Platform Onboarding Tracker

Tracks all work for the combined identity, token, and repo-onboarding push covering AB#21, AB#22, AB#23, AB#406, AB#15, and AB#16.

Dependency order

AB#21 (MIs + SPNs per tenant) ─────┐
AB#22 (GitHub org PATs)  ───────────┼──► AB#406 (secrets distribution: seed org/group secrets) ──► AB#15 ‖ AB#16
AB#23 (GitLab account PATs) ────────┘                                                               (repo onboarding)

Standing notes

• AB#14 resolved: GitLab group/project inventory is complete in docs/identity/scope-inventory.md (26 projects enumerated). AB#23 and AB#16 treat this as satisfied.
• Naming-standard deviation: MI resource names follow the shorter mi-<short>-platform form from AB#21's own acceptance criteria. This deviates from mi-<org>-<env>-<region>-<inst> in docs/standards/variables.md. Following the work item; track a standards-alignment follow-on item separately.
• Stale AB#21 reference: The work item references tenant 797f4846 and vault kv-tp-vault-01 — neither exists in any inventory. The real TierPoint picture is five separate tenants under the kristopher.turner@azurelocal.cloud account; see Table A rows 4–7.
• SPN scope: AB#21 only names managed identities in its acceptance criteria. The SPNs in Table A are a user-approved extension of that work item (needed for workloads running outside Azure).
• Cross-references: docs/identity/scope-inventory.md · docs/identity/secret-inventory.md · docs/identity/managed-identities.md · docs/identity/service-principals.md · docs/identity/github-pats.md

---

Table A — Tenant identity matrix (AB#21)

All MI client-id secrets are stored centrally in kv-hcs-vault-01 (non-sensitive resource IDs, not credentials).
SPN client-id and secret are stored in that tenant's platform vault.

Tenant	Tenant ID	Account	Per-tenant platform KV	MI resource name	MI client-id secret (→ kv-hcs-vault-01)	SPN display name	SPN client-id secret (→ per-tenant KV)	KV Secrets User granted	managed-identities.md updated	service-principals.md updated	Status
This Is My Demo / hybridsolutions.cloud	d6fc73cf-2a7a-4876-b67f-ca48961a6e83	kris@hybridsolutions.cloud	kv-hcs-vault-01	mi-hcs-platform	hcs-platform-mi-hcs-platform-client-id	hcs-platform-automation-spn	hcs-platform-automation-spn-client-id / hcs-platform-automation-spn-secret	✅	✅	✅	✅ Done
Turner Legacy Platform / turnerlegacy.org	57be591b-af6b-44ea-ac26-19e7f0018353	kris@turnerlegacy.org	kv-turnerlegacy-prod	mi-turnerlegacy-platform	hcs-platform-mi-turnerlegacy-platform-client-id	tl-platform-automation-spn	tl-platform-automation-spn-client-id / tl-platform-automation-spn-secret (→ kv-turnerlegacy-prod)	✅	✅	✅	✅ Done
Azure Local Management / azurelocal.cloud	604d3138-c7b3-481d-928f-e4a5dfb0f528	kristopher.turner@azurelocal.cloud	kv-azlmgmt-platform (created 2026-05-12)	mi-azlmgmt-platform	hcs-platform-mi-azlmgmt-platform-client-id	azl-platform-automation-spn	azl-platform-automation-spn-client-id / azl-platform-automation-spn-secret (→ kv-azlmgmt-platform)	✅	✅	✅	✅ Done
TierPoint Demos / tierpointdemos.cloud	28217fed-1ba3-4974-89c0-f1423aafe640	kristopher.turner@azurelocal.cloud	kv-demos-platform	mi-tpdemos-platform	hcs-platform-mi-tpdemos-platform-client-id	tpdemos-platform-automation-spn	tpdemos-platform-automation-spn-client-id / -secret (→ kv-demos-platform)	✅	✅	✅	✅ Done
TierPoint PoC / tierpointpoc.cloud	2e21f99f-230e-4e31-87eb-6fe25d535473	kristopher.turner@azurelocal.cloud	kv-tppoc-platform (created 2026-05-12)	mi-tppoc-platform	hcs-platform-mi-tppoc-platform-client-id	tppoc-platform-automation-spn	tppoc-platform-automation-spn-client-id / -secret (→ kv-tppoc-platform)	✅	✅	✅	✅ Done
TierPoint Product Labs / tierpointproductlabs.cloud	a9b67171-3fbb-45bf-8394-eb56d02a86e4	kristopher.turner@azurelocal.cloud	kv-tplabs-platform	mi-tplabs-platform	hcs-platform-mi-tplabs-platform-client-id	tplabs-platform-automation-spn	tplabs-platform-automation-spn-client-id / -secret (→ kv-tplabs-platform)	✅	✅	✅	✅ Done
Project Phoenix / projectphx.cloud	c9257f80-1ad6-40b4-8f53-f3d58b75d58b	kristopher.turner@azurelocal.cloud	kv-phx-platform	mi-phx-platform	hcs-platform-mi-phx-platform-client-id	phx-platform-automation-spn	phx-platform-automation-spn-client-id / -secret (→ kv-phx-platform)	✅	✅	✅	✅ Done
TierPoint Lab Management / prodtechlabmgmt.com	3321553e-475e-49f0-a10f-d1087c017044	kristopher.turner@azurelocal.cloud	kv-ptlmgmt-platform (created 2026-05-12)	mi-ptlmgmt-platform	hcs-platform-mi-ptlmgmt-platform-client-id	ptlmgmt-platform-automation-spn	ptlmgmt-platform-automation-spn-client-id / -secret (→ kv-ptlmgmt-platform)	✅	✅	✅	✅ Done

