From 6066fff75b9ca45e2261ce3783d320d0dd135051 Mon Sep 17 00:00:00 2001 From: Otto Date: Sat, 30 May 2026 10:38:26 -0400 Subject: [PATCH] backlog(B-0942): co-dominant git mirrors + git-native CRDT coordination (no host needed) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Aaron 2026-05-30 (yes-file-it + refinement): coordination is GIT-NATIVE — CRDT consensus over push/pull; the consensus lives in the commit DAG, not a server, so NO git HOST is needed for coordination. Hosts (local + GitHub + GitLab/Gitea/ Forgejo + free-OSS) are CO-DOMINANT MIRRORS (transport/durability/reach), not coordination-authorities — none subordinate, none droppable-breaks-coordination. GitLab optional/heavy; 'we only need git to function' (Gitea/Forgejo/bare-SSH + Argo Workflows suffice). Generalizes the LFG↔AceHack 2-host mirror to N co-dominant hosts; B-0883.2's anti-monoculture hedge at git-host scope. The sovereignty property: lose any mirror (incl GitHub), keep coordinating. Composes lfg-acehack-topology + B-0424 + B-0883.2 + DBSP/CRDT substrate + accelerator event-store-schema + the harvest (local-LLM = thinks-locally half; this = git-substrate-the-cluster-coordinates-over half). Co-Authored-By: Claude Opus 4.8 --- docs/BACKLOG.md | 1 + ...ination-no-host-needed-aaron-2026-05-30.md | 131 ++++++++++++++++++ 2 files changed, 132 insertions(+) create mode 100644 docs/backlog/P2/B-0942-co-dominant-git-mirrors-git-native-crdt-coordination-no-host-needed-aaron-2026-05-30.md diff --git a/docs/BACKLOG.md b/docs/BACKLOG.md index 62ba661fd2..c25cd6a5da 100644 --- a/docs/BACKLOG.md +++ b/docs/BACKLOG.md @@ -889,6 +889,7 @@ are closed (status: closed in frontmatter)._ - [ ] **[B-0934](backlog/P2/B-0934-backlog-index-integrity-required-or-advisory-decision-2026-05-29.md)** Decide whether backlog-index-integrity is required or explicitly advisory - [ ] **[B-0937](backlog/P2/B-0937-redundancy-checks-across-satellites-and-rules-mirror-beacon-rhyme-retirement-hub-over-budget-detector-2026-05-29.md)** Redundancy-checks across satellites + rules — duplicate-content audit, mirror→beacon rhyme-retirement, hub-over-budget detector - [ ] **[B-0939](backlog/P2/B-0939-self-propagating-markdown-compiler-rule-bootstrap-traveler-template-every-md-propagates-or-doesnt-compile-aaron-mika-2026-05-30.md)** Self-propagating-Markdown compiler-rule + bootstrap-traveler template (every .md is a self-propagating pattern through time or it doesn't compile) +- [ ] **[B-0942](backlog/P2/B-0942-co-dominant-git-mirrors-git-native-crdt-coordination-no-host-needed-aaron-2026-05-30.md)** Co-dominant git mirrors + git-native CRDT coordination — no host needed for coordination (local + GitHub + GitLab/Gitea/Forgejo + free-OSS git as co-dominant collaborating mirrors) ## P3 — convenience / deferred diff --git a/docs/backlog/P2/B-0942-co-dominant-git-mirrors-git-native-crdt-coordination-no-host-needed-aaron-2026-05-30.md b/docs/backlog/P2/B-0942-co-dominant-git-mirrors-git-native-crdt-coordination-no-host-needed-aaron-2026-05-30.md new file mode 100644 index 0000000000..27416b5fce --- /dev/null +++ b/docs/backlog/P2/B-0942-co-dominant-git-mirrors-git-native-crdt-coordination-no-host-needed-aaron-2026-05-30.md @@ -0,0 +1,131 @@ +--- +id: B-0942 +priority: P2 +status: open +title: Co-dominant git mirrors + git-native CRDT coordination — no host needed for coordination (local + GitHub + GitLab/Gitea/Forgejo + free-OSS git as co-dominant collaborating mirrors) +tier: sovereignty-infrastructure +ask: Aaron 2026-05-30 +created: 2026-05-30 +last_updated: 2026-05-30 +decomposition: leaf +composes_with: + - .claude/rules/lfg-acehack-topology.md + - docs/backlog/P1/B-0424-three-repo-split-stage1-create-forge-ace-with-scaffolding-aaron-2026-05-13.md + - docs/backlog/P2/B-0883.2-multi-cipher-pq-substrate-nist-plus-saber-ntru-prime-frodo-hedge-against-nist-monoculture-per-operator-2026-05-28.md + - tools/accelerator/event-store-schema.ts +tags: [sovereignty, git, crdt, coordination, mirrors, anti-monoculture, gitops, offline, agent-cluster] +type: design +--- + +# B-0942 — Co-dominant git mirrors + git-native CRDT coordination (no host needed) + +## Origin + +Aaron 2026-05-30, completing the sovereign-agent vision (a machine that thinks +locally via the local LLM + commands its own k3s/argocd cluster): + +> *"i want to have gitlab and github and even other open source git free +> infrastructure all as co-dominant mirrors that collaborate with local."* + +then the load-bearing sharpening: + +> *"we don't have to use gitlab locally if it's too heavy — we can use something +> lighter and argo workflows. gitlab has some good features but we only need git +> to function. all our CRDT consensus happens git-native — just push and pulls. +> no host needed for coordination."* + +## The load-bearing insight — coordination is git-native; hosts are mirrors + +**Coordination/consensus is git-native: CRDT semantics over git push/pull. The +consensus lives in the commit DAG, not in any host's server.