Hi,
The proposal describes a Gerrit-aware search platform where Gerrit remains the identity and access-control boundary. Users search only through Gerrit, and the search backend receives queries together with a precomputed project/ref scope, so results respect Gerrit read permissions without exposing the underlying search engine directly.
At a high level, the design proposes:
* a Gerrit-side search plugin as the only user-facing entry point;
* a visibility-awareness component that derives readable project/ref scope from Gerrit ACLs;
* an independent, horizontally scalable search platform built around a gateway, search instances, indexing pipeline, artifact store, and control plane;
Comments and feedback are welcome.
Thanks,
Ajay