docs: record verified agile CI rollout and measurements

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

CLAUDE.md

@@ -29,7 +29,7 @@ GitHub Issues (org: KofTwentyTwo). Commit format: `feat(#N): description` or `Cl
 
 - Namespace: `kof22`
 - Orb: `kof22/munitor`
-- Latest stable: `kof22/munitor@0.3.3`
+- Latest stable: `kof22/munitor@0.3.10`
 - Dev snapshot: `kof22/munitor@dev:snapshot`
 
 `0.3.0` includes first-class pnpm support, repository-owned Dockerfiles for

README.md

@@ -77,9 +77,9 @@ replace that repository's required-check list with the verified aggregate gate,
 preserving all other branch rules. A single adoption PR may update both orb pins
 and enable `ci.docs_only`: those config changes force full CI. Verify the gate
 and migrate required checks before merging it or opening a docs-only PR. Munitor's
-own native no-op gate is expected to report `ci/circleci: lint-pack/ci-ready`;
-verify its actual context before changing its rules. Release and real-context
-verification are still pending; see [the adoption plan](docs/PLAN-agile-ci.md).
+own native no-op gate reports `ci/circleci: lint-pack/ci-ready`. Both features
+ship in 0.3.10. Verify each consumer's actual successful context before changing
+its rules; see [the adoption record](docs/PLAN-agile-ci.md).
 
 Use native [Website-Backend Insights](https://app.circleci.com/insights/github/KofTwentyTwo/Website-Backend/workflows),
 [PR timings](https://app.circleci.com/insights/github/KofTwentyTwo/Website-Backend/workflows/pr-checks),

docs/PLAN-agile-ci.md

@@ -1,8 +1,11 @@
 # Agile CI adoption
 
-Implemented locally: an opt-in `java-webapp` docs-only workflow, aggregate consumer
-gate, and native no-op gate for Munitor's own checks. Publication, real check-context
-verification, required-check migration and consumer opt-in remain pending.
+Released as 0.3.10: opt-in documentation-only Java CI and aggregate merge results.
+PR48 implemented it; PR49 released main 19192d07, signed tag v0.3.10 published,
+and PR50 back-merged to develop 81ac29ee. All hosted checks passed. Munitor's
+actual `ci/circleci: lint-pack/ci-ready` now protects main/develop; unrelated
+policy is unchanged. Backend PR333 passed full consumer validation before its
+required checks changed. Docs PR335 passed the two-job path and cancellation proof.
 
 ## Contract
 
@@ -16,17 +19,17 @@ verification, required-check migration and consumer opt-in remain pending.
 
 ## Required order
 
-1. Local make all, 20 BATS, 31 classifier cases, eight source/packed graph cases, and CircleCI config validation passed. Finish hosted CI and publish the gate-capable orb.
+1. Local make all, 20 BATS, 31 classifier cases, eight source/packed graph cases, and CircleCI config validation passed. Hosted CI and stable publication also passed.
 2. Adopt it in the consumer with docs-only disabled. Observe successful actual
    GitHub context `ci/circleci: ci-ready`; do not infer the name from YAML alone.
 3. Replace the consumer required-check list with that verified aggregate context,
    preserving review, signature, conversation, bypass and all other branch rules.
 4. Enable `ci.docs_only: true`; prove docs-only and mixed/code changes select the
    expected paths and retain the required gate.
-5. Separately verify Munitor's native no-op context (expected
+5. Separately verify Munitor's native no-op context (observed
    `ci/circleci: lint-pack/ci-ready`) before migrating its required checks.
 
-All five adoption steps are pending; an implemented template is not rollout proof.
+Publication and both required-check migrations are complete, following successful actual-context verification.
 To avoid duplicate full builds, the pin and opt-in may share one adoption PR:
 the manifest/config changes force full CI. Verify its gate and migrate required
 checks before merging or opening a docs-only PR.
@@ -44,3 +47,15 @@ blend docs runs into a claimed full-build improvement or sum parallel job median
 
 Backend native auto-cancel is on; main is its exempt default branch. Munitor stays
 off because develop is its default and main/release work is not similarly exempt.
+
+## Observed consumer results
+
+Backend PR333 (664efcad) ran the complete pipeline in 15m33, with all 777 test
+identities preserved and every check successful, including the actual required
+ci/circleci: ci-ready. Required lists on main/develop were migrated only after
+that proof; all other rules were verified unchanged. The latest full run is a
+sample, not a new median; the earlier successful parallel-suite run was 14m49.
+
+Docs PR335 selected only secrets-scan and ci-ready. A follow-up documentation
+commit caused native cancellation of the older workflow after 44 seconds, with
+no explicit cancel API call. The final docs run passed in 5m23 (313s secrets scanning, 4s aggregate result), then merged as 8dda8339. Main also selected only those two jobs, with no application release.

docs/SESSION-STATE.md

@@ -1,3 +1,22 @@
+## Verified agile CI rollout (2026-10-19)
+
+Munitor 0.3.10 is published from main 19192d07 (PR48 implementation, PR49 release,
+PR50 back-merge). Backend PR333 adopted it and passed the complete workflow:
+777 identical test identities, zero failures/errors, five skips, 15m33 elapsed.
+Its actual ci/circleci: ci-ready result now protects main/develop; Munitor uses
+ci/circleci: lint-pack/ci-ready. Only the required-check lists changed; other
+branch rules are unchanged. Published source and actual consumer compilation passed.
+
+Backend docs PR335 selected exactly secrets-scan plus ci-ready, without build,
+image or deployment jobs. Native auto-cancel canceled the first docs run after
+44 seconds when the final documentation commit arrived. No cancellation script
+or manual cancellation was used. The final docs run passed in 5m23 and merged as 8dda8339; main also selected only those two jobs.
+
+Native Insights supplies ongoing P50/P95 and flaky-test reporting. Historical
+windows lag current work; compare matching samples and keep docs-checks separate.
+Backend auto-cancel is enabled; Munitor remains off because its default develop
+would not exempt main release workflows. No new orchestration or reporting service.
+
 ## Release 0.3.10 (2026-10-19)
 
 PR48 merged as f9ef625 after all hosted checks passed on a56ef1d. Local make all,

docs/TODO.md

@@ -2,7 +2,7 @@
 
 ## Pending
 
-- [ ] Publish and adopt aggregate CI result and docs-only opt-in; verify real check names before changing required checks (docs/PLAN-agile-ci.md).
+- [x] Publish 0.3.10, adopt in backend PR333, verify aggregate check names and migrate required lists; docs PR335 passed in 5m23 and native cancellation was observed (docs/PLAN-agile-ci.md).
 
 - [x] Publish fast Java CI as 0.3.9; backend PR330 adopted it and measured the warm workflow at 20m45 (from 37m04).