docs: record integrated E-Shop application CI

docs: complete E-Shop v1 governance records
docs: record E-Shop v1 kickoff approval
2026-08-26 22:00:10 +00:00 · 2026-08-26 21:58:26 +00:00 · 2026-08-26 14:16:27 -07:00 · 2026-08-26 21:12:18 +00:00 · 2026-08-26 00:53:50 -07:00
8 changed files with 210 additions and 8 deletions
@@ -8,6 +8,7 @@ sidebar_position: 2

 | Date | Decision | Scope | Owner | Record |
 |---|---|---|---|---|
+| 2026-08-26 | Authorize E-Shop v1 kickoff, toothbrush-commerce MVP, and bounded bootstrap autonomy | E-Shop v1 | RootAtSkic | [E-Shop v1 kickoff and bootstrap autonomy](/governance/decisions/eshopv1-kickoff-bootstrap-autonomy/) |
 | 2026-08-25 | Add Piotras to the Corp v1 Board and every active project | Corp v1 governance, AeroSim, Maze Next Gen | RootAtSkic | [Piotras Board and all-project membership](/governance/decisions/piotras-board-all-project-membership/) |
 | 2026-08-20 | Add Jenny to the Corp v1 Board and every active project | Corp v1 governance, AeroSim, Maze Next Gen | RootAtSkic | [Jenny Board and all-project membership](/governance/decisions/jenny-board-all-project-membership/) |
 | 2026-08-17 | Add Linas to the Corp v1 Board and AeroSim | Corp v1 governance and AeroSim | RootAtSkic | [Linas Board and AeroSim membership](/governance/decisions/linas-board-aerosim-membership/) |
@@ -0,0 +1,73 @@
+---
+title: "E-Shop v1 kickoff and bootstrap autonomy"
+description: "Record the approved E-Shop v1 kickoff, MVP scope, and bounded General-channel bootstrap authority."
+---
+
+# E-Shop v1 kickoff and bootstrap autonomy — 2026-08-26
+
+## Decision
+
+Begin provisioning **E-Shop v1**, code `eshopv1`, as a restricted Corp v1 project with RootAtSkic as sponsor and accountable lead and Hermes (`jarvis-at-skic`) as the initial technical member.
+
+Approval was explicit from Board member RootAtSkic (`discord:1518725627845283888`) in Discord message `1542278257833939087` on 2026-08-26 after review of the complete proposal.
+
+## MVP outcome
+
+Deliver a functional toothbrush e-commerce website with:
+
+- twelve sourced AliExpress toothbrush products;
+- locally stored product images with source attribution rather than hotlinking;
+- EUR retail prices calculated from captured AliExpress item prices using `source price × 1.50`, rounded to cents;
+- product listing and gallery;
+- shopping cart;
+- PayPal Sandbox checkout through a server-side credential boundary;
+- order confirmation;
+- responsive and accessibility checks;
+- private source and documentation repositories, CI/CD, home-lab deployment, and deployed readback.
+
+Live PayPal payments, purchases, spending, vendor-account changes, legal/commercial go-live, and any secret value remain separately gated.
+
+## Authorized resources
+
+- Exactly seven same-project Discord channels under `corp-v1`: General, Scope, Architecture, UI/UX, Kanban, Delivery, and Releases.
+- Private project organization `corp-v1-eshopv1`.
+- Private skills organization `corp-v1-eshopv1-skills-code-agent`.
+- Application repository `corp-v1-eshopv1` and documentation repository `corp-v1-eshopv1-documentation`.
+- Seven adopted engineering skills and seven adopted channel skills, all suffixed `--eshopv1`.
+- Project and skills organization teams for RootAtSkic and `jarvis-at-skic`.
+- One 30-minute bootstrap job delivered only to `corp-v1-eshopv1-general`.