Note: The azurelocal.cloud-account tenants (rows 3–8) require interactive/device-code auth (az login --tenant <id>) due to MFA. These steps cannot run unattended.

---

Table B — GitHub org tokens + org-level secrets (AB#22 + AB#406)

All org PATs stored in kv-hcs-vault-01. The current shared classic PAT hcs-platform-github-org-pat remains active until all per-org PATs are confirmed; then it can be retired.
Per-repo PATs and GitHub Apps are explicitly out of scope for AB#22 — separate future work item.

GitHub org	Role	Org PAT KV secret (→ kv-hcs-vault-01)	PAT scopes	Org Actions secret to seed	PAT created in KV	secret-inventory.md row	scope-inventory.md PAT col	Org secret seeded	Status
AzureLocal	admin	hcs-platform-github-azurelocal-pat	repo, workflow, read:org	ORG_PAT	✅	✅	✅	✅	✅ Done
thisismydemo	admin	hcs-platform-github-thisismydemo-pat	repo, workflow, read:org	ORG_PAT	✅	✅	✅	✅	✅ Done
holdfast-press	owner	hcs-platform-github-holdfast-press-pat	repo, workflow	ORG_PAT	✅	✅	✅	✅	✅ Done
turnerlegacy	owner	hcs-platform-github-turnerlegacy-pat	repo, workflow, read:org	ORG_PAT	✅	✅	✅	✅	✅ Done
faithfulcraftsmen	owner	hcs-platform-github-faithfulcraftsmen-pat	repo, workflow	—	✅	✅	✅	—	✅ Done
gunnerthelab	owner	hcs-platform-github-gunnerthelab-pat	repo, workflow	—	✅	✅	✅	—	✅ Done
Heritage-Virginia	owner	hcs-platform-github-heritage-virginia-pat	repo, workflow	—	✅	✅	✅	—	✅ Done
Hybrid-Solutions-Cloud	owner	hcs-platform-github-hybrid-solutions-cloud-pat	repo, workflow	—	✅	✅	✅	—	✅ Done
hybridsolutionscloud	owner	hcs-platform-github-hybridsolutionscloud-pat	repo, workflow	—	✅	✅	✅	—	✅ Done
ifartedcloud	owner	hcs-platform-github-ifartedcloud-pat	repo, workflow	—	✅	✅	✅	—	✅ Done
project42dev	owner	hcs-platform-github-project42dev-pat	repo, workflow	—	✅	✅	✅	—	✅ Done
sunpath-dev	owner	hcs-platform-github-sunpath-dev-pat	repo, workflow	—	✅	✅	✅	—	✅ Done

