docs: mark claude-code-plugins adoption; resolve the D6 visibility watch-item - #36
Conversation
…tch-item claude-code-plugins onboarded to the CI platform (consumer PR #4; org ci-gate armed via github-iac PR #17). Update the rollout adoption table, per-repo note, and sequence (next: medley), and tick the Phase 6 checkbox in plan.md. Also reconcile architecture D6: the visibility watch-item is resolved by making ci-workflows public (a public consumer can only `uses:` public repos), so the "keep everything private" implication no longer holds for public providers. The constraints for any provider kept private are retained. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 50135e682f
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| Resolution (2026-06-23): the visibility watch-item was resolved by making | ||
| `ci-workflows` **public**, because `claude-code-plugins` (a public consumer) |
There was a problem hiding this comment.
This marks the visibility watch-item as resolved, but docs/dedup-program/README.md still lists the old active watch-items saying all constellation repos are private/in-org, private ci-workflows references will break for public consumers, and ci-workflows must keep org-access enabled. Because that README is described as the durable source of truth, readers will still follow the obsolete private-provider guidance after this public-provider decision unless those watch-items are updated or removed in the same change.
Useful? React with 👍 / 👎.
1 participant
Records the
claude-code-pluginsCI-platform adoption in the dedup-program docs.shellcheck(day one, repo already has shell hooks) and advisoryzizmor,osv-scannerskipped (no lockfiles), thehook-utils.shshebang fix, and the D3 bundle deferred to a second greenfield consumer; sequence advanced (next: medley).claude-code-pluginscheckbox ticked.ci-workflowsis public so a public consumer can reference it; the "keep everything private" implication is retired for public providers, with the private-provider constraints retained.Context: consumer CI = claude-code-plugins#4 (merged, green); governance = github-iac#17 (merged, applied —
requires-ci=true,ci-workflowsreconciled to public, free secret scanning enabled on both public repos).