Marcel 93e90424ab docs(adr): update ADR-028 with 0.30.6 verified findings for API key + read_only (#737) ...

- OLLAMA_API_KEY: non-enforcement confirmed on both 0.6.5 and 0.30.6
- read_only: true: confirmed working on both 0.6.5 and 0.30.6
- Peak RSS during pull: ~108 MiB (well under 2g limit)
- All TBD placeholders resolved

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-06 14:59:35 +02:00

..

001-ocr-python-microservice.md

docs(adr): add ADR-001 (OCR microservice) and ADR-002 (polygon JSONB)

2026-04-12 15:07:46 +02:00

002-polygon-jsonb-storage.md

docs(adr): add ADR-001 (OCR microservice) and ADR-002 (polygon JSONB)

2026-04-12 15:07:46 +02:00

003-chronik-unified-activity-feed.md

feat(chronik): add ADR-003 + Paraglide keys for /chronik page (de/en/es)

2026-04-20 20:38:10 +02:00

004-pdfbox-thumbnails.md

docs(infra): correct server specs — Hetzner Serverbörse i7-6700 64 GB, not CX32

2026-06-06 14:51:07 +02:00

005-thumbnail-aspect-and-page-count.md

docs(adr): ADR-005 thumbnailAspect + pageCount alongside the thumbnail

2026-04-23 21:38:56 +02:00

006-synchronous-domain-events-in-transaction.md

docs(adr): ADR-006 synchronous domain events inside the publisher's transaction

2026-04-28 21:42:03 +02:00

007-reader-dashboard-permission-discriminant.md

docs(adr): ADR-007 reader-dashboard permission discriminant

2026-05-08 15:56:47 +02:00

008-fts-sql-pagination.md

docs(adr): ADR-008 SQL-level FTS pagination via window-function CTE

2026-05-09 16:35:01 +02:00

009-standalone-compose-not-overlay.md

docs(adr): ADR-009 standalone docker-compose.prod.yml, not overlay

2026-05-11 13:14:58 +02:00

010-minio-self-hosted-not-hetzner-obs.md

docs(adr): ADR-010 MinIO stays self-hosted, Hetzner OBS deferred

2026-05-11 13:15:38 +02:00

011-single-tenant-gitea-runner.md

docs(adr): ADR-011 single-tenant Gitea runner with on-disk env-files

2026-05-11 13:16:20 +02:00

012-browser-test-mocking-strategy.md

revert(test): abandon shared-mock dedup — infeasible in vitest browser mode

2026-06-03 11:38:22 +02:00

012-nsenter-for-host-service-management-in-ci.md

docs(adr): ADR-012 — nsenter via privileged container for host service management in CI

2026-05-12 07:42:28 +02:00

013-client-branches-coverage-threshold.md

docs(adr-013): set exact baseline to 75% (confirmed in CI)

2026-05-14 09:03:45 +02:00

014-upload-artifact-v3-pin.md

docs(adr-014): record upload-artifact v3 pin and Gitea act_runner v4 limitation

2026-05-14 10:58:19 +02:00

015-dood-workspace-bind-mount.md

docs(adr): add ADR-015 for DooD workspace bind-mount approach

2026-05-15 19:38:18 +02:00

016-obs-stack-co-location-ci-push.md

docs(adr): correct ADR-016 Decision section to match two-source env model

2026-05-16 08:52:42 +02:00

017-management-port-security.md

docs(adr): add ADR-017 — Spring Boot 4.0 management port shares main security filter chain

2026-05-16 15:46:45 +02:00

018-glitchtip-frontend-error-tracking.md

docs(adr): add ADR-018 for GlitchTip frontend error tracking via @sentry/sveltekit

2026-05-17 10:27:46 +02:00

019-container-hardening-baseline.md

docs(adr): ADR-019 — container hardening baseline (non-root + read-only)

2026-05-17 17:33:06 +02:00

020-stateful-auth-via-spring-session-jdbc.md

docs(adr): ADR-020 — stateful auth via Spring Session JDBC

2026-05-17 19:15:51 +02:00

021-tmpdir-persistent-volume-staging.md

docs(infra): correct server specs — Hetzner Serverbörse i7-6700 64 GB, not CX32

2026-06-06 14:51:07 +02:00

022-csrf-session-revocation-rate-limiting.md

fix(auth): address PR #617 review feedback on CSRF/rate-limit implementation

2026-05-19 09:23:01 +02:00

022-eager-to-lazy-fetch-strategy.md

fix(document): fix test assertion structure + add entity graph decision comments

2026-05-19 09:23:30 +02:00

023-prometheus-instrumentator-and-metrics-registry-injection.md

docs: add ADR-023 and glossary entries for OCR metrics

2026-05-21 17:06:44 +02:00

024-grafana-reads-archive-db-via-bridged-network.md

docs(observability): ADR-024 + rotation runbook for grafana_reader

2026-05-22 17:21:27 +02:00

025-canonical-import-and-single-migration-schema-foundation.md

chore(import): stop tracking real family PII canonical artifacts

2026-05-28 10:20:38 +02:00

026-stammbaum-layout-in-house.md

docs(stammbaum): ADR-030 tidy-tree layout, supersede ADR-026 packer, refresh glossary (#724)

2026-06-04 14:55:10 +02:00

027-stammbaum-custom-viewbox-pan-zoom.md

fix(stammbaum): address re-review nits — opaque rail, stale docs, rail clarity (#692)

2026-05-29 20:21:13 +02:00

028-ollama-docker-compose-service.md

docs(adr): update ADR-028 with 0.30.6 verified findings for API key + read_only (#737)

2026-06-06 14:59:35 +02:00

028-pdfjs-wasm-decoders-and-csp-constraint.md

docs(adr): record pdf.js wasm same-origin serving + future-CSP constraint

2026-06-01 21:17:41 +02:00

029-composite-actions-for-cross-workflow-deploy-logic.md

docs(adr): add ADR-029 composite actions for cross-workflow deploy logic

2026-06-02 19:24:20 +02:00

030-briefwechsel-removal-unidirectional-search.md

docs(adr): record the bilateral->unidirectional search regression (ADR-030)

2026-06-03 10:26:54 +02:00

030-stammbaum-bloodline-tidy-tree-layout.md

docs(stammbaum): ADR-030 tidy-tree layout, supersede ADR-026 packer, refresh glossary (#724)

2026-06-04 14:55:10 +02:00

031-document-title-shared-factory-and-save-time-regeneration.md

docs(document): ADR-031 + glossary/c4/api_tests for auto-title sync (#726)

2026-06-04 16:44:56 +02:00

032-person-delete-db-level-integrity.md

test(person): address PR #736 review nits

2026-06-06 12:34:46 +02:00

033-tag-name-resolution-tolerates-case-collisions.md

docs(adr): renumber tag case-collision ADR 032 → 033 to resolve number clash (#731)

2026-06-06 13:52:25 +02:00