Gloriousflywheel Spoke Fanout Tin 2115 2026 06 14

GloriousFlywheel Spoke Fan-Out Reality Check (TIN-2115)

Scope

This pass populates config/spoke-registry.json with the first real spoke-registry entries backed by primary evidence. The registry is not the same thing as general cache enrollment or runner cleanup: it is the GloriousFlywheel-side declaration for spoke-<slug> REAPI tenants consumed by the five spoke-* OpenTofu modules.

Added

Slug	Repository	Domain	Evidence
`darkmap`	`Jesssullivan/darkmap.phasi.space`	`darkmap.phasi.space`	`.github/lanes.json` declares the `darkmap` spoke; `infra/tofu/main.tf` composes the five `spoke-*` modules behind feature gates; the `gloriousflywheel-jesssullivan` GitHub App reports installation `127067424` on the repo.
`software`	`tinyland-inc/software.tinyland.dev`	`software.tinyland.dev`	`tinyland.repo.json` declares a `static-spoke`; `.github/lanes.json` declares `spoke.name = software` with a `homegrown` PR-env lane dispatched via `tinyland-inc/blahaj`; the `tinyland-inc/GloriousFlywheel` GitHub App reports installation `112552534` on the repo.

Both entries use allowed_runner_classes = ["tinyland-nix"], cache_gib = 50, ttl_days = 30, eviction_policy = "lru", and enforcement_mode = "deny", matching the current site-scaffold defaults and the runner classes declared by their lanes.

Excluded

Candidate	Reason
`tinyland-inc/site.scaffold`	Template/scaffold authority, not an onboarded spoke tenant.
`tinyland-inc/tinyland.dev`	Classified in `config/orgwide-enrollment-queue.json` as hybrid-by-policy; do not overcount as clean spoke-registry fan-out.
`tinyland-inc/software.tinyland.dev-booking`	Runtime sibling for the `software` spoke, not the spoke’s registry identity.
`tinyland-inc/elders.tinyland.dev`	Has app-specific Tofu in the local checkout but no `.github/lanes.json` spoke contract in the expected site-scaffold shape.
`Jesssullivan/MassageIthaca`, `Jesssullivan/XoxdWM`, `Jesssullivan/tummycrypt`	Control-plane or shared-lane cleanup debt from the orgwide enrollment queue, not valid `tinyland.dev` spoke-registry entries from the evidence in this pass.

Follow-Ups

software.tinyland.dev should land or surface its own five-module Tofu composition; the current local checkout has the spoke runbook and lanes but no tofu/ root.
darkmap still has BLAHAJ_LANE_ENV_ENABLED unset and no listed BLAHAJ_DISPATCH_TOKEN; the registry row is the GF-side declaration, not a claim that PR-env dispatch is enabled.
The tinyland-inc app installation id was verified with app-auth, but the local operator key was not in the expected SOPS materialized directory. Move that key into the documented derived-secret path before making this a normal agent workflow.