Advance MinIO compatibility lane

workplans/ARTIFACT-STORE-WP-0007-minio-maxio-sts-vending.md

@@ -10,7 +10,7 @@ topic_slug: stack
 planning_priority: high
 planning_order: 7
 created: "2026-05-17"
-updated: "2026-05-17"
+updated: "2026-06-27"
 state_hub_workstream_id: "2f34bb96-7206-4cb5-acdf-43880b57a9ec"
 ---
 
@@ -60,7 +60,7 @@ or MinIO `AssumeRoleWithWebIdentity` path yet.
 
 ```task
 id: ARTIFACT-STORE-WP-0007-T001
-status: todo
+status: done
 priority: high
 state_hub_task_id: "11d84b56-be7a-4013-8e21-36b7b656b69b"
 ```
@@ -75,11 +75,22 @@ Acceptance:
 - Decide whether "MaxIO" should be a direct fork, a packaging/build
   distribution, a compatibility profile, or not pursued.
 
+
+Progress 2026-06-27:
+
+- Added `docs/minio-compatibility-landscape-2026-06-27.md`, recording the dated
+  source/fork/object-store assessment and deciding that artifact-store should
+  pursue a compatibility profile rather than a direct MaxIO server fork.
+- Verified current source references for upstream MinIO archive/tag posture,
+  MinIO AIStor STS/OIDC shape, OpenMaxIO UI scope, Garage, RustFS, SeaweedFS,
+  and Ceph RGW.
+- D7.1 is done; follow-up implementation remains in D7.2-D7.5.
+
 ## D7.2 - MinIO Compatibility Harness
 
 ```task
 id: ARTIFACT-STORE-WP-0007-T002
-status: todo
+status: progress
 priority: high
 state_hub_task_id: "c826f3ac-2ed7-4150-aa7c-e778ae71a72b"
 ```
@@ -93,6 +104,19 @@ Acceptance:
   target.
 - Document manual smoke commands and expected health/verify outputs.
 
+
+Progress 2026-06-27:
+
+- Added skipped-by-default live MinIO tests in
+  `tests/integration/test_storage_s3_minio.py`. The harness runs only when an
+  operator supplies `ARTIFACTSTORE_MINIO_ENDPOINT_URL`, bucket, access key, and
+  secret key through the local environment.
+- Added `make test-minio` and documented the manual MinIO smoke in
+  `docs/OPERATOR.md`, including required permissions and the non-secret
+  application-level `ARTIFACTSTORE_S3_*_REF` mapping.
+- Remaining D7.2 gate: run the harness against an approved MinIO-compatible
+  endpoint and capture the health/round-trip/multipart result.
+
 ## D7.3 - STS Credential Vending Assessment For NetKingdom
 
 ```task