TRUSS-1: init code commit of truss

2026-07-14 06:50:09 -05:00
commit fdbe23e1d9
8 changed files with 2763 additions and 0 deletions
--- a/TODO.md
+++ b/TODO.md
@@ -0,0 +1,80 @@
+# Arcline — TODO
+
+In-house Kanban board for **Arcline IT** ([arcline.it](https://arcline.it)) and
+**The Arcline Project** ([arclineproject.org](https://arclineproject.org)).
+
+Move cards between sections as they progress: `Backlog → In Progress → In Review → Done`.
+Tag every card `[IT]` or `[OS]` so the two tracks stay easy to scan in one board.
+
+---
+
+## Codename Legend
+
+Codenames are architectural/masonry terms — fitting for a company named after an arch.
+
+| Codename    | Initiative                                   | Track | Status      |
+
+| Codename    | Initiative                                   | Track | Status      |
+
+| Codename    | Initiative                                   | Track | Status      |
+
+| Codename    | Initiative                                   | Track | Status      |
+|-------------|-----------------------------------------------|-------|-------------|
+| Keystone    | Customer portal + billing overhaul            | IT    | In Progress |
+| Cornerstone | Arcline OS alpha → public ISO release         | OS    | In Progress |
+| Buttress    | `arcline-audit` hardening & CVE scan integration | OS | Backlog     |
+| Voussoir    | Migration tool (cPanel/Plesk → Arcline)       | IT/OS | Backlog     |
+| Springer    | Status page + uptime monitoring rollout       | IT    | In Review   |
+| Rampart     | Firewall/nftables default-deny profile pass   | OS    | Backlog     |
+| Lintel      | Docs site (docs.arcline.it) restructure       | IT    | Backlog     |
+| Plinth      | Referral program launch                       | IT    | Backlog     |
+| Abutment    | Workstation (KDE) build target                | OS    | Backlog     |
+
+
+
+
+
+
+
+
+---
+
+## Backlog
+
+- [ ] `[OS]` **Buttress** — wire `arcline-audit` into CI for nightly CVE scans <!-- id:9db1be1d-f875-4ebc-a55a-151c11bfe5b1 -->
+- [ ] `[OS]` **Rampart** — finalize default-deny nftables ruleset, document opt-in exceptions <!-- id:734eae2d-7617-4296-abee-4575553cea6b -->
+- [ ] `[OS]` **Abutment** — scope KDE Plasma workstation ISO target <!-- id:1ea38888-c4a7-4f3b-91c1-120b422abaef -->
+- [ ] `[IT]` **Lintel** — restructure docs.arcline.it into per-tool sections <!-- id:85851b3d-ecd3-46ea-9870-4cc515670b13 -->
+- [ ] `[IT]` **Plinth** — build referral program signup + tracking flow <!-- id:b4c0421a-3201-424f-adce-f8399d848c05 -->
+- [ ] `[IT/OS]` **Voussoir** — spec `arcline-migrate` cPanel import mapping <!-- id:86df261e-e1c8-48af-9aa9-551a0da4fe14 -->
+- [ ] `[IT]` — Case studies page — draft first 2 client write-ups <!-- id:88242e2b-7218-42bd-9790-bd33e7649f3e -->
+- [ ] `[OS]` — Grafana dashboard pack — ship default node_exporter + Loki dashboards <!-- id:fe511c5e-6de9-4eab-8b99-06c763505e82 -->
+- [ ] `[IT]` — Game server plans — add automated backup scheduling to portal <!-- id:c4aae5af-f5f9-418b-b078-a6534c69f27e -->
+
+## In Progress
+
+- [ ] `[IT]` **Keystone** — customer portal (`arcline-portal`) SSL + ticketing UI <!-- id:d4ccf112-a52e-42c4-9ff5-0b986969cfb5 -->
+- [ ] `[IT]` **Keystone** — Stripe billing (`arcline-billing`) subscription sync <!-- id:e059813f-0c1f-4294-859d-b0b7d36ec5db -->
+- [ ] `[OS]` **Cornerstone** — btrfs snapshot rollback QA pass <!-- id:b4ff74b8-f284-4e4e-bb12-a85ad0e70344 -->
+
+## In Review
+
+- [ ] `[IT]` **Springer** — status page generator (`arcline-status`) — awaiting Blake's sign-off <!-- id:cfb2ee5e-ffe4-4c0a-9a2e-9e4204979ffd -->
+- [ ] `[OS]` — `arcline-dns` — multi-resolver propagation checker — code review open <!-- id:bcd256ac-3ab9-4ad2-8506-c3c3c40d3079 -->
+- [ ] `[OS]` **Cornerstone** — ISO build pipeline (Debian Bookworm base) <!-- id:1621bd98-ebd2-46b4-bd20-2c37bb900f48 -->
+
+## Done
+
+- [x] `[IT]` — Site relaunch — arcline.it copy + pricing page <!-- id:cea24874-17bd-41c5-8f7f-2a9d044fc4d4 -->
+- [x] `[OS]` — Site launch — arclineproject.org landing page <!-- id:e184a3a5-a072-4214-b65d-846a9c09c8c0 -->
+- [x] `[OS]` — Toolchain announcement — 11 Go tools listed publicly <!-- id:ec7c5021-f0ac-49b7-b90e-5ce23c9ed360 -->
+- [x] `[IT]` — Acquired Saibeo Solutions, onboarded Ed Do as CTO <!-- id:82d6863d-e3bb-44e8-9dc0-b4af01bae50e -->
+- [x] `[Test]` **Test** — Test <!-- id:75c90304-4cc5-4bcb-8ab1-865987a3216d -->
+
+## Notes
+
+- Keep `[IT]` (arcline.it, revenue-facing) and `[OS]` (arclineproject.org, GPL/open-source)
+  clearly tagged — some cards (like Voussoir) straddle both.
+- New codenames go in the legend table before the card is created, not after.
+- Source repos live on `git.arcline.it` — link commits/PRs in card text once work starts.
+