List view
The RPO=0 end-state for clustered deployments: upgrade the in-sync raft replica, promote (committed-log fence), upgrade the old primary. Needs prod running clustered.
No due date•0/1 issues closedRemove the upgrade downtime on a single node: systemd socket-activation (no connection-refused) + a fast state handoff (tmpfs / streamed old->new) with a -LOADING cutover freeze.
No due date•0/3 issues closedironcache upgrade MVP: the verified self-updater spine (fetch/verify/atomic-swap/health-gate/auto-rollback) + a data-safe snapshot-reload swap with a write-freeze. Works on the single-node prod box; loss-free, brief downtime.
No due date•2/4 issues closedCritical-path gate: these issues must be resolved or fully specified before the first implementation PR merges. Sequence is in docs/ROADMAP.md and the roadmap tracking issue; waves are the wave:0..3 labels.
No due date•43/43 issues closedDecisions resolved to the point a prototype can be built.
No due date•58/58 issues closedThe subsystem design specifications and their decisions.
No due date•47/47 issues closedTenets, scope, committed non-goals, and the research foundations.
No due date•17/17 issues closed