Context
Area
README.md:82 (deployment claim) ↔ repo deployment artifacts.
Severity
medium — drift between repo claims and actual deployment surface.
Evidence
README.md:82 — "NixOS. Reproducible builds, systemd hardening, declarative deployment from day one."find /home/ck/dev/akroasis -name "*.nix" -o -name "flake.nix" -o -name "*.service" -o -name "*.timer" -o -name "systemd*" → no results.standards/UDEV.md exists but references systemd tags without accompanying unit files.
Conflict
A core design constraint is advertised in the README as shipped, yet no deployment configuration exists in the repo — no flake.nix, no systemd units, no NixOS module.
Why it matters
The fleet's operational story depends on reproducible NixOS deployments. An operator reading the README cannot deploy the system as described. This is a false-capability claim on the front-page of the repo.
Done criteria
- Add
flake.nix, systemd .service / .timer units, and deployment docs, or
- Downgrade the README claim to "planned" with a link to a tracking issue.
Source
Kimi L1+L2 audit pipeline 2026-04-25.
Provenance
Originally filed on the kanon forge as issue #11 on 2026-04-25T20:15:04.990177958-05:00[America/Chicago]. Recovered from 2026-05-09 pre-brick restic backup. Forge URL no longer reachable post firmware brick.
Severity
P3
Context
Area
README.md:82(deployment claim) ↔ repo deployment artifacts.Severity
medium — drift between repo claims and actual deployment surface.
Evidence
README.md:82— "NixOS. Reproducible builds, systemd hardening, declarative deployment from day one."find /home/ck/dev/akroasis -name "*.nix" -o -name "flake.nix" -o -name "*.service" -o -name "*.timer" -o -name "systemd*"→ no results.standards/UDEV.mdexists but references systemd tags without accompanying unit files.Conflict
A core design constraint is advertised in the README as shipped, yet no deployment configuration exists in the repo — no
flake.nix, no systemd units, no NixOS module.Why it matters
The fleet's operational story depends on reproducible NixOS deployments. An operator reading the README cannot deploy the system as described. This is a false-capability claim on the front-page of the repo.
Done criteria
flake.nix, systemd.service/.timerunits, and deployment docs, orSource
Kimi L1+L2 audit pipeline 2026-04-25.
Provenance
Originally filed on the kanon forge as issue #11 on 2026-04-25T20:15:04.990177958-05:00[America/Chicago]. Recovered from 2026-05-09 pre-brick restic backup. Forge URL no longer reachable post firmware brick.
Severity
P3