+
+## Project-local authorization
+
+```yaml
+override_id: ESHOPV1-BOOTSTRAP-AUTONOMY-20260826
+authorization_evidence: discord-message-1542278257833939087
+project: eshopv1
+delegator: discord-user-1518725627845283888-root-at-skic
+delegate: hermes-agent-operating-eshopv1
+cadence: every-30-minutes
+channel_boundary:
+  - corp-v1-eshopv1-general
+  - corp-v1-eshopv1-scope
+  - corp-v1-eshopv1-architecture
+  - corp-v1-eshopv1-ui-ux
+  - corp-v1-eshopv1-kanban
+  - corp-v1-eshopv1-delivery
+  - corp-v1-eshopv1-releases
+scope:
+  - create and maintain project scope, architecture, UI/UX, Kanban, delivery, and release artifacts
+  - create branches, commits, pushes, pull requests, and review evidence
+  - merge eligible exact-head-green project changes
+  - build, publish, deploy, and verify the approved Sandbox MVP
+  - keep the seven-channel lifecycle moving through project-adopted skills
+stop_condition: first-human-authored-message-in-any-project-channel
+preserve_on_reference_adoption: true
+```
+
+Before every mutation, the job must scan only the seven project channels and distinguish human authors from Hermes, bots, and webhooks. The first human-authored project-channel message ends bootstrap autonomy. The run must make no further autonomous mutation, cite the stopping message, report in General, and pause or remove the job.
+
+The delegation does not authorize secret-value access or disclosure, spending, purchases, production-payment enablement, vendor-account changes, legal/commercial commitments, unrelated infrastructure changes, or destructive/irreversible operations.
+
+## Current state
+
+Approved. Provisioning and independently verified completion evidence will be appended as resources become available.
@@ -8,9 +8,9 @@ sidebar_position: 2
 | Field | Value |
 |---|---|
 | Status | Active |
-| Governance roles | AeroSim and Maze Next Gen technical member and executing code agent |
-| Teams | [AeroSim Team](/teams/aerosim/); [Maze Next Gen Team](/teams/mazeng/) |
-| Projects | [AeroSim](/projects/aerosim/); [Maze Next Gen](/projects/mazeng/) |
+| Governance roles | AeroSim, Maze Next Gen, and E-Shop v1 technical member and executing code agent |
+| Teams | [AeroSim Team](/teams/aerosim/); [Maze Next Gen Team](/teams/mazeng/); [E-Shop v1 Team](/teams/eshopv1/) |
+| Projects | [AeroSim](/projects/aerosim/); [Maze Next Gen](/projects/mazeng/); [E-Shop v1](/projects/eshopv1/) |
 | Gitea | `jarvis-at-skic` — verified |

-The executing Hermes identity has verified membership in both AeroSim and both Maze Next Gen Gitea organization teams and verified read/post access across all six AeroSim Discord channels as bot `1526860732917088266`; the required pinned General guidance remains verified.
+The executing Hermes identity has verified membership in both AeroSim, Maze Next Gen, and E-Shop v1 Gitea organization teams. It also has verified read/history/post/pin behavior across all seven E-Shop v1 Discord channels as bot `1526860732917088266`.
@@ -8,10 +8,10 @@ sidebar_position: 1
 | Field | Value |
 |---|---|
 | Status | Active |
-| Governance roles | AeroSim and Maze Next Gen sponsor and accountable lead |
-| Teams | [AeroSim Team](/teams/aerosim/); [Maze Next Gen Team](/teams/mazeng/) |
-| Projects | [AeroSim](/projects/aerosim/); [Maze Next Gen](/projects/mazeng/) |
+| Governance roles | AeroSim, Maze Next Gen, and E-Shop v1 sponsor and accountable lead |
+| Teams | [AeroSim Team](/teams/aerosim/); [Maze Next Gen Team](/teams/mazeng/); [E-Shop v1 Team](/teams/eshopv1/) |
+| Projects | [AeroSim](/projects/aerosim/); [Maze Next Gen](/projects/mazeng/); [E-Shop v1](/projects/eshopv1/) |
 | Discord | RootAtSkic — `1518725627845283888`, verified |
-| Gitea | `root-at-skic` — verified in both AeroSim teams and both Maze Next Gen teams |
+| Gitea | `root-at-skic` — verified in both AeroSim, Maze Next Gen, and E-Shop v1 organization teams |

 The Gitea identity was resolved by exact authenticated user search rather than inferred.