PAT generation happens in the GitHub UI. Claude stores the value in KV and updates docs. Org-level secrets seeded via gh secret set ORG_PAT --org <org>.

| cloudsmith-cloud | owner | No per-org PAT — GitHub App (hcs-platform-app, ID 3683613, install ID 132507454) generates installation tokens from hcs-platform-github-app-private-key | App-based | ORG_PAT | N/A | — | — | ✅ seeded 2026-05-15 | ✅ Done |

---

Table C — GitLab account/group tokens + group CI/CD variables (AB#23 + AB#406)

Both account-level PATs stored in kv-hcs-vault-01. Group-level CI/CD variables are seeded from those PATs plus the SPN read credentials for the relevant tenant vault.

GitLab account PATs

GitLab account	PAT KV secret (→ kv-hcs-vault-01)	PAT scopes	PAT created in KV	secret-inventory.md row	scope-inventory.md GitLab token col	Status
KristopherjTurner (gitlab.com personal)	hcs-platform-gitlab-kjt-godmode-pat	api, read_repository, write_repository	✅	✅	✅	✅ Done
kristopher.turner@tierpoint.com (= kristopherjturner)	hcs-platform-gitlab-tp-godmode-pat	api, read_repository, write_repository	✅	✅	✅	✅ Done

GitLab group CI/CD variables (AB#406)

Baseline variables seeded at group level so all projects in the group inherit them. Subgroup-level variables override where a different tenant KV applies.

Seeded by Invoke-GitLabVariableDistribution.ps1 (AB#406, commit a98bb46, 2026-05-12). Variables: KV_SP_CLIENT_ID, KV_SP_SECRET, KV_TENANT_ID, KV_NAME per scope. Cross-tenant vault reads use az account set --subscription switching.

Scope	Type	Tenant KV	Tenant ID	Vars seeded	Status
tierpoint/prodtech/azurelocal/lab-environments (group)	group	kv-demos-platform (sub 5e04c7f2)	28217fed (tpdemos)	KV_SP_CLIENT_ID, KV_SP_SECRET, KV_TENANT_ID, KV_NAME	✅ Done
tierpoint/prodtech/azurelocal/poc-services/azl-conference-demos (group)	group	kv-demos-platform (sub 5e04c7f2)	28217fed (tpdemos)	KV_SP_CLIENT_ID, KV_SP_SECRET, KV_TENANT_ID, KV_NAME	✅ Done
tierpoint/prodtech/azurelocal/infrastructure/azure-management-utilities (group)	group	kv-azlmgmt-platform (sub a4c22cfa)	604d3138 (azlmgmt)	KV_SP_CLIENT_ID, KV_SP_SECRET, KV_TENANT_ID, KV_NAME	✅ Done
tierpoint/prodtech/docs (group)	group	—	—	No vars (no Azure mapping)	✅ Done
tierpoint/prodtech/haas (group)	group	kv-ptlmgmt-platform (sub 27f3ae38)	3321553e (ptlmgmt)	KV_SP_CLIENT_ID, KV_SP_SECRET (unmasked — special chars), KV_TENANT_ID, KV_NAME	✅ Done
cbb-automation-poc project (in tierpoint/prodtech/azurelocal)	project	kv-demos-platform (sub 5e04c7f2)	28217fed (tpdemos)	KV_SP_CLIENT_ID, KV_SP_SECRET, KV_TENANT_ID, KV_NAME	✅ Done
tierpointproductlabs project (in lab-environments)	project	kv-tplabs-platform (sub 2caa0b8a)	a9b67171 (tplabs)	KV_SP_CLIENT_ID, KV_SP_SECRET (unmasked — special chars), KV_TENANT_ID, KV_NAME	✅ Done
projectphx project (in lab-environments)	project	kv-phx-platform (sub 2f075d7e)	c9257f80 (phx)	KV_SP_CLIENT_ID, KV_SP_SECRET, KV_TENANT_ID, KV_NAME	✅ Done
tierpointpoc project (in lab-environments)	project	kv-tppoc-platform (sub 79e39927)	2e21f99f (tppoc)	KV_SP_CLIENT_ID, KV_SP_SECRET, KV_TENANT_ID, KV_NAME	✅ Done

