ADR-011: Accepted Both halves are in: the relocation strategy layer and the install pipeline that calls it. The record matches what shipped, including the consequences a live audit added.
ADR-011: relocating an installation, and installing it Records the Relocator contract and the ordered selector, the pre-download capability check, the text-layer primitives and the rule that nothing written may carry the install path, the atomic publish with a refused destination unless --overwrite, the manifest without absolute paths, and that --dry-run is the plan command itself.
ADR-010: accepted Planning an installation: selection by package name and architecture with the dependency fields deliberately not followed, the archive URL and destination rules, the plan'"'"'s shape and order, and "not found" as the failure for a plan that cannot be built. Its implementing change is internal/catalog and plan install-qt. Status moves from Proposed; the index follows.
ADR-010: planning an installation, and an ADR-009 amendment ADR-010 fixes how a request becomes a list of archives: selection by package name and architecture with the dependency fields deliberately not followed, the archive URL rule, the destination rule (per package, from Extract, and the root when there is none), the plan's shape and order, and "not found" as the failure for a plan that cannot be built. It corrects an earlier note: a package without Extract extracts to the install root, because its archive carries the version and architecture inside itself. ADR-009 gains decision 7 (identity positional, modifiers as options) and decision 8 (an option keeps the reference tool's name, so the install directory flag is -O/--outputdir). The first cut of list-qt had made host and target options against the plan's own section 11; the amendment moves it back.
ADR-009: accepted The shape it fixes is the one that shipped: the standard library, the tree as the whole vocabulary, the two ways an option's value is written, and the service seam a command reaches no further than. Its implementing change is list-qt, the first business command. Status moves from Proposed; the index follows.
Home: drop the note that the CLI record is still owed ADR-009 exists and is listed in the table, so the paragraph saying a record is still owed for the command line contradicted the table above it.
ADR-009: the command line's shape and its parser The front end was written before the record: the tree is data, the grammar is confined to parse.go/options.go, and the plan has carried "a record is still owed" since. It is owed now that list-qt is the first business command. Records the standard library, the tree as the whole vocabulary, the two ways an option's value is written, and the service seam a command reaches no further than.
ADR-008: accepted Finding a version in the repository: probe an ordered list of observed layouts and never branch on a version; Updates.xml is authoritative; architectures come from the listing; a page is a listing only if it says so; and the segment is an observed entry too. The order is by what the version directory listing shows, which is what makes the three captured fixtures the probe's table.
ADR-007: accepted The download policy is settled: HTTPS only, mirrors named on the command line in order, the digest served by the official endpoint and never by the mirror, and trust placed in content rather than in hosts. Status moves from Proposed; the implementing changes are the archive digest field and the transport that follows.
ADR-007: transport security and mirror trust (Proposed) Records the download policy as a decision: HTTPS only, mirrors named on the command line in order, the digest served by the official endpoint and never by the mirror, and trust placed in content rather than in hosts -- which is what removes the allowlist. Also amends ADR-001 section 4: Archive.SHA256 becomes SHA1, because SHA-1 is what the metadata declares, while the verified SHA-256 is the transport's. The wiki copy is updated with the change so the amendment is not one-way.
ADR-006: accepted Its implementing changes are in: the build driver, the pinned C toolchain and its floor, the on-demand floor check, and build -cc. Status moves from Proposed, and the index follows.
Add ADR-006: building and testing The build driver, the pinned C toolchain and the manual release say what a build promises about the machine it runs on, which is a decision rather than mechanics.
ADR-005: accepted Its implementing changes are in: the extraction policy layer and the tightening of the symlink target rule. Status moves from Proposed, and the index follows.
Add ADR-005: Extracting an archive into a destination directory Proposed. Records the destination contract, name validation, the bounded re-creation of symlinks (with the per-platform counts measured from the vendors' archives), the limits checked before decoding, and the split from publishing. Also lists ADR-004 in the index, which it had been missing from.
Add ADR-004: encoding a version into a directory name The rule follows the corpus distribution (two-digit tokens are 5.x releases with a zero patch and a one-digit minor, 5.0-5.2 extrapolated), the extension is the caller's, and the encoder decodes its own output back as a check. Candidate paths belong to discovery.
Clarify the suffix and error contracts, and drop a stale open question Suffix ordering is lexical rather than SemVer-style; *errs.Error is the canonical CodedError; the JSON envelope covers failures only. The home page no longer lists the CLI parser as undecided, since the front end already settled it.
Replace the placeholder home page with a decision-record index
Initial Home page