Skip to content

docs(rfc-0001): Rev 9 — offboarding via tracebloc delete + single-machine CLI scope - #157

Merged
saadqbal merged 1 commit into
developfrom
docs/rfc-0001-rev9-offboarding
Jul 7, 2026
Merged

docs(rfc-0001): Rev 9 — offboarding via tracebloc delete + single-machine CLI scope#157
saadqbal merged 1 commit into
developfrom
docs/rfc-0001-rev9-offboarding

Conversation

@LukasWodka

Copy link
Copy Markdown
Contributor

The design-of-record for the offboarding work (Phase 1 cli + Phase 2 backend, in flight). Decided by Lukas 2026-07-07.

§7.10 (new)tracebloc delete is a top-level SOFT offboard: revoke the machine credential (POST /edge-device/<id>/revoke, backend#886 — not the 405 DELETE), tear down the local install, wipe local data; retain all backend artifacts (client record, datasets, use cases, models) as history. Hard row-destroyrejected (it would cascade the client's training telemetry). Tombstone gaps to build: decommissioned client state, dataset-unavailable-on-offboard, launch-time availability gate.

Rev 9 callouts — §6.2/§7.4: client use removed, client list internal-only, delete → top-level; the CLI is single-machine, the fleet is the web-UI. R12 flipped to addressed. C.6 corrected to name the built revoke endpoint + note DELETE is unrouted.

Supersedes cli#136's client delete/DELETE offboarding draft. Verified: cross-refs resolve, fences balanced.

🤖 Generated with Claude Code

…+ single-machine CLI scope
Decided by Lukas 2026-07-07. Two coupled decisions:
- The CLI is scoped to THIS machine (one client per machine — the §7.2
anchor); the account's fleet lives in the web-UI. So `client use` is
removed and `client list` is internal-only (hidden; still callable for
the installer pre-flight). Amends the §6.2 surface; folds in the cli#136
client-surface prototype.
- Offboarding is a top-level `tracebloc delete` (not `client delete
--uninstall`): a SOFT offboard that revokes the machine credential,
tears down the local install, wipes local data, and RETAINS all backend
artifacts (client record, dataset catalog, use cases, trained models) as
history. A hard row-destroy is REJECTED — it would cascade the client's
training telemetry (weight refs, confusion matrices, carbon).
New §7.10 (design of record) + Rev 9 callouts on §6.2/§7.4; R12 flipped to
addressed; C.6 corrected to name the built machine-revoke endpoint
(POST /edge-device/<id>/revoke, backend#886) and note DELETE is unrouted.
Supersedes the cli#136 proto's client delete/DELETE offboarding draft.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@LukasWodka

Copy link
Copy Markdown
ContributorAuthor

Implemented: cli#160 (Phase 1 — tracebloc delete + nodeboot + Rev-9 surface) and tracebloc/backend#999 (Phase 2 — decommission state, revoke mode, launch gate). They meet at the POST /edge-device/<id>/revoke contract.

@saadqbal
saadqbal merged commit 18aca3a into developJul 7, 2026
17 checks passed
@LukasWodka
LukasWodka deleted the docs/rfc-0001-rev9-offboarding branch July 9, 2026 11:41
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@LukasWodka@saadqbal