OneUptime v12 merge program¶

Owner-facing merge order and hard locks for the stacked OneUptime PRs. Use the per-PR runbook as the working checklist. This page is the map, not the procedure.

Technical internals stay in upgrade and rollback and backup and restore.

Merge order¶

flowchart LR
  p351["PR 351 rehearsal<br/>merged 2026-09-02"] --> p352["PR 352 v12 platform<br/>accepted"]
  p352 --> p353["PR 353 AI evidence<br/>merged; evidence off"]
  p353 --> p354["PR 354 remediation broker<br/>merged; mutation off"]

PR	Branch	Status	Owner runbook
#351	`feature/oneuptime-v12-rehearsal`	Merged. Remaining soak owner-waived.	Closed notes in PR 352
#352	`feature/oneuptime-v12-platform`	Merged; production 12.0.27 accepted 2026-09-05.	PR 352 v12 platform
#353	`feature/oneuptime-ai-evidence`	Merged; LiteLLM and adapter accepted with evidence off 2026-09-05.	PR 353 AI evidence
#354	`feature/oneuptime-remediation-broker`	Merged; broker healthy, mutation false, deny-all in audit.	PR 354 remediation broker

Do not skip or reorder. Do not enable AI enrichment or broker mutation until production is on v12 and that PR's enablement section says so.

Who does what¶

Label	Meaning
You	Dashboard clicks, Hyper-V, 1Password, GitHub tokens, PR merge, visual acceptance
Agent	SSH, `backup.sh` / restore drill, restic listing, compose render, smoke tests, gate scripts
Either	Either of you, after you have done the preceding You step

Cursor from Windows uses ssh infra-services-cursor. Komodo is https://komodo.infra.realemail.app. OneUptime is https://oneuptime.infra.realemail.app (Authentik, then local OneUptime login).

Hard locks¶

Production OneUptime stays on v11.7.4 until PR 352 is merged and Komodo procedure deploy-oneuptime has finished.
While the stack is tagged manual-upgrade, never start deploy-infra expecting OneUptime to move. Other eligible stacks use explicit confirmed dispatch of deploy-infra, not ordinary push-to-main.
Do not treat ChatGPT Plus / Pro as API credits. Hosted OpenAI qualification is not required; local gpt-oss:20b is the selected path.
Do not rm restic snapshots, vzdump files, or OneUptime backup dumps. Ask before relocating them.
Do not set BROKER_ENABLE_MUTATION=true or fill EVIDENCE_BRIDGE_URL until the later PR runbook's enablement gate.
Rehearsal stop --confirm deletes isolated rehearsal Docker resources. Do not run it unless you intend to clean that evidence.

Current next step¶

Broker is live with mutation off and a deny-all audit row. Keep EVIDENCE_BRIDGE_URL empty. Do not set BROKER_ENABLE_MUTATION=true until you accept deny-all (or wire verifier URLs) and explicitly start the 24-hour canary.