feat(governance): require an authoritative project charter for every managed project #987
Closed
opened 2026-07-31 06:05:41 -05:00 by jcwalker3
·
0 comments
No Branch/Tag Specified
master
fix/issue-987-native-mcp-bootstrap
feat/issue-985-project-scoped-launcher-identity
fix/issue-983-cross-repo-base-ref
feat/issue-980-stale-worker-retirement
fix/issue-975-client-identity-heartbeat
fix/issue-973-cross-repo-canonical-roots
fix/issue-970-safely-resolve-missing-worktrees
fix/issue-969-native-mcp-bootstrap
feat/issue-664-break-glass-restart
feat/issue-708-mcp-namespace-attachment
feat/issue-665-restart-audit
fix/issue-700-durable-walls
fix/issue-704-prevent-env-workspace-bindings
feat/issue-707-cross-project-boundaries
fix/issue-690-review-profile-switch-guard
fix/issue-953-bootstrap-lock-provenance
feat/issue-949-native-fleet-inventory
fix/issue-943-runtime-context-helpers
fix/issue-945-owning-pr-renewal-evidence
fix/issue-941-scope-guard-bootstrap-wiring
docs/issue-930-remote-mcp-coupling-inventory
fix/issue-892-author-bootstrap-deadlock
fix/issue-686-detect-reject-manual-mcp
fix/issue-672-mcp-config-drift
fix/issue-689-deterministic-mcp-namespace
feat/issue-666-concurrent-mcp-restart-tests
feat/issue-659-maintenance-drain-mode
feat/issue-648-notifications-console
fix/issue-670-direct-master-incident
feat/issue-644-console-recovery
feat/issue-650-providers-insights
feat/issue-669-scoped-component-recovery
docs/issue-668-mcp-ha-rolling-restart
feat/issue-667-console-restart-controls
feat/issue-645-linkage-console
feat/issue-643-request-preview-initiate
fix/issue-897-permission-stale-runtime-classification
feat/issue-641-runtime-session-view
feat/issue-663-restart-classes
feat/issue-661-drain-proof-hard-gate
fix/issue-854-semantic-container-exclusion
issue-640
fix/issue-682-starlette-httpx2
v1.1.0
Labels
Clear labels
allocator
anti-stomp
architecture
bug
chore
codex
concurrency
contamination
control-plane
dashboard
database
design
documentation
enhancement
gitea
glitchtip
important
incident
incident-bridge
integration
jenkins
labels
leases
mcp
mcp-health
mcp-menu
multi-project
mutating
nice-to-have
observability
portability
preflight
protected-branch
queue
read-only
reconnect
recovery
refactor
release
reliability
resumable-review
reviewer
roadmap
safety
security
self-hosted
sentry
stale-runtime
status:blocked
status:in-progress
status:pr-open
status:ready
terminal-lock
testing
tracker
type:bug
type:feature
type:feature
type:guardrail
visibility
workflow
workflow-hardening
workflow-hardening
bug
duplicate
enhancement
help wanted
invalid
question
wontfix
Controller-owned work allocator
Prevent concurrent LLM session stomping
Architecture / structural design
OpenAI Codex client / workflow session surface
Concurrent session safety
Workflow or session contamination incident
MCP control-plane coordination and allocation authority
MCP operational dashboard/queue view
Internal coordination storage (SQLite/Postgres)
Design / investigation, no implementation
Docs / runbooks
New feature or improvement
Gitea MCP workflow
GlitchTip integration
Operational or process incident requiring durable audit trail
Sentry-to-Gitea incident bridging
Integration testing
Jenkins integration
Label taxonomy management
Lease adopt/release/expire lifecycle
MCP server / tooling
MCP namespace and runtime health
MCP menu surface
Work spanning multiple monitoring projects or Gitea repos
Mutating action; requires gating
Observability, metrics, traces, error reporting
Cross-platform / portability
Shared preflight gates before mutation
Protected branch / stable-branch policy concern
Work queue visibility and allocation
Read-only, no mutation
MCP client reconnect/reload recovery path
Recovery paths for stale/foreign leases
Code refactor / restructure
Release / versioning
Reliability / failure handling
Persist and resume prepared review verdicts across sessions
Reviewer workflow tooling
Roadmap / umbrella issue
Safety rails and fail-closed mutation guards
Security / trust boundary
Self-hosted infrastructure integration
Sentry error monitoring integration
Stale backend daemon / runtime-vs-master parity failures
Issue is blocked
Issue is being worked on
Issue has an open pull request
Issue is ready for work
Terminal review lock (#332) path
Tests / test coverage
Issue tracker hygiene / meta
Bug or defect
Feature or enhancement
Feature or enhancement
Safety gate or guardrail
Workflow state visibility for LLMs/operators
Cross-tool workflow
LLM workflow coordination hardening
LLM workflow coordination hardening
Something is not working
This issue or pull request already exists
New feature
Need some help
Something is wrong
More information is needed
This won't be fixed
No labels
type:feature
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: Scaled-Tech-Consulting/Gitea-Tools#987
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Every software project managed through this system must contain an approved project charter that serves as the ultimate source of truth for the project’s purpose, direction, governing principles, and definition of success.
The charter must be reviewed before an LLM selects or performs work. If proposed work would change the project’s fundamental direction, the LLM must stop and present the change to a human operator for a decision.
This requirement also preserves the project rule that no implementation or operational change begins without an issue.
In scope for Gitea-Tools (this repository) — first landing
PROJECT_CHARTER.mdat the repository root (operator draft with required metadata).AGENTS.mdat the charter without duplicating or replacing it.Problem
Implementation details, individual issues, and workflow mechanisms can gradually steer a project away from its original purpose. An LLM may optimize a local task without recognizing that the task conflicts with the project’s fundamental goal.
Session memory, prompts, issue titles, and implementation documentation are not reliable substitutes for an authoritative governing document.
Without a charter:
Governing model
Each managed project must have a canonical charter stored at the repository root:
PROJECT_CHARTER.mdThe charter is the ultimate source of truth for project purpose, operating model, non-negotiable principles, authority boundaries, non-goals, definition of success, and human change-control.
Gitea remains the authoritative execution record for issues, PRs, reviews, merges, and history.
No-work-without-an-issue rule
No implementation, remediation, refactor, operational change, or charter amendment may begin without an open Gitea issue authorizing and defining that work.
Investigation may prepare or validate an issue; it must not silently become implementation. Every implementation PR must reference its governing issue. The charter itself may be introduced or amended only through a dedicated issue and a separately reviewable charter change.
Required charter metadata
Each charter must identify at least: Charter ID, version, status, project/repository binding, approval authority, approval date, charter revision or commit SHA, and content hash when used by enforcement.
Mandatory LLM startup behavior
Before work selection or mutation, an LLM must resolve the project, retrieve and read the canonical charter from the default branch, acknowledge the exact version/revision/hash, and confirm intended activity is governed by that charter.
AGENTS.mdmay point to the charter but must not replace it.MCP enforcement (follow-up)
The MCP/control plane should provide a charter acknowledgement gate bound to repository identity, charter version/revision/hash, and trusted client-instance identity, failing closed until acknowledgement is recorded.