PAT generation happens in the GitLab UI. Claude stores the value in KV and updates docs. Group/project variables set via GitLab API (/api/v4/groups/:id/variables and /api/v4/projects/:id/variables).

---

Table D — Per-repo onboarding matrix (AB#15 + AB#16)

Legend: ✅ confirmed · ☐ not done · — not applicable · ⚠ needs decision · ? unknown

Columns:

• CLAUDE.md — file present and correct per templates/CLAUDE.md.template
• .gitignore — file present (from templates/repo-scaffold/.gitignore.template)
• README.md — file present with at minimum project description
• .claude/settings.json — file present
• No secrets — no .env, .pfx, or other secret files committed anywhere in history
• Conformance — scripts/onboarding/Test-RepoConformance.ps1 passes
• ADO project — corresponding ADO project exists in hybridcloudsolutions org
• Repo secret — if a repo-level KV secret is needed (name shown); — means repo inherits org/group-level secret from Table B/C
• Secret seeded — repo-level GitHub/GitLab secret populated; — inherits from org/group
• Status — Not started / In progress / Done / N/A (fork/archived)

ADO — hybridcloudsolutions

ADO Project	Repo	Org / Group	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
Platform Engineering	platform	hybridcloudsolutions	ADO	✅	✅	✅	✅	✅	✅	✅	hcs-platform-swa-docs-deploy-token ✅	✅ ADO var group	✅ Done

GitHub — AzureLocal org

ADO Project	Repo	Org	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
—	.github	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
Azure Local AKS	azurelocal-aks	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
—	azurelocal-app-services	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	☐	—	—	✅ Done
Azure Local AVD	azurelocal-avd	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local AzLo Flows	azurelocal-azloflows	AzureLocal	GitHub	—	—	—	—	—	—	✅	—	—	N/A (fork)
Azure Local BCDR	azurelocal-bcdr	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Copilot	azurelocal-copilot	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Cost	azurelocal-cost	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Custom Images	azurelocal-custom-images	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Disconnected	azurelocal-disconnected	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Governance	azurelocal-governance	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local IoT	azurelocal-iot	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Load Tools	azurelocal-loadtools	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local ML AI	azurelocal-ml-ai	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Monitoring	azurelocal-monitoring	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Nutanix Migration	azurelocal-nutanix-migration	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Outpost	azurelocal-outpost	AzureLocal	GitHub	☐	☐	☐	☐	☐	☐	✅	—	—	⚠ Planned — not yet created
Azure Local Ranger	azurelocal-ranger	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
S2D Cartographer	azurelocal-s2d-cartographer	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local SCOM MP	azurelocal-scom-mp	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local SOFS FSLogix	azurelocal-sofs-fslogix	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local SQL HA	azurelocal-sql-ha	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local SQL MI	azurelocal-sql-mi	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Surveyor	azurelocal-surveyor	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Toolkit	azurelocal-toolkit	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Training	azurelocal-training	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local Troubleshooting Hunter	azurelocal-troubleshooting-hunter	AzureLocal	GitHub	☐	☐	☐	☐	☐	☐	✅	—	—	⚠ Planned — not yet created
Azure Local Deployment Monitoring	azurelocal-deployment-monitoring	AzureLocal	GitHub	☐	☐	☐	☐	☐	☐	✅	—	—	⚠ Planned — not yet created
Azure Local Update Monitoring	azurelocal-update-monitoring	AzureLocal	GitHub	☐	☐	☐	☐	☐	☐	✅	—	—	⚠ Planned — not yet created
Azure Local Key Vault Manager	azurelocal-keyvault-manager	AzureLocal	GitHub	☐	☐	☐	☐	☐	☐	✅	—	—	⚠ Planned — not yet created
Azure Local VM Conversion Toolkit	azurelocal-vm-conversion-toolkit	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local VM Hydration	azurelocal-vm-hydration	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local VMs	azurelocal-vms	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local VMware Migration	azurelocal-vmware-migration	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Azure Local ZTP	azurelocal-ztp	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
AzureLocal Community Site	azurelocal.github.io	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
—	demo-repository	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	☐	—	—	✅ Done
—	documentation	AzureLocal	GitHub	—	—	—	—	—	—	—	—	—	N/A (archived)
—	platform (AzureLocal org)	AzureLocal	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done

