cce62bf9f7
The PAT-in-flash shortcut (ADR-005 v0.1) is safe for the dev's bench unit but not for a shipped one: it's plaintext in flash, the same token on every unit, and rotation needs a reflash. ADR-005 decided the auth model but left provisioning mechanics open. Capture that as ADR-011 (Proposed/Open): the options (build-time bake → on-device paste → eFuse-encrypted NVS, per-device fine-grained PAT, GitHub App) and the likely shape, deferred beyond v0.1. It gates the first non-dev distribution. Point the Spike 7 postmortem's shortcut entry at it.
Postmortems
Bench + bring-up debugging write-ups: what broke, how we found the root cause, and the decisions that came out of it. One file per incident, named
YYYY-MM-DD-<slug>.md. These capture why a spike stalled or a design turned — the kind of context that's expensive to reconstruct later.Project overview:
../../README.md. Bring-up spikes:../v0.1-mvp-technical.md.
| Date | Incident | Status |
|---|---|---|
| 2026-07-05 | Spike 3 (SD) — card rejects CMD59 (SPI-mode CRC) | Paused — awaiting a compliant microSD; wiring + firmware proven |
| 2026-07-05 | Spike 7 (git push) — ADR-004 kill-switch fired: gix can't push over HTTPS | Turned — pivoted to libgit2; git mechanics proven on desktop, device build next |