SOV-GIT-INVERTED-MONOREPO-v2026 SnapKitty_Sovereign_Transformer Ahmad_Ali_Parr Prolog_Verified_Deterministic Bifrost_WORM_Chain Architect_String Veto_Power_On_Merge, Schema_Evolution, Key_Rotation ZERO_TRUST_VERIFIED Eng_Team_Alpha Push_Feature_Branches, Propose_Merge_To_Main SIGNED_COMMITS_MANDATORY Hauki_Fn_Ops_Bot Read_Registry, Deploy_Staging, Attest_Build Inverted_Monorepo The Monorepo IS the Infrastructure. Git Server (Gitea) runs INSIDE the monorepo as a sovereign service. GitHub acts ONLY as a WORM Mirror (GitOps) and Public Registry (GHCR) facade. Gitea_Rootless_Hardened 127.0.0.1:3000 sov-worm-git-storage Ed25519_SSH_Keys_Only GHCR_Facade Push_Only_If_WORM_Seal_Valid ghcr.io/sov-org Serverless_Function_Runtime Git_Push_Tag_Match:v* Verify_Attestation -> Deploy_Sov_Docker All merges to main require Architect Ed25519 Counter-Signature. Schema changes (SQL/Proto/JSON) require Formal Verification Proof (Prolog). Zero external dependencies allowed in base images (FROM scratch only). Commits MUST be GPG/SSH signed (Ed25519). Branch namespacing: feat/{eng-id}/{ticket} | fix/{eng-id}/{ticket}. Pre-commit hook: sov-lint --polite --intercol-contract No force-push to protected branches (Rejected by Server Hook). Conventional Commits 1.0.0 Strict (feat, fix, chore, docs, refactor, test). Review requirement: 2 Approvals (1 must be Architect for infra). All inter-service calls MUST define Protobuf/JSON Schema in contracts/ Breaking change detection runs in CI (Buf/Pact). Runtime enforcement via Sidecar Proxy (Envoy/WASM). 1. Dev clones from sov-git-server (localhost:3000). 2. Dev codes, runs sov-attest.sh (Blake3+Ed25519). 3. Push to sov-git-server. Pre-receive Hook validates WORM Seal. 4. Sov-Git-Server Mirror Job pushes to GitHub (--mirror). 5. GitHub Actions (Read-Only) triggers Hauki Fn Ops. 6. Hauki Fn pulls image, verifies .worm sidecar. 7. If VALID -> Push to GHCR (sov-org/repo:v{semver}). 8. If INVALID -> Quarantine, Alert Architect via Bifrost Log. This XML Deed is the Source of Truth. Any deviation requires Architect Counter-Signature + New Deed Version.