--- id: PMEM-WP-0013 type: workplan title: "Credentialed Adapter Drills And Deployment Packaging" domain: markitect repo: phase-memory status: finished owner: codex topic_slug: phase-memory created: "2026-05-19" updated: "2026-05-19" state_hub_workstream_id: "3343c4bf-40f4-42c9-9713-2a441349f723" --- # PMEM-WP-0013: Credentialed Adapter Drills And Deployment Packaging ## Goal Move from live-shaped local fixtures to optional credentialed operational drills, deployable service packaging, and compatibility release discipline. ## Current Evidence `PMEM-WP-0012` added service binding, executable local-store migrations, live-shaped adapter packs, audit retention/export plans, evaluation threshold reports, and public API snapshots. The scorecard now rates the repo at **4.2 / 5**. ## Non-Goals - Require live credentials in default tests. - Store credentials, tokens, or endpoints in Git. - Make one hosted service topology mandatory. - Move Markitect or Kontextual ownership into phase-memory. ## T01 - Add credential-gated adapter smoke drills ```task id: PMEM-WP-0013-T01 status: done priority: high state_hub_task_id: "e4940a9d-130e-47ea-ba16-7b090841855c" ``` Add optional smoke tests for credentialed Markitect/Kontextual adapters that skip unless explicit environment variables are present. Acceptance: - Default test suite remains offline and deterministic. - Credentialed drills reuse adapter manifest validation and conformance helpers. - Skipped tests clearly list the required environment variables. ## T02 - Package the service binding for deployment ```task id: PMEM-WP-0013-T02 status: done priority: high state_hub_task_id: "bf8d2159-761a-47f5-b7be-41ad52460b64" ``` Add a deployable service entrypoint around the framework-neutral binding. Acceptance: - The package can expose health, readiness, contracts, and operation dispatch over a local service process. - Deployment remains optional and dependency-light. - Tests cover entrypoint construction without opening a real listener. ## T03 - Add operator readiness runbook ```task id: PMEM-WP-0013-T03 status: done priority: medium state_hub_task_id: "7e39e894-8754-4977-abdd-00f3bf1a73d1" ``` Document service startup, readiness checks, migration apply, audit export, and rollback expectations for operators. Acceptance: - Runbook covers happy path and failure triage. - It distinguishes local fixture mode, live-shaped mode, and credentialed live mode. - It links back to API compatibility and maturity gates. ## T04 - Enforce audit retention pruning plans ```task id: PMEM-WP-0013-T04 status: done priority: medium state_hub_task_id: "b23e3126-bbfa-44b1-b2a1-22cda968f5d8" ``` Move from retention planning to explicit retention apply behavior. Acceptance: - Audit sinks can produce and apply deterministic pruning plans. - Apply behavior records an audit event. - Tests cover no-op, eligible-record, and unsupported-sink paths. ## T05 - Add evaluation trend artifacts ```task id: PMEM-WP-0013-T05 status: done priority: medium state_hub_task_id: "2e71fedd-aac6-42c9-822c-6305412ea064" ``` Persist deterministic evaluation reports as trendable artifacts. Acceptance: - Reports include run metadata and threshold deltas. - Fixtures can be compared without live dependencies. - Regression diagnostics remain actionable. ## T06 - Add compatibility release notes template ```task id: PMEM-WP-0013-T06 status: done priority: low state_hub_task_id: "c1a8f699-9a0b-4983-8d35-e59cd124dd58" ``` Add release-note and migration-note templates for public API changes. Acceptance: - Template calls out changed exports, changed service operations, migration needs, and operator action. - API snapshot updates require a release note reference. ## Acceptance Criteria - The project has concrete evidence toward the 4.3+ scorecard gate. - Credentialed adapter drills are available but never required by default. - Service binding can be packaged and exercised as an operator-facing service. ## Closure Review Completed on 2026-05-19. Implemented: - Credential-gated adapter drill helpers and a skipped smoke test that lists required environment variables when credentials are absent. - `phase-memory-service` stdlib service entrypoint with check mode, WSGI app creation, and no-listener tests. - Operator readiness runbook covering startup, readiness, migrations, audit export/retention, credentialed drills, rollback, and compatibility release discipline. - Audit retention apply behavior for recording, JSONL, and telemetry sinks, with runtime audit traces and unsupported-sink coverage. - Evaluation trend artifacts with run metadata, threshold deltas, metric deltas, and regression diagnostics. - Release-note template and public API snapshot gate requiring compatibility release notes for changed exports or service operations. - Scorecard update from 4.2 to 4.3 and PMEM-WP-0014 as the next ready refinement workplan. Verification: - Focused PMEM-WP-0013 tests passed: 18 passed, 1 skipped.