Home

platform-factory wiki

Landing page for the wiki. Everything here decays the same way source code does — if a page cites a commit, workflow, or code path, re-verify it before trusting it, don't assume it's still true.

Start here

• Architecture and Platform Factory vision — diagram-heavy overview of the system as it exists today, plus the v6 "Graal" vision and a status table mapping one onto the other. The best single-page orientation.

Architecture and design

• Next-Generation-Architecture — proposed v4/v5 architecture, Go contracts, package organization
• OCI-Layout-Architecture — the exact on-disk shape of a built image
• Meine-Graal — the full v6 Platform Factory vision (v6.0–v6.14), the source diagrammed on the architecture page above

Roadmaps

• Next-Generation-Implementation-Roadmap — v1–v5 implementation roadmap, checkbox-tracked against real commits
• Next-Generation-Stabilisation-Roadmap — post-implementation stabilization backlog (840+ items, the "15 priority actions" summary is the actionable part)

Reference

• Reference-Compatibility — host/target/runtime/ Kubernetes/hypervisor compatibility matrix, every row backed by a named CI workflow (mirrors docs/reference/compatibility.md)
• Reference-Maturity — Stable/Beta/Alpha/Stub/Out-of-scope per capability (mirrors docs/reference/maturity.md)
• OCI-Compatibility — OCI runtime/tool compatibility, qualification procedure for a new runtime
• API-Compatibility — wire/SDK compatibility policy
• Limitations — known limitations and troubleshooting (mirrors docs/limitations.md)

Security

• Security-Model — summary (mirrors docs/security/model.md)
• Threat-Model-and-Residual-Risks — full asset/actor/trust-boundary model, T01–T30 threat register, STRIDE, residual risks

Operations

• SLO — service level objectives, error budgets, alert rules
• Runbook-Incident-Response
• Runbook-Rollback

Deployment

• Containerd-and-Kubernetes — the platform-factory-shim/RuntimeClass MicroVM integration, why it's a custom shim rather than BinaryName on the stock runc shim

---

Most pages under Reference, Security model summary, and Limitations are mirrored from docs/ in the repository for a self-contained wiki. The repo copy stays authoritative for anything CI-cited; re-sync the mirror rather than editing it independently if the two drift.