Skip to content

docs: add release runbook covering 6 SPOFs (S0-3)#403

Open
Dumbris wants to merge 3 commits into
chore/sprint-0-housekeepingfrom
docs/release-runbook
Open

docs: add release runbook covering 6 SPOFs (S0-3)#403
Dumbris wants to merge 3 commits into
chore/sprint-0-housekeepingfrom
docs/release-runbook

Conversation

@Dumbris
Copy link
Copy Markdown
Member

@Dumbris Dumbris commented Apr 24, 2026

Summary

Ships docs/release-runbook.md covering the six single points of failure in the MCPProxy release pipeline called out in MCP-7 S0-3:

  1. macOS signing + notarizationcodesign + xcrun notarytool (release.yml / prerelease.yml)
  2. Windows installer signing — SignPath today, EV-cert decision doc pending (D30-6, GH Windows #45)
  3. Claude release notes generation — Anthropic API, non-blocking fallback
  4. Cloudflare R2 apt/yum publish — spec 043, stable tags only, GPG-signed metadata
  5. Homebrew tap bump — formula + cask in smart-mcp-proxy/homebrew-mcpproxy
  6. next branch hygiene — prerelease pipeline as early signing canary

Each section names the exact workflow job, required secrets + their expiry windows, and a recovery matrix. Written so an on-call engineer can unblock a failing release without re-reading the whole pipeline.

Cross-linked from specs/README.md under a new Operational runbooks section.

Stacking

Based on chore/sprint-0-housekeeping (PR #402) because that PR introduces specs/README.md. Retarget to main once #402 merges (GitHub handles this automatically).

Test plan

  • Markdown builds (no broken internal links against current repo layout)
  • Pre-commit passes (gofmt, whitespace, merge-conflict checks)
  • Reviewer confirms the recovery matrices match their muscle memory for the last few releases

Refs: MCP-9, MCP-7 (S0-3)

🤖 Generated with Claude Code

claude and others added 3 commits April 24, 2026 15:00
…igns

Two brainstormed designs produced from 2026-04-24 analysis of telemetry DB:

1. Retention telemetry hygiene + activation instrumentation + auto-start defaults
   - Payload schema v3 with env_kind, launch_source, autostart_enabled, activation funnel
   - Worker + dashboard + client changes across mcpproxy-go / mcpproxy-telemetry / mcpproxy-dash
   - D1 backup mandated before any migration, PII audit included

2. Diagnostics & error taxonomy deep-dive
   - Stable error-code catalog (MCPX_*) with per-code fix steps
   - Surfacing in tray, web UI, CLI; v3 telemetry extension for code counts + fix outcomes

Next steps: each design feeds a speckit.specify flow in its own worktree for
autonomous implementation + verification (unit, e2e, curl, chrome, ui-test MCP).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Bundled Sprint-0 housekeeping from MCP-7:

- S0-1: Add specs/README.md index. Every numbered spec gets a row with
  title + status badge derived from tasks.md completion, plus a section
  linking the design docs under docs/superpowers/specs/.
- S0-2/S0-4: Remove 18 tmp-agent-report-*.md execution logs from the
  repo root. Content worth keeping from spec 044 work already landed in
  docs/superpowers/specs/2026-04-24-*.md via 97f7426.
- Extend .gitignore so tmp-agent-report-*.md cannot reappear at repo root.
- Commit orphaned docs/screenshots/{tray-macos,web-ui}/ assets that were
  sitting untracked so they stop drifting.

Docs PR only, no code paths touched.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Ship docs/release-runbook.md covering the six release-pipeline single
points of failure called out in MCP-7 S0-3:

1. macOS signing + notarization (codesign + notarytool)
2. Windows installer signing (SignPath today; D30-6 decision pending)
3. Claude release notes generation (Anthropic API, non-blocking)
4. Cloudflare R2 apt/yum publish (spec 043, stable tags only)
5. Homebrew tap bump (formula + cask)
6. `next` branch hygiene (prerelease pipeline as early signing canary)

Each SPOF section names the exact workflow job, required secrets, expiry
windows, and a recovery matrix — written so an on-call engineer can
unblock a failing release without re-reading the whole pipeline.

Cross-linked from specs/README.md under a new "Operational runbooks"
section.

Refs: MCP-9, MCP-7 (S0-3)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@cloudflare-workers-and-pages
Copy link
Copy Markdown

Deploying mcpproxy-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 20bc35e
Status: ✅  Deploy successful!
Preview URL: https://ec2dca95.mcpproxy-docs.pages.dev
Branch Preview URL: https://docs-release-runbook.mcpproxy-docs.pages.dev

View logs

@Dumbris Dumbris force-pushed the chore/sprint-0-housekeeping branch from 89334c7 to ca00329 Compare May 20, 2026 05:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants