github-mirrors/opencode-agentic-platform-engineering
1
0
Fork 0
mirror of https://github.com/Team-Rockstars-AI/opencode-agentic-platform-engineering.git synced 2026-09-13 23:53:31 +02:00
Code Issues 5 Projects Releases 3 Packages Wiki Activity
3 releases 3 tags
  • v0.1 8dd3725e72

    v0.1-pre — EU-Sovereign Agentic Configuration Layer Pre-release

    zaph0d released this 2026-06-15 14:46:58 +02:00 | 32 commits to main since this release

    📅 Originally published on GitHub: Mon, 15 Jun 2026 12:47:14 GMT
    🏷️ Git tag created: Mon, 15 Jun 2026 12:46:58 GMT

    Introduction

    This release marks the completion of the EU-Sovereignty Agentic Configuration Layer milestone. We have systematically refactored the local agentic configuration layer to achieve strict data sovereignty and geopolitical compliance.

    This platform engineering repository scaffolds secure, compliant, and opinionated Azure landing zones and workload pipelines. With this release, the local multi-agent team (orchestrator, builders, auditors, and verifiers) is fully functional, secure, and aligned with EU data sovereignty standards.

    Highlights of All Commits in this Release

    • Sovereign-Friendly Model Migration: Migrated all Code-Generation and Task-Execution subagents from unavailable Mistral/Ollama endpoints to Cohere North Mini Code (opencode/north-mini-code-free), a highly capable, sovereign-friendly (Canadian-based, Apache 2.0), non-US, and non-Chinese model hosted for free on OpenCode.
    • Orchestrator Alignment: Configured the primary orchestrator to utilize Gemini 3.5 Flash (opencode/gemini-3.5-flash) as the authorized high-reasoning fallback for complex planning and task decomposition.
    • Sovereignty Policy Enforcement: Implemented a robust Python configuration layer (agent_config.py) with a strict SECURITY_POLICY that automatically overrides non-compliant models with sovereign-friendly defaults.
    • Jurisdiction Validation Hook: Added a validation hook that logs the origin jurisdiction of every model used in the orchestration loop and triggers a critical alert/exception if a non-EU, non-authorized model is selected for a restricted task.
    • Automated Verification Gating: Verified all 22 prompt files using the automated skill reference validator (validate-skills.py) and confirmed that all configurations are 100% syntactically valid.
    • Security Hardening & Micro-segmentation: Remediated critical security findings by implementing custom least-privilege pipeline roles, enabling Key Vault purge protection and network isolation, adding subnet-level NSGs, and enforcing strict pipeline error propagation (set -euo pipefail).
    • High-Value Provisioning Enhancements: Integrated an automated scaffolding script (scaffold.py), local pre-commit compliance hooks (Gitleaks, Checkov), and pre-populated Architecture Decision Records (ADRs) to establish immediate governance.
    Downloads