Auto-Ops: Autonomous Operations Documentation

February 9, 2026 · View on GitHub

Overview

Operational documentation for the Quantum X Builder autonomous CI/CD and governance system with modular, minimal-bloat automation, strong guardrails, and audit trails.

Core Components

Auto PR Validator - Validates PRs, applies auto-fixes, runs tests, appends audit evidence, auto-approves and auto-merges
GCP Deploy Pipeline - Builds and deploys to Cloud Run with audit trails
Dependabot - Automated dependency updates

Required Secrets

Essential

GIT_PAT - Personal Access Token for bot operations (repo, workflow, write:packages)
GCP_SA_KEY - Google Cloud Service Account key (JSON)

Optional

GEMINI_API_KEY - AI API key
GCP_PROJECT_ID, GCP_REGION, ARTIFACT_REGISTRY, ARTIFACT_REPO
MIRROR_REGISTRY_URL, MIRROR_REGISTRY_USERNAME, MIRROR_REGISTRY_PASSWORD

Guardrails & Safety

KillSwitch

Location: _OPS/SAFETY/KILL_SWITCH or _OPS/SAFETY/KILL_SWITCH.json

Disable autonomy: Add DISABLE_AUTONOMY to the file Re-enable: Remove DISABLE_AUTONOMY directive

Forbidden Paths

Never modified by automation:

_OPS/POLICY/*
_OPS/SAFETY/KILL_SWITCH*
Git tags

Rollback System

Rollback Tokens

Format: qxb-rollback-YYYYMMDDTHHMMSSZ

Find commits: git log --grep="qxb-rollback-" Revert: git revert <commit-sha> then create PR for review

All rollbacks require human review before merging.

Rollback Helper Scripts

Linux/macOS (Bash):

cd docs/auto-ops
./rollback.sh -t <token>    # Find specific token
./rollback.sh -d <date>     # Find by date (YYYYMMDD)
./rollback.sh -l <limit>    # List recent tokens
./rollback.sh -h            # Show help

Windows (PowerShell):

cd docs/auto-ops
.\rollback.ps1 -Token <token>   # Find specific token
.\rollback.ps1 -Date <date>     # Find by date (YYYYMMDD)
.\rollback.ps1 -Limit <limit>   # List recent tokens
.\rollback.ps1 -Help            # Show help

Both scripts provide detailed rollback instructions including commit details and commands to create revert branches and PRs.