GitHub — thisismydemo org

ADO Project	Repo	Org	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
This Is My Demo — Azure Monitor ITSM	azure-monitor-itsm	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
This Is My Demo — Azure Scout	azure-scout	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
—	giscus	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
This Is My Demo — Hybrid Infra Toolkit	hybrid-infra-toolkit	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
—	hyper-v-renaissance	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	☐	—	—	✅ Done
—	mms_2026_avd_demo	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	☐	—	—	✅ Done
—	mms_2026_hybrid_demo	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	☐	—	—	✅ Done
This Is My Demo — Blog	thisismydemo.github.io	thisismydemo	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
—	WhatTheHack	thisismydemo	GitHub	—	—	—	—	—	—	—	—	—	N/A (fork)

GitHub — kristopherjturner personal

ADO Project	Repo	Org	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
—	ASDK-POC-Azure	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	Azure-Stack-HCI-Workshop	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	AzureStackHCI	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	bigbang	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	gab2019_k8s	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	guestconfiguration	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	kristopherjturner.github.io	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	livingontheedge.github.io	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	pipelines	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	ProactiveRemediations	kristopherjturner	GitHub	✅	✅	✅	✅	✅	✅	—	—	—	✅ Done
—	Update-Management-Automation	kristopherjturner	GitHub	—	—	—	—	—	—	—	—	—	N/A (archived — push rejected)
—	aksworkshop · arc-k8s-demo · ARI · awesome-copilot · azure-docs · azure-docs-powershell-samples · azure-intelligent-edge-patterns · azure-stack-docs · Azure-Stack-Hub-Foundation-Core · AzureNamingTool · azurestack-admin-tools · AzureStack-VM-PoC · azure_arc · cloud-adoption-framework · CloudFamily · concourse-chart · cw-azure-stack · demoguestbook · HybridJumpstart · jumpstart-agora-apps · MCW-Azure-Stack · rating-api · term.everything · WhatTheHack (24 forks)	kristopherjturner	GitHub	—	—	—	—	—	—	—	—	—	N/A (community/Microsoft forks)

GitHub — holdfast-press org

ADO Project	Repo	Org	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
The Keepers	the-keepers	holdfast-press	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done

GitHub — personal/community orgs

ADO Project	Repo	Org	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
Faithful Craftsmen	faithfulcraftsmen.github.io	faithfulcraftsmen	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Gunner The Lab	gunnerthelab.github.io	gunnerthelab	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Heritage Community Hub	heritage-community-hub	Heritage-Virginia	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
—	buildserver (private)	Hybrid-Solutions-Cloud	GitHub	✅	✅	✅	✅	✅	✅	☐	—	—	✅ Done
Hybrid Cloud Solutions Website	hybridsolutionscloud.github.io	hybridsolutionscloud	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
iFarted Cloud	ifartedcloud.github.io	ifartedcloud	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Project 42	project42dev.github.io	project42dev	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Sunpath Dev	sunpath-dev.github.io	sunpath-dev	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done

