Skip to main content

Helpifyr KeyStore Compatibility

This compatibility page is generated from canonical repo-owned source material in JaddaHelpifyr/jhf-keystore.

Documentation Map​

Compatibility Sources​

  • docs/OSS_INVENTORY.md

Derived from OSS Inventory Version Truth​

OSS Inventory Version Truth

Scope​

jhf-keystore owns a repo-local OSS inventory and version-truth contract for build/runtime components required for delivery readiness.

Canonical machine-readable truth:

  • contracts/oss-version-inventory-readiness.json

Required Verify Lane​

  • Local:
    • python3 scripts/validate-oss-version-inventory.py --json
    • bash scripts/verify-oss-version-inventory.sh
  • CI:
    • .gitea/workflows/ci.yml runs bash scripts/verify-oss-version-inventory.sh

The verifier is fail-closed on missing component coverage, missing external owner classification, or source-truth drift.

Pinning Posture​

  • vaultwarden/server:1.35.7 is pinned in maintained compose files.
  • components are either pinned (pinned-exact, pinned-tag, pinned-range) or external-classified with owner issue references.
  • latest tags are not accepted in repo-owned runtime truth unless explicitly owner-justified and documented.

Dependency Ownership​

  • JaddaHelpifyr/helpifyr-fabric#289: stackwide Fabric contract/version catalog ownership (consumed read-only).
  • JaddaHelpifyr/jhf-openclaw-env#209: environment-owned runtime materialization and host-level pinning policy.
  • JaddaHelpifyr/jhf-deployment#270: deployment-owned coordinated upgrade rollout catalog.

AGPLv3. See LICENSE (LICENSE).

Learn more at helpifyr.com.