@@ -0,0 +1,97 @@
+---
+title: E-Shop v1
+sidebar_position: 3
+---
+
+# E-Shop v1
+
+| Field | Value |
+|---|---|
+| Code | `eshopv1` |
+| Status | Active — application deployment gated |
+| Started | 2026-08-26 |
+| Sponsor and accountable lead | RootAtSkic |
+| Technical member | `jarvis-at-skic` / Hermes code agent |
+| Team | [E-Shop v1 Team](/teams/eshopv1/) |
+
+## Purpose and initial deliverable
+
+Deliver a functional toothbrush storefront with an evidence-backed AliExpress catalog, local attributed product imagery, prices calculated at 150% of observed source prices, product galleries, cart, PayPal Sandbox checkout, and order confirmation.
+
+The verified launch catalog contains nine defensible saleable products. AliExpress validation controls blocked three additional records; no product or price was invented. Production PayPal activation, spending, purchasing, and vendor-account changes remain outside bootstrap authority.
+
+## Approval and bounded autonomy
+
+RootAtSkic (`discord:1518725627845283888`) approved kickoff and override `ESHOPV1-BOOTSTRAP-AUTONOMY-20260826` in Board message `1542278257833939087` on 2026-08-26. The [durable decision](/governance/decisions/eshopv1-kickoff-bootstrap-autonomy/) permits one 30-minute General-channel job until the first human-authored message in any E-Shop v1 channel. The job must stop before further mutation and pause itself when that condition occurs.
+
+## Resources
+
+- Project organization: [corp-v1-eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1) — private
+- Skills organization: [corp-v1-eshopv1-skills-code-agent](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent) — private
+- [Application repository](https://gitea.lego-cloud.eu/corp-v1-eshopv1/corp-v1-eshopv1) — `test` `7fd6b88fc01e3834862fecfa063931d65ed0b786`
+- [Documentation repository](https://gitea.lego-cloud.eu/corp-v1-eshopv1/corp-v1-eshopv1-documentation) — `test` `4d7a24fafb1fb9e9afc5b406407a1c8c670513be`
+- [Published documentation](https://pages.apps.lego-cloud.eu/corp-v1-eshopv1/corp-v1-eshopv1-documentation/)
+- Global diagram source: [drawio-main](https://gitea.lego-cloud.eu/home-v1-skills-code-agent/drawio-main); no project copy exists.
+
+## Discord lifecycle
+
+Exactly seven ordered channels exist under `corp-v1`; Hermes view/history/send/pin behavior was verified in each:
+
+1. `corp-v1-eshopv1-general` — `1542281868269985912`
+2. `corp-v1-eshopv1-scope` — `1542281871642198207`
+3. `corp-v1-eshopv1-architecture` — `1542281874842583061`
+4. `corp-v1-eshopv1-ui-ux` — `1542281878953005158`
+5. `corp-v1-eshopv1-kanban` — `1542281882400723096`
+6. `corp-v1-eshopv1-delivery` — `1542281895071719466`
+7. `corp-v1-eshopv1-releases` — `1542281898913439886`
+
+General introduction: `1542281930706391192`. Harbor secret request: `1542282741041729566`; it requests direct Gitea entry and never requests or exposes the value.
+
+## Adopted project skills
+
+All repositories are private, use default branch `test`, retain complete source provenance, and are assigned to the skills team.