GitHub — cloudsmith-cloud org

ADO Project	Repo	Org	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
CloudSmith	cloudsmith-internal	cloudsmith-cloud	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
CloudSmith	cloudsmith-cloud.github.io	cloudsmith-cloud	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
CloudSmith	cloudsmith-app.github.io	cloudsmith-cloud	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done

GitHub App auth (hcs-platform-app, install ID 132507454) used in place of per-org PAT. ORG_PAT seeded 2026-05-15. ADO project "CloudSmith" created 2026-05-15 (ID 749f4020, Boards + Overview only). All 3 repos fully conformant as of 2026-05-15.

---

GitHub — turnerlegacy org

ADO Project	Repo	Org	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
—	.github	turnerlegacy	GitHub	—	—	—	—	—	—	—	—	—	N/A (org health)
Turner Legacy Platform	turner-platform	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-database	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-infrastructure	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-platform-core	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-platform-ui	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-platform-api	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-module-admin	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-module-board	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-module-budget	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-module-calendar	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-module-finance	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done
Turner Legacy Platform	turner-module-travel	turnerlegacy	GitHub	✅	✅	✅	✅	✅	✅	✅	—	—	✅ Done

GitLab — tierpoint/prodtech

ADO Project	Repo	Group path	Source	CLAUDE.md	.gitignore	README.md	.claude/settings.json	No secrets	Conformance	ADO project	Repo secret	Secret seeded	Status
TierPoint — ProdTech Docs	docs	tierpoint/prodtech/docs	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp PLATFORM_PAT)	—	✅ Done
—	gitlab-profile	tierpoint/prodtech/docs	GitLab	—	—	—	—	—	—	—	—	—	N/A (group health)
TierPoint — ProdTech Docs	tierpoint-prodtech-azl-toolkit	tierpoint/prodtech/docs	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp)	—	✅ Done
TierPoint — Hyper-V as a Service	hyperv-as-a-service	tierpoint/prodtech/haas	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp)	—	✅ Done
— (no ADO project)	cbb-automation-poc	tierpoint/prodtech/azurelocal	GitLab	☐	☐	☐	☐	☐	☐	✅	— (grp+kv-demos-platform creds)	☐	Not started
—	gitlab-profile	tierpoint/prodtech/azurelocal	GitLab	—	—	—	—	—	—	—	—	—	N/A (group health)
—	azl-automation	tierpoint/prodtech/azurelocal/automation/azl-automation	GitLab	☐	☐	☐	☐	☐	☐	☐	— (grp)	☐	Not started
—	azure-infrastructure-azl	tierpoint/prodtech/azurelocal/automation/azl-automation	GitLab	☐	☐	☐	☐	☐	☐	☐	— (grp)	☐	Not started
—	azl-dell-ax-automation	tierpoint/prodtech/azurelocal/automation/azl-dell-ax-automation	GitLab	☐	☐	☐	☐	☐	☐	☐	— (grp+kv-tplabs-platform creds)	☐	Not started
TierPoint — Customer — Cornerstone Building Brands	cornerstone-building-brands	tierpoint/prodtech/azurelocal/customer-deployments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-demos-platform creds)	—	✅ Done
TierPoint — Customer — Keller Construction	keller-construction	tierpoint/prodtech/azurelocal/customer-deployments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-demos-platform creds)	—	✅ Done
—	azure-local-anywhere-pdp	tierpoint/prodtech/azurelocal/documentation	GitLab	—	—	—	—	—	—	☐	— (grp)	—	N/A (archived)
—	azure-infrastructure-azl-old	tierpoint/prodtech/azurelocal/infrastructure/azure-infrastructure-azl	GitLab	—	—	—	—	—	—	—	—	—	N/A (archived)
—	tf-module-azr-gitlab-runner	tierpoint/prodtech/azurelocal/infrastructure/azure-infrastructure-azl	GitLab	—	—	—	—	—	—	☐	— (grp)	—	N/A (archived)
TierPoint — Azure Management Utilities	azure-management-utilities	tierpoint/prodtech/azurelocal/infrastructure/azure-management-utilities	GitLab	☐	☐	☐	☐	☐	☐	✅	— (grp)	☐	⚠ Protected branch — requires MR
TierPoint — LABMGMT — AzureLocalCloud	azurelocalcloud	tierpoint/prodtech/azurelocal/lab-environments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp)	—	✅ Done
—	gitlab-profile	tierpoint/prodtech/azurelocal/lab-environments	GitLab	—	—	—	—	—	—	—	—	—	N/A (group health)
TierPoint — LABMGMT — ProdTechLabMgmt	prodtechlabmgmt	tierpoint/prodtech/azurelocal/lab-environments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp)	—	✅ Done
TierPoint — LABMGMT — ProjectPhx	projectphx	tierpoint/prodtech/azurelocal/lab-environments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-phx-platform creds)	—	✅ Done
TierPoint — LABMGMT — TierPointDemos	tierpointdemos	tierpoint/prodtech/azurelocal/lab-environments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-demos-platform creds)	—	✅ Done
TierPoint — LABMGMT — TierPointPoc	tierpointpoc	tierpoint/prodtech/azurelocal/lab-environments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-tppoc-platform creds)	—	✅ Done
TierPoint — LABMGMT — TierPointProductLabs	tierpointproductlabs	tierpoint/prodtech/azurelocal/lab-environments	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-tplabs-platform creds)	—	✅ Done
—	ms-ignite-2025	tierpoint/prodtech/azurelocal/poc-services/azl-conference-demos	GitLab	✅	✅	—	✅	✅	✅	☐	— (grp+kv-demos-platform creds)	—	✅ Done
TierPoint — POC — Azure Local SAN Attach	azure-local-san-attach	tierpoint/prodtech/azurelocal/poc-services/current-poc-projects	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-demos-platform creds)	—	✅ Done
TierPoint — POC — Nutanix Azure Local Migration	nutanix-azure-local-migration	tierpoint/prodtech/azurelocal/poc-services/current-poc-projects	GitLab	✅	✅	—	✅	✅	✅	✅	— (grp+kv-demos-platform creds)	—	✅ Done
TierPoint — POC — PoC as a Service	poc-as-a-service	tierpoint/prodtech/azurelocal/poc-services/poc-as-a-service	GitLab	☐	☐	☐	☐	☐	☐	✅	— (grp+kv-demos-platform creds)	☐	⚠ Protected branch — requires MR

---

Table E — Canonical multi-model AI-layout conversion (Phase 4)

Tracks conversion of each repo from the legacy Claude-only layout to the canonical multi-model layout (AGENTS.md + CLAUDE.md shim + .ai/ workspace + per-tool configs), per the agents and AI-workspace standards.

Driven by the MCP check_drift → Invoke-RepoAiLayout.ps1 loop documented in repo-ai-onboarding.md. This is a one-repo-at-a-time governance process — there is no bulk conversion wave.

Status legend: not-started · dry-run-reviewed (dry run inspected, not yet applied) · converted (applied, check_drift PASS, committed).

Default: every repo in master-registry.db not listed below is not-started. Rows are added here as each repo moves through the loop — no status is asserted for a repo that has not actually been checked.

Repo	Scope	Conversion status	Notes
platform	hcs	converted	Dogfood reference implementation, converted in Phase 2.
azurelocal-ranger	hcs	dry-run-reviewed	Phase 4 pilot. Dry run reviewed; identity paragraph falls back to type-based default (old CLAUDE.md had an image-only description) — write a real paragraph in AGENTS.md after applying.