Files
chanora/docs/governance/decision-impact-assessment.md
T
EdisonJwa 02ffadfa52 docs(ptt): land Baseline Candidate v0.9.3 — capability-based desktop PTT
Applies the gen2 desktop-PTT review summary
(`gen2/chanora-desktop-ptt-review-summary-v0.9.2.md`) to our doc set
with the owner rulings PTT-OPEN-001 through PTT-OPEN-006 resolved as
accepted decisions DEC-023 through DEC-028:

  * DEC-023 Windows Global PTT P0 / MVP
  * DEC-024 macOS Global PTT P0 / MVP with permission UX
  * DEC-025 Linux officially-tested env: GNOME on Wayland only
  * DEC-026 Mouse side buttons supported (Win + macOS; Linux portal)
  * DEC-027 PTT diagnostics: capability + availability only, no
            raw key codes ever
  * DEC-028 Missed-key-up watchdog: P0

Requirements (SysRS / SRS) and architecture (SysDes / SAD / SDD)
gain the desktop-PTT ID set the gen2 summary describes:

  SysRS-296..302  -> SysDes-142..148
                  -> SRS-195..203
                  -> SAD-071..079
                  -> SDD-081..092

ID totals advance from 295 / 141 / 194 / 70 / 80 to 302 / 148 / 203
/ 79 / 92. The strict layered sourcing rule (`SRS -> SysDes` only,
`SAD -> SRS` only, `SDD -> SAD` only) is preserved; the
`tools/validate_docs.py` validator reports zero undefined refs and
zero direct-layer-rule violations.

New document:

  * `docs/architecture/desktop-ptt-architecture.md` — capability
    ladder (L0Focused, L1GlobalShortcut, L2GlobalHoldToTalk,
    L3GlobalWithMouseButtons, L4DeviceAware reserved), Windows /
    macOS / Linux strategies, privacy rule, audio-gate rule,
    missed-key-up watchdog, release-readiness evidence requirement,
    traceability summary.

Doc addenda (Baseline Candidate 0.9.3):

  * `privacy/privacy-policy.md` — no raw key history, capability-
    dependent Global PTT, UI reflects actual runtime capability
  * `security/threat-model.md` — THREAT-PTT-001..006
  * `security/diagnostic-redaction-audit-report.md` —
    REDACT-PTT-001..006 banned field list enforced by `PttSanitizer`
  * `release/platform-release-policy.md` — per-platform evidence
    fields, no over-claim on untested Linux compositors
  * `release/release-readiness-go-nogo-record.md` — RR-PTT-001..008
    release-readiness items
  * `verification/swe4-unit-verification-plan.md` —
    SWE4-UV-035..039
  * `verification/swe5-software-integration-verification-plan.md` —
    SWE5-IV-015
  * `verification/swe6-software-verification-plan.md` — SWE6-SV-017
  * `verification/sys4-system-integration-verification-plan.md` —
    SYS4-SIV-016
  * `governance/traceability-matrix.md` — full PTT trace rows +
    verification map
  * `governance/decision-impact-assessment.md` — DEC-023..028
    impact matrix
  * `governance/product-decision-register.md` v0.9.9 entry
    recording DEC-023..028 in the decision table and the status
    table at §7
  * `governance/document-index.md` — adds
    `desktop-ptt-architecture.md` to the controlled set
  * `architecture/proof-of-concept-plan.md` —
    PoC-PTT-001..005 platform items
  * `references/external-references.md` — Windows Raw Input,
    macOS event-tap, Linux GlobalShortcuts portal references
  * Both validation reports
    (`baseline-candidate-validation-report.md`,
    `repo-format-validation-report.md`) bumped to v0.9.3 with the
    new ID totals (302 / 148 / 203 / 79 / 92).

README §"Desktop Push-to-Talk" added between Architecture Overview
and Repository Layout: capability levels, per-platform strategy,
privacy posture, missed-key-up watchdog.

Tooling:

  * `tools/validate_docs.py` copied from the gen2 zip into the
    repo tree (was previously available only inside the zip).
    Reports zero undefined refs, zero direct-layer-rule violations,
    English-only CJK check passes. The 35 "old package-style
    filename" hits are pre-existing and identical to the gen2
    baseline (they live in `path-migration-map.md` and config-ID
    headers of governance docs and are intentional per the path
    migration policy).
  * `.gitignore` adds `/gen2/` so the externally-provided review
    package does not enter the repo.

No code changes in this commit; B (the implementation split into
`transmit_active` / `capture_active`, `PttCapabilityLevel`
reporting, `PttSanitizer` diagnostics rule, and the UI capability
badge) follows in a separate commit.
2026-05-15 14:51:22 +08:00

6.5 KiB

CHANORA_CFG_Decision_Impact_Assessment_v0.9.2.2.1

Document type: Configuration / Decision Impact Assessment
Version: 0.9.2
Status: Baseline Candidate
Language: English
Product: Chanora
Repo path: docs/governance/decision-impact-assessment.md ---

1. Purpose

This document records how key unresolved product and architecture decisions affect requirements, architecture, detailed design, verification, release readiness, security, privacy, and legal work products.

