Change: elevate HA, CLEANWORKSPACE, SECRETS to hard req

1 files changed, 9 insertions, 8 deletions

diff --git a/ci-arch.mdwn b/ci-arch.mdwn
index dbe19bc..cd052f2 100644
--- a/ci-arch.mdwn
+++ b/ci-arch.mdwn
@@ -321,30 +321,31 @@ to a minor degree.
     * **SLA**: RelEng provides a promise, similar to a service-level
       agreement, for how well CI serves WMF and the movement.
 
+* **HA** Must be highly available - can restart any component without
+  disrupting service.
+
+* **CLEANWORKSPACE** Must provide a clean workspace for each build or
+  test run - either a clean VM or container.
+
+* **SECRETS** Must support secure storage of credentials / secrets.
+
+
 ## Softer requirements
 
 These requirements are even more easily negotiated.
 
-* **HA** Should be highly available - can restart any component without
-  disrupting service.
-
 * **LIVELOG** Should have live console output of build.
 
 * **MAXBUILDTIME** Should have build timeouts so that a build may
   fail if it takes too long. Among other reasons, this is useful to
   automatically work around builds that get "stuck" indefinitely.
 
-* **CLEANWORKSPACE** Should provide a clean workspace for each test
-  run - either a clean VM or container.
-
 * **RATELIMIT** Should have rate limiting - one user/project can not
   take over most/all resources.
 
 * **CHECKSIG** Should support validation and creation of GPG/PGP-signed
   git commits
 
-* **SECRETS** Should support secure storage of credentials / secrets.
-
 ## Would be nice
 
 These are so soft they aren't even requirements, and more wish list