Skip to content

docs: add release runbook covering 6 SPOFs (S0-3)#403

Open
Dumbris wants to merge 1 commit into
chore/sprint-0-housekeepingfrom
docs/release-runbook
Open

docs: add release runbook covering 6 SPOFs (S0-3)#403
Dumbris wants to merge 1 commit into
chore/sprint-0-housekeepingfrom
docs/release-runbook

Conversation

@Dumbris
Copy link
Copy Markdown
Member

@Dumbris Dumbris commented Apr 24, 2026

Summary

Ships docs/release-runbook.md covering the six single points of failure in the MCPProxy release pipeline called out in MCP-7 S0-3:

  1. macOS signing + notarizationcodesign + xcrun notarytool (release.yml / prerelease.yml)
  2. Windows installer signing — SignPath today, EV-cert decision doc pending (D30-6, GH Windows #45)
  3. Claude release notes generation — Anthropic API, non-blocking fallback
  4. Cloudflare R2 apt/yum publish — spec 043, stable tags only, GPG-signed metadata
  5. Homebrew tap bump — formula + cask in smart-mcp-proxy/homebrew-mcpproxy
  6. next branch hygiene — prerelease pipeline as early signing canary

Each section names the exact workflow job, required secrets + their expiry windows, and a recovery matrix. Written so an on-call engineer can unblock a failing release without re-reading the whole pipeline.

Cross-linked from specs/README.md under a new Operational runbooks section.

Stacking

Based on chore/sprint-0-housekeeping (PR #402) because that PR introduces specs/README.md. Retarget to main once #402 merges (GitHub handles this automatically).

Test plan

  • Markdown builds (no broken internal links against current repo layout)
  • Pre-commit passes (gofmt, whitespace, merge-conflict checks)
  • Reviewer confirms the recovery matrices match their muscle memory for the last few releases

Refs: MCP-9, MCP-7 (S0-3)

🤖 Generated with Claude Code

Ship docs/release-runbook.md covering the six release-pipeline single
points of failure called out in MCP-7 S0-3:

1. macOS signing + notarization (codesign + notarytool)
2. Windows installer signing (SignPath today; D30-6 decision pending)
3. Claude release notes generation (Anthropic API, non-blocking)
4. Cloudflare R2 apt/yum publish (spec 043, stable tags only)
5. Homebrew tap bump (formula + cask)
6. `next` branch hygiene (prerelease pipeline as early signing canary)

Each SPOF section names the exact workflow job, required secrets, expiry
windows, and a recovery matrix — written so an on-call engineer can
unblock a failing release without re-reading the whole pipeline.

Cross-linked from specs/README.md under a new "Operational runbooks"
section.

Refs: MCP-9, MCP-7 (S0-3)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@cloudflare-workers-and-pages
Copy link
Copy Markdown

Deploying mcpproxy-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 20bc35e
Status: ✅  Deploy successful!
Preview URL: https://ec2dca95.mcpproxy-docs.pages.dev
Branch Preview URL: https://docs-release-runbook.mcpproxy-docs.pages.dev

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants