a00f5cb0654084b2cbf407fafe3acf76941df269
New compliance.md leaf: French bookkeeping obligations mapped to fleet mechanisms — inaltérabilité (L.123-22) via an append-only production ledger grammar (create/validate/pay/avoir, never mutate a validated document) enforced by a promote-plan compliance linter; FEC (L.47 A LPF) with quarterly export + Test Compta Demat validation (accounting- module binding flagged as unverified gap); piste d'audit fiable (289 VII CGI) framed as a by-product of journals + tx-id reco + monthly packs; retention, numbering, copie fiable; loi anti-fraude scoped out (B2B-only) with BlockedLog as sandbox-first belt-and-braces. New Environments section in agent-architecture: prod = the ledger (grammar-bound), sandbox = disposable iso-prod rehearsal (exempt, never wired to production third parties); side_effect_class -> environment/ credential mapping; POCs write on sandbox only; evals target fresh checkpoints; irreversible-by-design features trial on checkpoints. Woven through hub (goal, requirement, success criteria, leaves table), T03/T05/T15 guardrails, QA (linter suite, pure-append snapshots, FEC cadence, PAF evidence framing), C2, POC-1 exit criteria. Co-Authored-By: Claude Fable 5 <[email protected]>
Merge pull request 'fix(iac): pin cloudflare provider + lockfile, trust homelab CA in gitea provider' (#12) from arcodange/iac-provider-fixes into main
Merge pull request 'feat(argocd): onboard prospection dans l'app-of-apps' (#20) from arcodange/onboard-prospection into main
Arcodange Factory
%%{init: { 'logLevel': 'debug', 'theme': 'base', 'rough':true } }%%
flowchart
prepare_hd>HD setup]
prepare_pg>PG Setup]
prepare_gitea>Gitea Setup]
origin_repo[[original repositories]]
github_repo_m[[gitea mirrors]]
gitlab_repo_m[[gitea mirrors]]
origin_repo -. mirrored .->gitlab_repo_m
origin_repo -. mirrored .->github_repo_m
tofu.state -. manages providers/go-gitea .- origin_repo
tofu.state -. manages providers/gitlabhq/gitlab .- gitlab_repo_m
tofu.state -. manages providers/integrations/github .- github_repo_m
subgraph Home
subgraph pi1
runner[/gitea runners\]
subgraph small HD
backup_data
end
end
subgraph pi2
PG[(Postgres)]
subgraph Gitea
origin_repo
end
subgraph HD
PG_data
Gitea_data
end
end
subgraph pi3
subgraph ai
ollama
end
end
subgraph "master (macbook pro)"
ansible{{ansible control-node}}
tofu{{opentofu control-node}}
subgraph ansible_scripts
direction TB
prepare_hd --> prepare_pg --> prepare_gitea
end
end
end
subgraph Internet
subgraph Gitlab
subgraph Group Arcodange
gitlab_repo_m
end
end
subgraph Github
subgraph Organization Arcodange
github_repo_m
end
end
subgraph GCP
subgraph project arcodange
subgraph gs://arcodange-tf
tofu.state
end
end
end
end
tofu == plan/apply ==> tofu.state
ansible == deploy ==> HD
ansible == deploy ==> PG
ansible == deploy ==> Gitea
ansible --- ansible_scripts
classDef done fill:gold,stroke:indigo,stroke-width:4px,color:blue;
class prepare_hd,nodeId2 done;
Documentation
- 📚
doc/— ADR (décisions d'architecture) + runbooks. - 🚀 Runbook : mettre en service une nouvelle application web — dépôt Gitea, base de données, Vault, chart Helm, Terraform, CI, ArgoCD.
🏹💻🪽
Languages
HCL
31.9%
Mermaid
28.4%
Python
15.5%
Dockerfile
9.4%
Jinja
6.8%
Other
8%