chore(llm-security): STATE — v8 planning unparked; strategy docs moved to *.local.md

Operator decision 2026-07-18: v8 strategy docs are LOCAL-ONLY. All 4
(FAMILY-MAP, JOBS-TO-BE-DONE, commons-extraction-plan, roadmap) renamed
to docs/*.local.md (gitignored); roadmap.md had been hidden only by the
accidental case-insensitive ROADMAP.md ignore match.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TcQyMTQfyrsAapaCMPxTtQ
This commit is contained in:
Kjell Tore Guttormsen 2026-07-18 11:17:27 +02:00
commit 0e2601ff55

View file

@ -1,12 +1,15 @@
# STATE — llm-security
**👉 NESTE — START HER: v7.8.3 SHIPPED. Next is the v8.0.0 planning (PARKED behind a visibility decision).**
v7.8.3 is fully released: 12 commits pushed to Forgejo (tip `3219996`), tag `v7.8.3` pushed, catalog ref
bumped v7.8.2→v7.8.3 (catalog commit `9d42292`), `check-versions.mjs` = **0 ERROR** (lone WARN `okr`,
pre-existing/unrelated). Suite **2016/0**. Nothing pending on v7.8.3.
Next body of work is **v8.0.0** (deprecation cleanup + behaviour-preserving commons extraction + the
deferred items below), but it is **PARKED** behind an operator visibility decision on the 3 untracked
`docs/*.md` (v8 strategy, DO NOT PUSH — public mirror). Decide that first before starting v8.
**👉 NESTE — START HER: v8.0.0 planning is UNPARKED. Start with the plan in `docs/roadmap.local.md`.**
The visibility decision is MADE (operator, 2026-07-18): the v8 strategy docs are LOCAL-ONLY. All 4
(`FAMILY-MAP`, `JOBS-TO-BE-DONE`, `commons-extraction-plan`, `roadmap`) were renamed to
`docs/*.local.md` (gitignored via the `*.local.md` pattern; cross-refs updated). `roadmap.md` was a
4th family member previously hidden only by accident — the root-level `ROADMAP.md` ignore pattern
matched it case-insensitively. `git status` is clean; nothing untracked can leak to the public mirror.
Next body of work: **v8.0.0** (deprecation cleanup + behaviour-preserving commons extraction + the
deferred items below). Read `docs/roadmap.local.md` first — it is the product roadmap the plan hangs off.
v7.8.3 remains fully released: tag `v7.8.3` pushed, catalog ref bumped (catalog commit `9d42292`),
`check-versions.mjs` 0 ERROR, suite **2016/0**. Nothing pending on it.
## v7.8.3 — what shipped (the MEDIUM sweep + 1)
52 open completion-review findings triaged (5 Opus verifiers) → 48 confirmed, 3 feature-requests, 1 non-defect.
@ -37,7 +40,7 @@ Shipped **47 MEDIUM-tier fixes + 1 live-protocol fix** (`post-mcp-verify` now re
## Continuity
origin = Forgejo `open/llm-security` (PUBLIC, never GitHub). STATE.md intentionally TRACKED
(`.gitignore:19-20` NOTE). Disclosure: fix committed, HELD until its release tag exists (satisfied for v7.8.3).
Push window: weekdays 20:0023:00; weekends/holidays anytime. **DO NOT PUSH** the 3 untracked `docs/*.md`
(parked v8 strategy) — they reference a private sibling. Release mechanics: push commits →
Push window: weekdays 20:0023:00; weekends/holidays anytime. The v8 strategy docs live in
`docs/*.local.md` (gitignored — they reference a private sibling; keep them LOCAL-ONLY). Release mechanics: push commits →
`release-plugin.mjs <plugin> --version X.Y.Z --create-tag``--write --commit --push` → check-versions 0 ERROR.
Position (v8): llm-security consolidates; growth at family level (security-commons + `llm-retrieval-guard`).