TRUSS-1: init code commit of truss

2026-07-14 06:50:09 -05:00
commit fdbe23e1d9
8 changed files with 2763 additions and 0 deletions
--- a/TODO-os.md
+++ b/TODO-os.md
@@ -0,0 +1,73 @@
+# Arcline OS — TODO
+
+Kanban board for **Arcline OS** — open-source / GPL track.  ([arcline.it](https://arcline.it)) and
+**The Arcline Project** ([arclineproject.org](https://arclineproject.org)).
+
+Move cards between sections as they progress: `Backlog → In Progress → In Review → Done`.
+Tag every card `[IT]` or `[OS]` so the two tracks stay easy to scan in one board.
+
+---
+
+## Codename Legend
+
+Codenames are architectural/masonry terms — fitting for a company named after an arch.
+
+| Codename    | Initiative                                   | Track | Status      |
+
+| Codename    | Initiative                                   | Track | Status      |
+
+| Codename    | Initiative                                   | Track | Status      |
+
+| Codename    | Initiative                                   | Track | Status      |
+
+| Codename    | Initiative                                   | Track | Status      |
+|-------------|-----------------------------------------------|-------|-------------|
+| Keystone    | Customer portal + billing overhaul            | IT    | In Progress |
+| Cornerstone | Arcline OS alpha → public ISO release         | OS    | In Progress |
+| Buttress    | `arcline-audit` hardening & CVE scan integration | OS | Backlog     |
+| Voussoir    | Migration tool (cPanel/Plesk → Arcline)       | IT/OS | Backlog     |
+| Springer    | Status page + uptime monitoring rollout       | IT    | In Review   |
+| Rampart     | Firewall/nftables default-deny profile pass   | OS    | Backlog     |
+| Lintel      | Docs site (docs.arcline.it) restructure       | IT    | Backlog     |
+| Plinth      | Referral program launch                       | IT    | Backlog     |
+| Abutment    | Workstation (KDE) build target                | OS    | Backlog     |
+
+
+
+
+
+
+
+
+
+
+
+
+---
+
+## Backlog
+
+- [ ] `[OS]` **Buttress** — wire `arcline-audit` into CI for nightly CVE scans <!-- id:9db1be1d-f875-4ebc-a55a-151c11bfe5b1 -->
+- [ ] `[OS]` **Rampart** — finalize default-deny nftables ruleset, document opt-in exceptions <!-- id:734eae2d-7617-4296-abee-4575553cea6b -->
+- [ ] `[OS]` **Abutment** — scope KDE Plasma workstation ISO target <!-- id:1ea38888-c4a7-4f3b-91c1-120b422abaef -->
+- [ ] `[IT/OS]` **Voussoir** — spec `arcline-migrate` cPanel import mapping <!-- id:86df261e-e1c8-48af-9aa9-551a0da4fe14 -->
+- [ ] `[OS]` — Grafana dashboard pack — ship default node_exporter + Loki dashboards <!-- id:fe511c5e-6de9-4eab-8b99-06c763505e82 -->
+
+## In Progress
+
+- [ ] `[OS]` **Cornerstone** — btrfs snapshot rollback QA pass <!-- id:b4ff74b8-f284-4e4e-bb12-a85ad0e70344 -->
+
+## In Review
+
+- [ ] `[OS]` — `arcline-dns` — multi-resolver propagation checker — code review open <!-- id:bcd256ac-3ab9-4ad2-8506-c3c3c40d3079 -->
+- [ ] `[OS]` **Cornerstone** — ISO build pipeline (Debian Bookworm base) <!-- id:1621bd98-ebd2-46b4-bd20-2c37bb900f48 -->
+
+## Done
+
+- [x] `[OS]` — Site launch — arclineproject.org landing page <!-- id:e184a3a5-a072-4214-b65d-846a9c09c8c0 -->
+- [x] `[OS]` — Toolchain announcement — 11 Go tools listed publicly <!-- id:ec7c5021-f0ac-49b7-b90e-5ce23c9ed360 -->
+
+## Notes
+
+- Board auto-generated from the master TODO.md
+