** Therefore **no git +HOST is needed for coordination** — the host is pure transport / durability / +reach, never a coordination-authority. + +This inverts the usual assumption (the git *host* — GitHub/GitLab — is the +source-of-truth/coordination-point). Here: + +| Concern | Where it lives | +|---|---| +| **Coordination / consensus** | git-native — CRDT merge over the commit DAG; push/pull is the gossip/sync; convergence is the merge. **No host.** | +| **Transport / durability / reach** | the hosts (mirrors) — local + GitHub + GitLab/Gitea/Forgejo + other free-OSS git | +| **CI / workflows** | Argo Workflows (k3s) + GitHub Actions etc. — also host-agnostic; the agent's workflows/DUs are git-defined (B-0868) | + +Because coordination is git-native, **no single host can gatekeep coordination** — +the agent coordinates via its own local git + push/pull to any/all mirrors. That +is the sovereignty: the cluster can lose any mirror (including GitHub) and keep +coordinating. + +## Co-dominant mirrors (not a primary + backups) + +All git hosts are **co-dominant mirrors that collaborate with local** — none is +subordinate, none is the authority: + +- **local** (in-cluster git — the sovereign node; Gitea/Forgejo if a server is + wanted, or bare git remotes over SSH — "we only need git to function") +- **GitHub** (current LFG primary — becomes one co-dominant mirror) +- **GitLab** (good features, but *optional* — heavy; use only if its features earn + their keep) +- **other free-OSS git infrastructure** (free tiers honored per the + forgiveness-budget; Codeberg/Forgejo/etc.) + +This generalizes the existing **LFG↔AceHack 2-host mirror** topology +([`.claude/rules/lfg-acehack-topology.md`](../../../.claude/rules/lfg-acehack-topology.md)) +to **N co-dominant hosts**, and it is **B-0883.2's anti-monoculture hedge applied +to git-hosting** — don't lock to one host (same shape as "don't lock to NIST +lattices"): host-agility, not host-monoculture. + +## Why lighter-is-fine (Aaron's GitLab-optional point) + +"We only need git to function." The coordination doesn't need GitLab's heavy +feature set (issues/CI/registry) — those are conveniences. The minimum viable +sovereign git is: a git remote the cluster controls (Gitea/Forgejo/bare-SSH) + +push/pull to the co-dominant mirrors. Argo Workflows (already in the k3s stack) +covers CI/workflow needs host-agnostically. GitLab is an *opt-in mirror* for its +features, never a dependency. + +## What to evaluate / build + +1. **Decide the local git server** (Gitea / Forgejo / bare-SSH remote) for the + in-cluster sovereign mirror — lightest thing that gives push/pull (NixOS module + in `full-ai-cluster/`). +2. **Mirror-sync mechanism** — push/pull fan-out across co-dominant mirrors + (extends the LFG↔AceHack fast-forward protocol to N hosts; handle divergence + via the CRDT merge, not host-arbitration). +3. **Confirm the git-native CRDT coordination** — document/verify that the + framework's consensus (DBSP +1/-1 retraction algebra / Z-sets as CRDTs, per + B-0824's DBSP lineage + the `algebra-owner`/`crdt-expert` skills + the + accelerator `event-store-schema.ts` git-native event store) requires only + push/pull, no coordination-host. +4. **Argo Workflows** for host-agnostic CI/workflow execution on the cluster. + +## Acceptance + +1. A design doc (or this row's Resolution) establishing: coordination is + git-native (no host); hosts are co-dominant mirrors; the minimum-viable + sovereign-git choice + the N-host mirror-sync protocol. +2. Clear statement that any single host (incl. GitHub) is droppable without + losing coordination — the sovereignty property. + +## Composes with + +- [`.claude/rules/lfg-acehack-topology.md`](../../../.claude/rules/lfg-acehack-topology.md) + — the 2-host mirror this generalizes to N co-dominant hosts +- [B-0424](B-0424-three-repo-split-stage1-create-forge-ace-with-scaffolding-aaron-2026-05-13.md) + — repo-split (forge/ace); the mirror set spans the split repos +- [B-0883.2](../P2/B-0883.2-multi-cipher-pq-substrate-nist-plus-saber-ntru-prime-frodo-hedge-against-nist-monoculture-per-operator-2026-05-28.md) + — anti-monoculture hedge pattern (this is that pattern at git-host scope) +- `tools/accelerator/event-store-schema.ts` — git-native event store (the + coordination substrate) +- DBSP/CRDT substrate — `.claude/skills/algebra-owner/SKILL.md`, + `.claude/skills/crdt-expert/SKILL.md`, B-0824's DBSP +1/-1 lineage +- The harvest (#6120 / B-0941) — local-LLM = the "thinks locally" half; this row + is the "git substrate the sovereign cluster coordinates over" half +- full-ai-cluster k3s + Argo (the cluster the agent commands) + +## Substrate-inventory pass (per verify-existing-substrate-before-authoring) + +- `grep -rliE "co.dominant|multi.*git.*host|forgejo|gitea"` docs/backlog .claude/rules + → no prior co-dominant-mirrors row; LFG↔AceHack 2-host mirror is the closest + precedent (this generalizes it); B-0424 is the repo-split (orthogonal) +- ID B-0942: highest on origin/main is B-0939; B-0940/B-0941 are on the in-flight + harvest (#6120); B-0942 is next free, no in-flight collision