Tyler J King
c0959a5376
Implements the full founding-guild onboarding stack across four phases: Phase A — Keycloak OIDC auth pipeline (oidcc) + guild registration with ceremony-engine approval (SingleApproval, hub operator approves via gRPC). Phase B — Founding schematic templates (MSP/ISV/NSP TOML), gRPC clients for ceremony-service and ffc-schematic-server, schematic fork/bind/realize LiveView with DB audit trail in guild_schematics. Phase C — RealizationPoller GenServer polling realization status every 5s, PubSub broadcast, live realization dashboard showing 7 reconciler sections. Phase D — Self-service member onboarding (join request → guild master approval via ceremony), member management LiveView, auto-create guild master on guild approval via Ecto.Multi transaction. Includes K8s manifests for ceremony-service (port 50053) and ffc-schematic-server (port 9091) as ClusterIP services, plus updated guildhall deployment with OIDC and gRPC service URL env vars. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Tyler J King <tking@guildhouse.dev>
36 lines
767 B
TOML
36 lines
767 B
TOML
[meta]
|
|
template_name = "isv-founding"
|
|
description = "Independent Software Vendor founding schematic"
|
|
source_schematic = "guildhouse-isv-base"
|
|
source_version = "1.0.0"
|
|
|
|
[consortium]
|
|
realm = "{{guild_slug}}"
|
|
description = "{{guild_name}} ISV Consortium"
|
|
|
|
[trust_domain]
|
|
spiffe_trust_domain = "{{trust_domain}}"
|
|
attestation_tier = 1
|
|
|
|
[identity_authority]
|
|
provider = "keycloak"
|
|
url = "https://auth.guildhouse.dev"
|
|
realm = "{{guild_slug}}"
|
|
trust_level = "federated"
|
|
mfa_required = false
|
|
|
|
[ceremonies.code_change]
|
|
type = "single_approval"
|
|
eligible_roles = ["master", "journeyman"]
|
|
quorum = 1
|
|
|
|
[ceremonies.governance_change]
|
|
type = "single_approval"
|
|
eligible_roles = ["master"]
|
|
quorum = 1
|
|
|
|
[members]
|
|
initial_roles = ["master"]
|
|
|
|
[infrastructure]
|
|
compute_attestation_tier = 1
|