10.0 Ratified Architecture PRDs

chinwag board push --verify-receipts

Publicly ratified engineering Product Requirements Documents (PRDs) and Request for Discussion (RFD) specifications backing Chinwag's live GitHub Projects v2 and Linear boards.

10.0 Ratified Architecture PRDs

chinwag board push --verify-receipts

Outcome Summary & Two-Tier Public/Confidential Spec Governance (INV-PUBLIC-REPO-SAFE-01): Every Epic and Feature card on the Chinwag Live Engineering Board (github.com/orgs/emunlabs/projects/1) links directly to a version-controlled, cryptographically signed engineering PRD. Rather than burying specs in unreviewed GitHub Wikis that bypass CI gates and .codegraph indexing, finalized public architecture PRDs live in Git (content/10.prds/), pass the 4-layer H_docs zero-leak redaction gate, and compile directly into docs.chinwag.sh/prds/ and llms-full.txt.


1. Why Public Architecture PRDs Live in Git + docs.chinwag.sh (Not GitHub Wiki)

  1. Enforced by chinwag-ci & H_docs Zero-Leak Gates: GitHub Wikis live in a detached .wiki.git sidecar repository that bypasses Pull Request checks, branch protection, and chinwag-ci redaction scanners. Storing PRDs in versioned Markdown under content/10.prds/ guarantees every spec change passes INV-DOCS-ZERO-LEAK-01, INV-CORP-ADDRESS-ONLY-01, and chinwag-ci ui-gate before publication.
  2. Indexed in .codegraph & SurfaceImpactManifestV1: Because PRDs live in the primary repository tree, .codegraph binds each PRD (prd_id) directly to its Rust crates, CLI flags, website pages, and board tickets (CHWG-XXXX).
  3. First-Class llms.txt & llms-full.txt Indexing: Every public PRD in Section 10 is compiled into https://docs.chinwag.sh/llms-full.txt so AI coding assistants (Claude, Codex, Gemini, Cursor) can ingest the exact wire protocols, XNU Seatbelt profiles, and threat models without hallucinating flags.
  4. Two-Tier Visibility Gate (visibility: public vs. visibility: confidential):
    • Public Architecture PRDs (visibility: public): Open systems specifications—including Ephemeral Tart Cleanroom VMs (PRD-0035), Autonomous Delivery Boards (PRD-0038), Cursor Agent SDK Migration (PRD-0036), the Chinwag Local Web App (PRD-0039), and A.509 Agent PKIX (draft-spector-a509-agent-pkix-00)—are published here and linked directly from public board cards.
    • Confidential Specs (visibility: confidential): Specs assigned to confidential seats (e.g., @PATENT) remain hard-locked to private repositories (public: false by default) and are blocked from public board or docs publication by INV-PUBLIC-REPO-SAFE-01.

2. Ratified Public Architecture PRDs Catalog

PRD IDBoard TicketTitle & Architectural ScopeStatusSpec Link
PRD-0035CHWG-0202Ephemeral Tart APFS Cleanroom VMs, Read-Only VirtioFS /nix/store & Multi-Mac Runner Swarm — 1.8s APFS CoW macOS VMs, <200ms zero-download VirtioFS /nix/store + sccache, zero-Nix-syntax jinx lockfiles, and 2-tier trust isolation.RATIFIED · SCOPED10.1 Tart Cleanroom VMs & Nix Store
PRD-0038CHWG-0192Chinwag Delivery-2 Executable Boards & 4-Surface Proof-of-Green — Bi-directional GitHub Projects v2 & Linear state machine, 200ms snap-back (INV-NO-FAKE-DONE-01), and SUM(Net Hours Saved) executive telemetry.RATIFIED · SHIPPED10.2 Executable Delivery Boards
PRD-0036CHWG-02041-Command Cursor Agent SDK & Projects Importer with Static RCE Quarantine — Deterministic <500ms migration (chinwag agent import-cursor) with 5-gate MCP command-injection and PhantomVault secret scrubbing (INV-CURSOR-IMPORT-SAFE-01).RATIFIED · SCOPED10.3 Cursor Agent SDK Importer
PRD-0039CHWG-0203Chinwag Local Web App (chinwag ui --open) & Zero-Knowledge Slack/GitHub/Linear Bridge — Customer-first local web interface for active tasks, self-healing CI, diff & visual previews, usage & credits, and zero-knowledge deep-link routing.IN FLIGHT · REDESIGN10.4 Chinwag Local Web App
IETF-A509CHWG-0188A.509 Agent Public Key Infrastructure (draft-spector-a509-agent-pkix-00) — Hardware-bound Ed25519 + ML-DSA-65 agent identity certificates, SOUL.md / AGENT.md / TOOL.md Merkle commitments, and sole-keypair bijection.PUBLISHED · IETF ID7.5 A.509 Agent PKIX · Full IETF Draft ↗