portal/docs/projects/eshopv1.md

title, sidebar_position

title	sidebar_position
E-Shop v1	3

E-Shop v1

Field	Value
Code	eshopv1
Status	Active — application deployment gated
Started	2026-08-26
Sponsor and accountable lead	RootAtSkic
Technical member	jarvis-at-skic / Hermes code agent
Team	E-Shop v1 Team

Purpose and initial deliverable

Deliver a functional toothbrush storefront with an evidence-backed AliExpress catalog, local attributed product imagery, prices calculated at 150% of observed source prices, product galleries, cart, PayPal Sandbox checkout, and order confirmation.

The verified launch catalog contains nine defensible saleable products. AliExpress validation controls blocked three additional records; no product or price was invented. Production PayPal activation, spending, purchasing, and vendor-account changes remain outside bootstrap authority.

Approval and bounded autonomy

RootAtSkic (discord:1518725627845283888) approved kickoff and override ESHOPV1-BOOTSTRAP-AUTONOMY-20260826 in Board message 1542278257833939087 on 2026-08-26. The durable decision permits one 30-minute General-channel job until the first human-authored message in any E-Shop v1 channel. The job must stop before further mutation and pause itself when that condition occurs.

Resources

• Project organization: corp-v1-eshopv1 — private
• Skills organization: corp-v1-eshopv1-skills-code-agent — private
• Application repository — test 3be141af869220620672b04681d335fb2803f425
• Documentation repository — test 4d7a24fafb1fb9e9afc5b406407a1c8c670513be
• Published documentation
• Global diagram source: drawio-main; no project copy exists.

Discord lifecycle

Exactly seven ordered channels exist under corp-v1; Hermes view/history/send/pin behavior was verified in each:

1. corp-v1-eshopv1-general — 1542281868269985912
2. corp-v1-eshopv1-scope — 1542281871642198207
3. corp-v1-eshopv1-architecture — 1542281874842583061
4. corp-v1-eshopv1-ui-ux — 1542281878953005158
5. corp-v1-eshopv1-kanban — 1542281882400723096
6. corp-v1-eshopv1-delivery — 1542281895071719466
7. corp-v1-eshopv1-releases — 1542281898913439886

General introduction: 1542281930706391192. Harbor secret request: 1542282741041729566; it requests direct Gitea entry and never requests or exposes the value.

Adopted project skills

All repositories are private, use default branch test, retain complete source provenance, and are assigned to the skills team.

Adopted skill	Central source SHA	Adopted SHA
development-branching-strategy--eshopv1	636aba2b9e0957705fc874f07b310a4be9916f1c	6255c8811ca5bbf2607c4c36980a0347c3a5ee67
development-gitops-argo-cd--eshopv1	510b2bb590118362804d6036cbbf37db72dc21d0	add186a9910a915aee20124855440aa9dfdb4f9f
development-monorepo-pnpm--eshopv1	ff69bcca2fb3b673297230710a74c70410fd1996	489570b877af6b89f995a02646b161ddf79f85dd
development-scripts--eshopv1	5960d5e74713e6b95a403962f479b2b97cb76286	69c364ea595b0b1a35738847cca2d03f8cd14d56
devsecops-ci-cd-gitea--eshopv1	8f46c3faa5ba074b8a48971b87365e0d3e2a4c40	5b66f8a0084743ce079da667e3c97b07febc6a20
documentation-docusaurus--eshopv1	f810f8c92005e5d55b08700b67fd34a37be435bc	c2f8d50d4ffd97c854f0cb06fadfa664c9947861
template-engine-copier--eshopv1	97991021fff9e1f73202a82d29eea496ea0eb7aa	6a38a58997eb278736648b163d4f3f89015acf16
corp-v1-channel-general--eshopv1	7137f18319b9716468485b68b99b4297a721c94f	e307890e65bf48280c0b798559c4925581ff1505
corp-v1-channel-scope--eshopv1	729e7ff936ed99f7d1ee203defc02f3f1ce64085	8df61e824d6e28b53a26a63802d9c7ae45393896
corp-v1-channel-architecture--eshopv1	f9bef3bee6a59c74803e3aef5b26fdc61894f0ee	9c1cd5b238ebe53ed46d40985f70d57077a3c7f0
corp-v1-channel-ui-ux--eshopv1	2039d7e3f7ac3ec14064ead52c8a53ac233f519c	55d79260f8fdc72c547f4de928bb7effa5ca9c34
corp-v1-channel-kanban--eshopv1	73d8af5f18463ed55b510f1cc8a66e2f882b5552	fff4ace0c184c750e1e4d7ed0e7a806b78f8a075
corp-v1-channel-delivery--eshopv1	b629921b6f58c0f36de7d1f39a13ba14c25baab2	456297285484f4bfe2c43ba64e67e17af4edd89e
corp-v1-channel-releases--eshopv1	12891cf409378777eac72fbde9541b3c117e82aa	f2d2bfb78044dbc3cedc8bc998412e19234c78aa

Access, automation, and Harbor

e-shop-v1-team exists independently in both organizations, includes all repositories, grants per-unit write access, and contains verified users root-at-skic and jarvis-at-skic.

Scheduler job d6505c6ac0da is the single approved 30-minute General job. It uses frozen high-watermarks, scans only the seven E-Shop channels, attaches all fourteen adopted skills, delivers only to General, and pauses on the first human message. RootAtSkic explicitly renewed foreground continuation and requested that the job be returned to service in Board message 1542470702525980672 on 2026-08-27.

Verified organization variables:

• HL_V1_HARBOR_ADDRESS=harbor-v1.apps.lego-cloud.eu
• HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_USERNAME=robot$gondor-v1+gitea-actions-v1

HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_SECRET presence: verified by name after RootAtSkic's confirmation in message 1542462573750784022. Its value was never requested or accessed. A governed publication retry reached Harbor but registry authentication returned unauthorized; therefore the configured credential must be corrected or reconciled with the configured robot username before publication can succeed.

Verification

• Application PR 1 reviewed head ca4ed6e27c565a2775e82c8471e5a355536af6c6; exact-head Actions task 1415: success; merged default head 7fd6b88fc01e3834862fecfa063931d65ed0b786; integrated task 1418: success.
• Application PR 4 reviewed head b2b28d9b82f12af822b705453b64e585b65bcd0f; exact-head tasks 1446 and 1447: success. It added a durable Argo CD AppProject/Application bootstrap, ingress, resource bounds, immutable Harbor image pin, and fail-closed optional PayPal secret references. Merged default head: 3be141af869220620672b04681d335fb2803f425.
• Integrated artifact task 1448 failed at Harbor authentication with unauthorized; no image, chart, Argo Application, or deployed storefront is claimed.
• Documentation PR 1 reviewed head d65c41749cfe99b8b58e317da3f87dd83b1a94eb; merged default head 4d7a24fafb1fb9e9afc5b406407a1c8c670513be; integrated task 1417: success.
• Authorized Pages body readback found the E-Shop v1 and Bootstrap MVP markers.
• Local application validation passed lint, type checks, seven tests, production build, runtime rendering, and fail-closed PayPal behavior.
• Catalog validation passed for nine sourced products and zero fixtures.

Outstanding gates

1. A member must correct or reconcile the existing Harbor organization secret directly in Gitea so it authenticates as the configured robot user; the value must never be sent to Hermes or Discord.
2. Publish the application image, apply the merged Argo CD bootstrap, and wait for Synced / Healthy convergence.
3. Verify the deployed storefront and inject PayPal Sandbox credentials through the approved secret path for an end-to-end Sandbox create/capture test.
4. Production payment go-live requires a separate explicit decision.