp/ — drift detection skeleton (read-only by default) Why We need a clear, spec-first structure for: • separating Inventory (“last observed”) from Snapshots/Backups (immutable) • scaling to MSP / multi-tenant workflows (portfolio, compare, monitoring) • making future modules (security suite, drift, promotion) consistent with the Constitution (fail-safe, auditability, contract-driven Graph) Scope / Non-goals (this PR) • No implementation tasks executed • No DB migrations, services, jobs, or UI changes • No changes to Graph contracts or supported policy types Review focus • Naming/numbering and folder structure (spec.md, plan.md, tasks.md for each spec) • Scope boundaries and non-goals across 041–044 • Alignment with Constitution principles (tenant isolation, read-only default for analysis, explicit gating for high-risk writes) Follow-up (next PRs) • Spec 040: Inventory Core (data model + selection hash + missing semantics + NFRs + tests) • Implementation PRs will be split per spec (040 → 041 → 042/043/044) ⸻ Co-authored-by: Ahmed Darrazi <ahmeddarrazi@adsmac.local> Reviewed-on: #42
25 lines
578 B
Markdown
25 lines
578 B
Markdown
# Implementation Plan: Cross-tenant Compare and Promotion
|
||
|
||
**Date**: 2026-01-07
|
||
**Spec**: `specs/043-cross-tenant-compare-and-promotion/spec.md`
|
||
|
||
## Summary
|
||
|
||
Introduce read-only cross-tenant comparison views; optionally add promotion with strong safety gates.
|
||
|
||
## Dependencies
|
||
|
||
- Inventory core + UI (Specs 040–041)
|
||
- Strong authorization model for multi-tenant access
|
||
|
||
## Deliverables
|
||
|
||
- Tenant selection + comparison view
|
||
- Safe diff output and export
|
||
- (Optional) gated promotion workflow
|
||
|
||
## Risks
|
||
|
||
- Data leakage across tenants
|
||
- Over-scoping promotion beyond safe MVP
|