Single place to see what each project is, where its docs live, its GitHub issues, and current status. Deep technical + compliance docs live inside each project repo under docs/ (see "Per-project docs" below). This workspace folder keeps only the status hub + workspace-wide references.

Last updated: 2026-09-02.

Corporate structure (3 layers)

| Layer | Entity | |---|---| | Holding (shared infra owner) | Mahmoud Holding B.V. — owns GHCR org mahmoudholding + 1Password tenancy mahmoudholdingbv.1password.com | | Operating sub (product owner) | Mahmoud Consultancy B.V. — owns every product here except roomy-mobile | | Builder | GloryLabs — dev agency under Mahmoud Consultancy; builds all the products | | Sibling sub | Roomy B.V. — owns roomy-mobile; separate 1P account my.1password.eu |

Full detail: root CLAUDE.md → "Corporate Structure".

Projects — status, docs & issues

| Project | Brand | GitHub | Issues | In-repo docs | Staging status (2026-05-21) | |---|---|---|---|---|---| | mahmoud-consultancy | InterimPlaza | repo | issues · key: #174 | docs/ (after migration) | 🟠 CD reaches app; blocked by app bug #174 (no prod Spring profile — H2 dialect, Flyway not running) | | auditPic | AuditPic | repo | issues · key: #78 | docs/ | 🟠 workflow correct; needs staging seal + external Postgres/MinIO bootstrap | | europeLogin | (GloryLabs-built) | repo | issues · key: #70 | docs/ | 🟢 backend green — backend+postgres+redis all 1/1, /health UP (two-user DB + V8 app-role + sealed secret, PRs #79/#80). Frontend ImagePullBackOff (no image under mahmoudholding, #70) | | valideerleeftijd | (direct) | repo | issues | docs/ | 🟢 FULLY RUNNING — backend+frontend+redis all 1/1; serves HTTP 200 via ingress. Fixed CD cross-tag bug (PR #58). Browser access pending wildcard DNS + TLS | | claimio | (direct) | repo | issues · key: #75 | docs/ | 🟠 workflow correct (1P-token dependency removed); needs seal + external Postgres bootstrap | | developer-portal | GloryLabs deliverable | repo | issues | repo README.md | 🟢 production deploy verified working | | athena | Athena (Dutch financial-audit AI tool) | repo | issues | docs/ | 🟠 frontend 1/1 Running; backend ImagePullBackOff (fix in flight); demo week active — security gates off per #13 | | roomy-mobile | Roomy B.V. (separate family) | repo | issues | docs/ | n/a — separate project family, not on this staging cluster |

Legend: 🟢 working · 🟠 config done, blocked on a named follow-up · 🔴 broken.

Staging environment — current reality

Single k3s node on the TransIP VPS (136.144.174.219), staging-only going forward (production moves to a separate VPS). All staging deploys are replicaCount=1.
Access blocker (open): there is no DNS for *.staging.glorylabs.nl yet (dig returns nothing), so no staging app is browser-reachable and no TLS cert can be issued (cert-manager's ACME HTTP-01 challenge needs the hostname to resolve; all certs are READY=False). ingress-nginx routes by Host: header, so the raw IP returns a 404. Unlock = one manual DNS A-record: *.staging.glorylabs.nl → 136.144.174.219. Until then, test via curl -k -H "Host: <product>.staging.glorylabs.nl" https://136.144.174.219/ or an /etc/hosts entry.
The CD pipeline (scp/SFTP, sealed-secrets per env, helm timeouts, no---atomic on staging, lean resources, per-component image tags via --reset-then-reuse-values) is fixed across all backend projects. Remaining per-project work is in each project's issues above.
Full play-by-play: ../HANDOFF-2026-05-20.md.

Per-project docs (moving into the repos)

Each project's technical docs (architecture, api, setup, deployment) and compliance docs (DPIA, risk-assessment, NIS2, BIO, verwerkingsregister) live in the repo under docs/ and docs/compliance/. Until each repo's docs/ PR is merged, the source copies are staged here under docs/<project>/ (technical) + docs/<project>/compliance/ (compliance, merged from the former top-level ocs/).

Workspace-wide references (stay here)

| Doc | What | |---|---| | definition-of-done.md | What "merge-ready" means across all projects | | ci-cd-reference.md | Canonical pipeline shape + drift inventory | | claude-github-app-setup.md | Per-repo @claude GitHub App setup | | audit-2026-05-18.md | Cross-project audit findings | | runbooks/ | Operational runbooks | | ../CLAUDE.md | Corporate structure, tech stack, port registry, 1Password layout, branching |

Issues are tracked in GitHub (per the table above). Secrets are in 1Password (per-product vaults — see root CLAUDE.md). Compliance templates: ../ocs/_templates/.

Reacties

2026-09-02 13:28 UTC

Test comment from swarm verification

Athena — README.md

Mahmoud Consultancy — Workspace Status Hub