CR-2026-03-16: Make nvim-domus Repository Public

Change Summary

Field Value

Change ID

CR-2026-03-16-NVIM-DOMUS-PUBLIC

Repository

github.com/EvanusModestus/domus-nvim (renamed from domus-instrumentum)

Current State

Private repository named domus-instrumentum

Target State

Public repository named domus-nvim

Requestor

Evan Rosado

Scheduled

2026-03-16

Risk Level

Low

Context

Personal infrastructure - enable sharing neovim config

Business Justification

Why Make Public?

  1. Sharing - Allow others to clone and use the neovim configuration

  2. P50 Setup - Gabriel’s workstation needs to clone without authentication

  3. Dotfiles Philosophy - Neovim configs are typically public (no secrets)

  4. Portfolio - Demonstrates Lua, neovim plugin architecture, documentation skills

Security Review

Audit performed 2026-03-16:

Check Result Status

Hardcoded credentials

None found

✅ PASS

API keys/tokens

None found

✅ PASS

SSH keys

None found

✅ PASS

Internal IPs

10.50.10.138 in bootstrap doc (non-sensitive)

✅ PASS

Personal information

Author name only (public anyway)

✅ PASS

Proprietary code

None - standard neovim config

✅ PASS

Conclusion: Repository is safe to make public.

Pre-Change Checklist

Item Action Status

Security audit

grep for secrets, tokens, keys

[x] Complete

CLAUDE.md review

No sensitive instructions

[x] Complete

.gitignore check

Excludes sensitive patterns

[ ] PENDING

README current

Describes project accurately

[ ] PENDING

Implementation Plan

Option A: GitHub Web UI

  1. Navigate to github.com/EvanusModestus/nvim-domus

  2. Settings → General → Danger Zone

  3. Change visibility → Make public

  4. Confirm repository name

Option B: netapi CLI (Preferred)

Add repo-update command to netapi, then:

# Load GitHub credentials
dsource d000 dev/github

# Change visibility
netapi github repo-update EvanusModestus/nvim-domus --visibility public

Option C: GitHub CLI (gh)

gh repo edit EvanusModestus/nvim-domus --visibility public

Post-Change Verification

# Verify public access (no auth required)
curl -s https://api.github.com/repos/EvanusModestus/nvim-domus | jq '.private'
# Expected: false

# Test anonymous clone
git clone https://github.com/EvanusModestus/nvim-domus /tmp/test-nvim-domus
rm -rf /tmp/test-nvim-domus

Rollback Plan

If needed, revert to private:

# Via gh CLI
gh repo edit EvanusModestus/nvim-domus --visibility private

# Or via netapi (after feature added)
netapi github repo-update EvanusModestus/nvim-domus --visibility private

Risk Assessment

Risk Impact Mitigation Probability

Accidental secret exposure

High - credential leak

Pre-change security audit completed

Very Low

Unwanted forks/issues

Low - minor annoyance

Can disable issues if needed

Low

Code criticism

None - learning opportunity

N/A

N/A

Implementation Log

Date Action Notes

2026-03-16

Security audit completed

No secrets found in repository

2026-03-16

CR created

Pending implementation

2026-03-16

Added repo-update to netapi

netapi github repo-update command for visibility, name changes

2026-03-16

Renamed repository

domus-instrumentum → domus-nvim

2026-03-16

Made public

netapi github repo-update EvanusModestus/domus-nvim --visibility public

2026-03-16

Updated local remote

git remote set-url origin git@github.com:EvanusModestus/domus-nvim.git

2026-03-16

Added neovim 0.11+ version check

init.lua shows clear error with install instructions for older versions

2026-03-16

Updated README.adoc

Requirements section, install instructions, renamed references

2026-03-16

PENDING: Push changes

Awaiting SSH agent setup, commit 47af28d ready

Related

Sign-Off

Role Name Date

Requestor

Evan Rosado

2026-03-16

Security Review

Claude (AI audit)

2026-03-16

Approver

Self-approved (personal)

2026-03-16