Release Framework

Release Framework provisions a pair of mirrored GitLab projects (Canonical and Security) plus the supporting identities, integrations, and CI plumbing that let a project develop in the open while still handling embargoed security fixes privately. Onboarding is self-service through a YAML entry in infra-mgmt.

Primary contribution to Theseus: the standardised path a component takes to reach customers. Every project on the framework gets the same locked-down mirroring, identity, and release wiring, so security-sensitive delivery stops being a per-team engineering problem.

Resources

• Release Framework design doc (internal)
• infra-mgmt — where projects onboard
• terraform-modules/gitlab/release-platform — the provisioning module
• Onboard to Release Framework — how-to guide
• Architecture and internals — explanation