This guide was generated from real graduation vote discussions on the Apache Incubator mailing list and reflects the issues that were actually raised during graduation votes.
This guide is intended for:
It is designed to support practical decision-making when a podling is being considered for graduation.
Graduation is assessed as a governance and operational readiness outcome.
This guide documents the specific themes that surfaced during graduation votes: what voters questioned, what they objected to, and what they treated as readiness signals.
Guidance in this document complements, but does not replace, ASF policy and legal guidance.
It is unusual for graduation votes to include dissent (-1), as most concerns are typically discussed and resolved before the vote is called.
When dissent does appear, it is framed as a readiness concern that requires an explicit response and resolution before a graduation recommendation can proceed.
Graduation votes can raise concerns about region-specific or non-universally accessible chat platforms.
The readiness concern is that decisions and consensus must remain in the canonical public record, and that alternate channels must not become the place where governance occurs.
Graduation votes can raise branding and identity concerns.
These concerns centre on how the project presents itself as an Apache project and whether the public-facing identity creates confusion about what is “Apache” versus something else.
Graduation votes can raise operational follow-through topics.
These included practical transition items such as:
These are treated as readiness and completion signals, not as product features.
Graduation votes can include readiness discussion connected to IP clearance.
At least one graduation vote treated security responsiveness and vulnerability handling as a maturity signal relevant to readiness.
Treat any -1 as a readiness blocker until it’s explicitly answered and resolved
Graduation assumes governance happens in the canonical public record (and remains accessible)
Expect reviewers to check Apache identity signals and whether public messaging creates confusion
Close off obvious operational loose ends (site/DNS/download surfaces) before calling the vote
Be ready to explain the podling’s IP clearance posture as part of readiness
Demonstrated security responsiveness can count as a maturity signal during the vote