+
+| Adopted skill | Central source SHA | Adopted SHA |
+|---|---|---|
+| [development-branching-strategy--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/development-branching-strategy--eshopv1) | `636aba2b9e0957705fc874f07b310a4be9916f1c` | `6255c8811ca5bbf2607c4c36980a0347c3a5ee67` |
+| [development-gitops-argo-cd--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/development-gitops-argo-cd--eshopv1) | `510b2bb590118362804d6036cbbf37db72dc21d0` | `add186a9910a915aee20124855440aa9dfdb4f9f` |
+| [development-monorepo-pnpm--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/development-monorepo-pnpm--eshopv1) | `ff69bcca2fb3b673297230710a74c70410fd1996` | `489570b877af6b89f995a02646b161ddf79f85dd` |
+| [development-scripts--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/development-scripts--eshopv1) | `5960d5e74713e6b95a403962f479b2b97cb76286` | `69c364ea595b0b1a35738847cca2d03f8cd14d56` |
+| [devsecops-ci-cd-gitea--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/devsecops-ci-cd-gitea--eshopv1) | `8f46c3faa5ba074b8a48971b87365e0d3e2a4c40` | `5b66f8a0084743ce079da667e3c97b07febc6a20` |
+| [documentation-docusaurus--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/documentation-docusaurus--eshopv1) | `f810f8c92005e5d55b08700b67fd34a37be435bc` | `c2f8d50d4ffd97c854f0cb06fadfa664c9947861` |
+| [template-engine-copier--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/template-engine-copier--eshopv1) | `97991021fff9e1f73202a82d29eea496ea0eb7aa` | `6a38a58997eb278736648b163d4f3f89015acf16` |
+| [corp-v1-channel-general--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/corp-v1-channel-general--eshopv1) | `7137f18319b9716468485b68b99b4297a721c94f` | `e307890e65bf48280c0b798559c4925581ff1505` |
+| [corp-v1-channel-scope--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/corp-v1-channel-scope--eshopv1) | `729e7ff936ed99f7d1ee203defc02f3f1ce64085` | `8df61e824d6e28b53a26a63802d9c7ae45393896` |
+| [corp-v1-channel-architecture--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/corp-v1-channel-architecture--eshopv1) | `f9bef3bee6a59c74803e3aef5b26fdc61894f0ee` | `9c1cd5b238ebe53ed46d40985f70d57077a3c7f0` |
+| [corp-v1-channel-ui-ux--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/corp-v1-channel-ui-ux--eshopv1) | `2039d7e3f7ac3ec14064ead52c8a53ac233f519c` | `55d79260f8fdc72c547f4de928bb7effa5ca9c34` |
+| [corp-v1-channel-kanban--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/corp-v1-channel-kanban--eshopv1) | `73d8af5f18463ed55b510f1cc8a66e2f882b5552` | `fff4ace0c184c750e1e4d7ed0e7a806b78f8a075` |
+| [corp-v1-channel-delivery--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/corp-v1-channel-delivery--eshopv1) | `b629921b6f58c0f36de7d1f39a13ba14c25baab2` | `456297285484f4bfe2c43ba64e67e17af4edd89e` |
+| [corp-v1-channel-releases--eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent/corp-v1-channel-releases--eshopv1) | `12891cf409378777eac72fbde9541b3c117e82aa` | `f2d2bfb78044dbc3cedc8bc998412e19234c78aa` |
+
+## Access, automation, and Harbor
+
+`e-shop-v1-team` exists independently in both organizations, includes all repositories, grants per-unit write access, and contains verified users `root-at-skic` and `jarvis-at-skic`.
+
+Scheduler job `d6505c6ac0da` is the single approved 30-minute General job. It uses frozen high-watermarks, scans only the seven E-Shop channels, attaches all fourteen adopted skills, delivers only to General, and pauses on the first human message.
+
+Verified organization variables:
+
+- `HL_V1_HARBOR_ADDRESS=harbor-v1.apps.lego-cloud.eu`
+- `HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_USERNAME=robot$gondor-v1+gitea-actions-v1`
+
+`HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_SECRET` presence: **missing**. Its value was never requested or accessed. Harbor publication and Argo CD storefront deployment remain gated.
+
+## Verification
+
+- Application PR 1 reviewed head `ca4ed6e27c565a2775e82c8471e5a355536af6c6`; exact-head Actions task `1415`: success; merged default head `7fd6b88fc01e3834862fecfa063931d65ed0b786`; integrated task `1418`: success.
+- Documentation PR 1 reviewed head `d65c41749cfe99b8b58e317da3f87dd83b1a94eb`; merged default head `4d7a24fafb1fb9e9afc5b406407a1c8c670513be`; integrated task `1417`: success.
+- Authorized Pages body readback found the E-Shop v1 and Bootstrap MVP markers.
+- Local application validation passed lint, type checks, seven tests, production build, runtime rendering, and fail-closed PayPal behavior.
+- Catalog validation passed for nine sourced products and zero fixtures.
+
+## Outstanding gates
+
+1. A member must add the Harbor organization secret directly in Gitea.
+2. Publish the application image and onboard a durable E-Shop Argo CD Application.
