Helpifyr Pattern Compatibility
This compatibility page is generated from canonical repo-owned source material in JaddaHelpifyr/jhf-pattern.
Documentation Map
-
Compatibility
-
Channel:
latest -
Source repo:
JaddaHelpifyr/jhf-pattern
Compatibility Sources
docs/OSS_INVENTORY.md
Derived from OSS Inventory, Version Truth, and Upgrade Readiness
OSS Inventory, Version Truth, and Upgrade Readiness
This page defines the repo-owned machine-readable OSS inventory and version truth
for jhf-pattern.
Primary artifacts:
maintenance/oss-inventory.jsonmaintenance/oss-version-truth.jsonmaintenance/oss-upgrade-policy.jsonscripts/verify_oss_inventory_version_truth.pyscripts/oss-inventory-selfcheck.sh
Tool / Contract Summary
- Inventory and version truth are tracked as repo-owned JSON artifacts.
- Drift verification is fail-closed for:
- runtime/base images using
latestor floating major tags - CI action refs that are only major tags
- non-exact direct Python and Node dependency pins
- missing required external owner blocker references
- runtime/base images using
Business Value
- Removes silent dependency drift in runtime, base images, and CI actions.
- Makes upgrade ownership explicit for repo-owned and external-owner surfaces.
- Provides deterministic verify paths for CI and local pre-push checks.
Current Verified State
- Runtime/base image refs are exact-tag pinned in repo-owned files.
- CI action refs are semver-tag pinned.
- Direct Python and Node dependencies are exact pinned.
- External owner blockers are classified explicitly, not mirrored as local truth.
- Plane is explicitly classified as an external-owner OSS/runtime dependency in
maintenance/oss-inventory.json(component_key: external.plane).
Available now
- Machine-readable inventory (
maintenance/oss-inventory.json). - Machine-readable version truth (
maintenance/oss-version-truth.json). - Upgrade policy and fail conditions (
maintenance/oss-upgrade-policy.json). - Strict verifier (
python scripts/verify_oss_inventory_version_truth.py --strict). - Shell selfcheck (
bash scripts/oss-inventory-selfcheck.sh).
Planned / Not in current scope
- Stack-global OSS arbitration remains outside this repo.
- Plane runtime/version ownership is external to
jhf-pattern; this repo integrates Plane and documents the boundary but does not define Plane release truth or pin Plane runtime versions stack-wide. - This repo does not redefine owner truth in:
helpifyr-fabricPlane (upstream OSS)jhf-openclaw-envjhf-deploymentjhf-spindlejhf-heddlejhf-warpjhf-keystorejhf-shuttlejhf-reed
Public Surfaces
- No new external API route is introduced by this slice.
- Verification surfaces are repo-owned scripts and CI checks.
Producer-/Consumer-Zuordnung
- Producer (repo-owned truth):
jhf-patternpublishes inventory/version/policy JSON files.
- Consumers:
- local/CI verification lanes
- operators using repository validation paths
- External truth consumers remain explicit and referenced by owner issues only.
Lifecycle Status
- status: active
- contract posture: strict verification, fail-closed drift detection
Readiness / Drift / Monitoring
- Use strict verifier for every upgrade/pinning mutation:
python scripts/verify_oss_inventory_version_truth.py --strict
- CI lane includes inventory/version verification.
Deployment / Verify
Repo checks:
python scripts/verify_oss_inventory_version_truth.py --strict
bash scripts/oss-inventory-selfcheck.sh
python -m pytest -q tests/test_oss_inventory_version_truth.py
CI checks:
.gitea/workflows/ci.ymlexecutes release-readiness checks that include OSS truth artifacts and verifier presence.- expected green signal for this slice:
python -m pytest -q tests/test_release_readiness.py- OSS verifier path above remains green in CI-equivalent local run.
Live check (read-only evidence):
ssh <internal-runtime-redacted><internal-runtime-redacted> "docker ps --format '{{.Names}}|{{.Image}}' | grep jhf-pattern"
Issue #174 Completion Checklist
- OSS truth doc exists and is current: yes (
docs/OSS_INVENTORY.md) - AGENTS hint exists and is mandatory: yes (
AGENTS.md, "OSS Inventory And Version Truth Rule") - verify path is explicit and executable: yes (repo checks + CI checks + live read-only evidence path)
- no local workaround for external-owner truth: yes
Known Limits
- This repo can verify only repo-owned references plus explicit owner issue links.
- External owner repos may advance their own truth independently; this repo only tracks explicit blocker links and classification.
- For Plane specifically, the inventory classification is explicit, but version pinning and runtime release ownership remain outside this repo by design.
Related Issues
jhf-pattern#174jhf-pattern#176helpifyr-fabric#289jhf-openclaw-env#209jhf-deployment#270jhf-spindle#208jhf-heddle#117jhf-warp#257jhf-keystore#82jhf-shuttle#138jhf-reed#13
License: AGPLv3
Helpifyr: https://helpifyr.com