[aarontrowbridge]

Onboarding runbook for the central hub (ADR 0041): per-user steps (Tailscale admission, person principal, Lab membership, vault via armonia-init, first session, budget), verification checklist, and rollback to local engines. No org/repo access changes.

Part of the central-hub campaign (session-20261104-central-hub). Human-only steps; the agent must not run them.

Refs #1874, #1876, #1880.

[coderabbitai]

Important

• Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: a1bea141-336e-452a-be81-d0156318b2e6

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[aarontrowbridge]

Director review (not merging as written). This describes the END STATE as if it exists; most steps cannot be followed today. Checked against the code:

• Step 1 says to send the join link/QR "from armonia init". scripts/armonia-init has no Tailscale code (grep finds none); it provisions vaults.
• Steps 2, 3 and 6 depend on the people registry (Armonia · Person identity: frontdoor authentication and verified principals #1874/Armonia · tailscale serve publishing + Tailscale identity headers → person principal (ADR 0037 §1) #1958), the membership filter (Armonia · Environment membership and per-session context resolution #1876) and fail-closed budgets (Armonia · Server-enforced campaign authorization and budgets #1880). Those slices are design only, so their verification steps cannot pass.
• Step 4 references an extension "hub-join flow" and a "Shared with " view; neither is in the tree.
• "tag:armonia-hub" and "institution SSO" don't exist in this tailnet / for these users.

Plan: keep this as the target state in the ADR, and write the real runbook once identity and membership land, validated by actually onboarding a second machine of Aaron's first. Targets main; should be lane/0.4.1 if it is revived. Closing for now.