+3. Verify the deployed storefront and inject PayPal Sandbox credentials through the approved secret path for an end-to-end Sandbox create/capture test.
+4. Production payment go-live requires a separate explicit decision.
@@ -10,6 +10,7 @@ sidebar_position: 1
 |---|---|---|---|---|---|---|
 | [AeroSim](/projects/aerosim/) | Active — Harbor gated | RootAtSkic | RootAtSkic | [AeroSim Team](/teams/aerosim/) | 2026-08-12 | — |
 | [Maze Next Gen](/projects/mazeng/) | Active — Harbor gated | RootAtSkic | RootAtSkic | [Maze Next Gen Team](/teams/mazeng/) | 2026-08-17 | — |
+| [E-Shop v1](/projects/eshopv1/) | Active — application deployment gated | RootAtSkic | RootAtSkic | [E-Shop v1 Team](/teams/eshopv1/) | 2026-08-26 | — |

 ## Required project record

@@ -0,0 +1,29 @@
+---
+title: E-Shop v1 Team
+sidebar_position: 3
+---
+
+# E-Shop v1 Team
+
+| Field | Value |
+|---|---|
+| Status | Active |
+| Lead | RootAtSkic |
+| Members | RootAtSkic; `jarvis-at-skic` / Hermes code agent |
+| Assigned project | [E-Shop v1](/projects/eshopv1/) |
+
+## Mandate
+
+Deliver the governed E-Shop v1 toothbrush-commerce MVP, its source-evidence catalog, PayPal Sandbox boundary, documentation, CI, deployment assets, and release evidence.
+
+## Gitea access
+
+`e-shop-v1-team` exists independently in `corp-v1-eshopv1` and `corp-v1-eshopv1-skills-code-agent`. Both teams include all repositories, grant per-unit write access, and contain verified users `root-at-skic` and `jarvis-at-skic`.
+
+## Communication and autonomy
+
+Seven exact E-Shop v1 lifecycle channels and their pinned purpose/skill guidance are verified. One project-specific 30-minute General job is authorized under `ESHOPV1-BOOTSTRAP-AUTONOMY-20260826`; its authority ends at the first human-authored project-channel message.
+
+## Remaining gates
+
+Harbor image publication waits for organization secret name `HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_SECRET`, entered directly in Gitea. PayPal remains Sandbox-only and requires environment-injected credentials for an end-to-end capture test. Neither secret value may be sent to Hermes or Discord.
@@ -10,5 +10,6 @@ sidebar_position: 1
 |---|---|---|---:|---:|
 | [AeroSim Team](/teams/aerosim/) | Active | RootAtSkic | 8 | 1 |
 | [Maze Next Gen Team](/teams/mazeng/) | Active | RootAtSkic | 4 | 1 |
+| [E-Shop v1 Team](/teams/eshopv1/) | Active | RootAtSkic | 2 | 1 |

 A team record defines its mandate, lead, members, responsibilities, communication channels, and assigned projects.
Author	SHA1	Message	Date
jarvis-at-skic	04a26df574	docs: record integrated E-Shop application CI Build and publish Corp v1 Board portal / build (pull_request) Successful in 42s Details	2026-08-26 22:00:10 +00:00
jarvis-at-skic	6285ed0c6e	docs: complete E-Shop v1 governance records Build and publish Corp v1 Board portal / build (pull_request) Successful in 34s Details	2026-08-26 21:58:26 +00:00
jarvis-at-skic	756254e506	docs: record E-Shop v1 kickoff approval Build and publish Corp v1 Board portal / build (push) Successful in 34s Details Merge approved kickoff decision before provisioning.	2026-08-26 14:16:27 -07:00
jarvis-at-skic	fbb01699cb	docs: record E-Shop v1 kickoff approval Build and publish Corp v1 Board portal / build (pull_request) Successful in 34s Details	2026-08-26 21:12:18 +00:00
jarvis-at-skic	afd843fd8c	docs: model owned home-lab services as Corp v1 containers Build and publish Corp v1 Board portal / build (push) Successful in 34s Details Merge PR #12: keep only Discord and LLM provider external; classify Lego-maintained home-lab services as internal containers.	2026-08-26 00:53:50 -07:00