2. High-Impact Decision Assessment

Decision Recommended decision Impact if changed later
Minimum iOS version iOS 13 Test matrix, platform support policy, app store build configuration, platform behavior tests.
Minimum Android version API 24 Device support, permissions, audio routing, Google Play compatibility, platform tests.
Android target SDK Google Play-required API level on upload date; current release gate uses API 35+ unless newer policy applies
Apple App Store SDK gate Xcode 26+ with iOS 26 / iPadOS 26 SDK+ for App Store Connect upload on or after 2026-04-28 unless newer Apple upload policy applies Google Play submission eligibility and platform permission behavior.
Multiple active connections Exclude from MVP If added later, affects state model, audio routing, UI layout, reconnection logic, storage, verification.
AEC/AGC/NS/HPF defaults Enabled by default where supported Affects UX, CPU, platform-specific audio settings, verification matrix.
Audio processing path Platform-native first; fallback later Affects audio architecture, Rust/native dependencies, latency, CPU, platform compatibility.
Trademark/legal review Required before public/store release Blocks public release if unresolved.
Local DB SQLite or equivalent Affects storage schema, migrations, backup/delete policy, tests.
Bridge Stable typed generated/schema-controlled bridge Affects API stability, async event flow, maintainability, code generation, tests.
Diagnostics upload No automatic upload in MVP Affects privacy policy, security review, support process.
Crash reporting Disabled unless later approved Affects privacy/legal docs, dependency and supply-chain review.

3. Document Update Rules

If decision changes Update required
Minimum iOS/Android version changes SysRS, SysDes, SRS, SAD, SDD, SYS.4, SWE.6, Release Readiness
Apple SDK submission gate changes SysRS, SysDes, SRS, SAD, SDD, SWE.6, Release Readiness
Android target SDK changes SRS, SWE.6, Release Readiness, Platform Guide
Multiple connections added to MVP SysRS, SysDes, SRS, SAD, SDD, SWE.4, SWE.5, SWE.6, SYS.4
Audio defaults change SysRS, SysDes, SRS, SAD, SDD, SWE.4, SWE.5, SWE.6
Audio implementation path changes SysDes, SAD, SDD, SWE.4, SWE.5, SYS.4
Legal/trademark policy changes Release Readiness, Legal Review, Privacy Policy, External References
DB choice changes SysDes, SRS, SAD, SDD, SWE.4, SWE.5
Bridge choice changes SysDes, SAD, SDD, SWE.4, SWE.5
Diagnostics upload enabled SysRS, SysDes, SRS, SAD, SDD, Threat Model, Privacy Policy, Redaction Audit, Release Readiness
Crash reporting enabled SysRS, SysDes, SRS, SAD, SDD, Privacy Policy, Dependency Report, Release Readiness
  1. Confirm release type and staged platform policy.
  2. Confirm mobile minimum versions and Android target SDK policy.
  3. Confirm one active server connection for MVP.
  4. Confirm audio processing defaults.
  5. Confirm audio implementation path.
  6. Confirm diagnostics/crash reporting privacy policy.
  7. Confirm SQLite/equivalent local database.
  8. Confirm bridge choice.
  9. Confirm legal/trademark/public wording review requirement.
  10. Confirm license model before public release.

5. Change History

Version Date Description
0.9.0 2026-05-14 Initial decision impact assessment for key product and architecture decisions.

Baseline Candidate 0.9.1 Update

Version Date Description
0.9.1 2026-05-14 Updated baseline after product decision closure: Apple App Store SDK gate uses Xcode 26+ and iOS 26 / iPadOS 26 SDK+ for App Store Connect upload on or after 2026-04-28, platform baselines and decision traceability propagated across the document set.

Baseline Candidate 0.9.2 Update

Version Date Description
0.9.2 2026-05-14 Corrected Apple App Store Connect upload gate to 2026-04-28 and checked full-package naming, references, and coverage.

Desktop Push-to-Talk Decision Impact Addendum (Baseline Candidate 0.9.3)

The owner rulings recorded as DEC-023 through DEC-028 on 2026-05-15 affect the documents below. If any of those decisions are revisited the documents listed must be re-validated for consistency.

Decision Affects
DEC-023 Windows Global PTT P0 docs/architecture/desktop-ptt-architecture.md, docs/architecture/sad.md SAD-072, docs/architecture/sdd.md SDD-083/084, docs/requirements/srs.md SRS-197, docs/release/release-readiness-go-nogo-record.md RR-PTT-001
DEC-024 macOS Global PTT P0 + permission UX docs/architecture/desktop-ptt-architecture.md, docs/architecture/sad.md SAD-073, docs/architecture/sdd.md SDD-085, docs/requirements/srs.md SRS-198, docs/release/release-readiness-go-nogo-record.md RR-PTT-002/003
DEC-025 Linux GNOME-Wayland only docs/architecture/desktop-ptt-architecture.md, docs/architecture/sad.md SAD-074, docs/architecture/sdd.md SDD-086, docs/requirements/srs.md SRS-199, docs/release/platform-release-policy.md, docs/release/release-readiness-go-nogo-record.md RR-PTT-004/005
DEC-026 Mouse side buttons docs/architecture/desktop-ptt-architecture.md, docs/requirements/srs.md SRS-200, docs/architecture/sad.md SAD-072/073, docs/architecture/sdd.md SDD-083/085
DEC-027 PTT diagnostics privacy docs/privacy/privacy-policy.md, docs/security/diagnostic-redaction-audit-report.md, docs/security/threat-model.md, docs/requirements/srs.md SRS-202, docs/architecture/sad.md SAD-077, docs/architecture/sdd.md SDD-090
DEC-028 Missed-key-up watchdog P0 docs/architecture/desktop-ptt-architecture.md, docs/requirements/srs.md SRS-203, docs/architecture/sad.md SAD-079, docs/architecture/sdd.md SDD-092, docs/release/release-readiness-go-nogo-record.md RR-PTT-007
Version Date Description
0.9.3 2026-05-15 Recorded the desktop-PTT decision impacts for DEC-023..028.