v0.18.0 — Operator Onboarding

What's New

GitWire now guides new operators from first dashboard login to a safe governed rollout: verify setup, choose an appropriately safe starter policy, validate and simulate it, then promote it through the governed rollout lifecycle.

First-Run Setup Checklist

The dashboard shows an 8-check panel that surfaces installation state immediately:

Check	Blocking	What it verifies
GitHub App configured	✅	App ID and private key are set
Database connected	✅	PostgreSQL is reachable
Redis connected	✅	Redis is reachable
GitHub App installed	✅	At least one installation is linked
Repositories synced	✅	At least one repo has been imported
Webhook events received	⚠️ (warn)	Webhooks flowing within 7 days
Policy file configured	⚠️ (warn)	.gitwire.yml or dashboard overrides exist
Dry-run mode	ℹ️ (info)	Shows whether dry-run is active

The checklist auto-hides when ready and provides a "next step" CTA. No secret values are ever returned.

Safe Starter Policy Templates

When .gitwire.yml is missing, the checklist shows 5 templates with explicit safety labels:

Template	Safety Label	Best For
Starter (Dry-Run)	🟢 Dry-run protected	Safest first config — all pillars observe only
Triage Only	🟢 Low-risk live	Issue/PR labeling — labels and comments only
CI Healing (Preview)	🔵 Safe to preview	CI diagnosis without patching
Open-Source Maintainer	🟡 Review before rollout	Balanced automation for public repos
Strict Governance	🟢 Dry-run protected	Enterprise/regulated repos — audit-first

10-Step Onboarding Walkthrough

A complete guide takes operators from zero to first governed rollout: First-Run Onboarding

graph LR
    A[Install] --> B[Configure App]
    B --> C[Start Services]
    C --> D[Open Dashboard]
    D --> E[Use Checklist]
    E --> F[Pick Template]
    F --> G[Validate]
    G --> H[Simulate]
    H --> I[Create Rollout]
    I --> J[Approve & Promote]

Security

• Path injection fix in template service (CodeQL-identified, defense in depth)
• CodeQL workflow_dispatch added for manual baseline refresh
• Tracking issue #46 for 12 pre-existing CodeQL alerts

Landing & Docs Refresh

• Updated test count, features, and GitHub links across landing page
• README: new Operator Onboarding section with API endpoints
• Docs index reordered to product story order

New API Endpoints

Endpoint	Purpose
GET /api/setup	8-check setup status with overall state and next step
GET /api/setup/templates	List all starter policy templates
GET /api/setup/templates/:id	Get a template with full YAML content

Full Changelog: v0.17.0...v0.18.0