Skip to content

fix(ci): admit the tracked capability closure regression - #1879

Merged
schickling-assistant merged 1 commit into
mainfrom
schickling-assistant/2026-10-16-inert-capability-fixture
Oct 16, 2026
Merged

schickling-assistant merged 1 commit into
mainfrom
schickling-assistant/2026-10-16-inert-capability-fixture

Conversation

@schickling-assistant

Copy link
Copy Markdown
Collaborator

Problem

The authoritative merge-group run for #1795 failed its tracked-payload guard:

Tracked inert payload bytes are forbidden:
nix/buck2-products/capability-closure.test.sh

The guard admits Nix source and an exact metadata/test allowlist, but the newly tracked capability regression fixture was missing from that allowlist. Failing job.

Goal

Admit this specific source test while continuing to refuse actual product payloads and unregistered shell scripts.

Decisions

Add only capability-closure.test.sh to the existing exact allowlist in the generator and regenerate the workflow. The regression executes the generated guard in a temporary Git repository, accepting that filename and rejecting product.tar.gz and unrelated.sh. Required-check policy is unchanged.

Verification

Focused regression: vitest run --root packages/@overeng/genie --config vitest.config.ts src/runtime/github-workflow/ci-workflow-helpers.unit.test.ts -t "tracked inert payload admission" — 1 passed, 93 skipped, exit 0.

Independent review: GO, no findings, at aa2cc1886856ab0cc5b65478593d004d7de2a514.

Workflow regeneration completed with devenv tasks run genie:run (exit 0).

Canonical gate-slot --class gate -- devenv tasks run check:quick passed at that same head: 2026-10-16T02:32:25Z command-exited exit=0, EXIT=0. Receipt records identical start/end head, cleanStart=true, cleanEnd=true, exact=true, outcome completed.

Complexity

No new production abstraction or dependency.

Concerns

pr-a-inert-buck remains outside required merge contexts; changing its enforcement is intentionally outside this correction.

Friction & bottlenecks

The broader workflow-helper suite reported 93 passing tests and one unrelated subprocess failure in its raster-failure fixture (result.status was null). The focused payload-policy regression passed.

Follow-ups

None added by this narrowly scoped fix.

References

Refs #1795.

@schickling-assistant schickling-assistant added origin:agent Filed or primarily produced by an AI agent · Set: AI agent or manual type:bug Something broken or a regression · Set: manual area:ci CI workflows, runners, and pipeline configuration · Set: manual labels Oct 16, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Pipeline traces

20 jobs; 5 successful, 0 failed, 0 cancelled, 15 skipped

Pipeline jobs and steps waterfall

Job Status Wall time Delta vs main p50 Trace
pr-reviews-resolved success 0m 03s no main baseline not instrumented
tested-tree success 0m 04s no main baseline not instrumented
default-ref-policy success 1m 18s no main baseline not instrumented
source-shape success 0m 11s no main baseline not instrumented
quality success 6m 42s no main baseline Explore
All other jobs (15)
Job Status Wall time Delta vs main p50 Trace
test-live-deploy-ci-tools skipped unavailable duration unavailable unavailable
test-integration-notion skipped unavailable duration unavailable unavailable
deploy-storybooks skipped unavailable duration unavailable unavailable
trusted-buck2-remote-cache-proof skipped unavailable duration unavailable unavailable
test[runner=namespace-profile-macos-arm64] skipped unavailable duration unavailable unavailable
test-integration-restate skipped unavailable duration unavailable unavailable
weaver skipped unavailable duration unavailable unavailable
pr-a-inert-buck skipped unavailable duration unavailable unavailable
cargo skipped unavailable duration unavailable unavailable
test[runner=namespace-profile-linux-x86-64] skipped unavailable duration unavailable unavailable
test-playwright-utils skipped unavailable duration unavailable unavailable
build-products skipped unavailable duration unavailable unavailable
test-playwright-tui-react skipped unavailable duration unavailable unavailable
publish-products skipped unavailable duration unavailable unavailable
notify-alignment skipped unavailable duration unavailable unavailable

Main baseline samples (by job): pr-reviews-resolved n=0, tested-tree n=0, default-ref-policy n=0, source-shape n=0, test-live-deploy-ci-tools n=0, test-integration-notion n=0, deploy-storybooks n=0, trusted-buck2-remote-cache-proof n=0, quality n=0, test[runner=namespace-profile-macos-arm64] n=0, test-integration-restate n=0, weaver n=0, pr-a-inert-buck n=0, cargo n=0, test[runner=namespace-profile-linux-x86-64] n=0, test-playwright-utils n=0, build-products n=0, test-playwright-tui-react n=0, publish-products n=0, notify-alignment n=0.
Selected main run IDs: none.
Task-level durations are not included. Trace links may be empty while export, indexing, or retention is pending.

15 job(s) without a start time are omitted from the timeline, not measured as zero.

@schickling-assistant

Copy link
Copy Markdown
Collaborator Author

Owner GO at exact head aa2cc18. Independent exact-head GO; focused generated-guard regression accepts capability-closure.test.sh and rejects unrelated.sh/product.tar.gz; exact clean-head check:quick EXIT0. Hosted CI38841066185 and preview38841066077 completed success; final rollup9success22skipped0failed0pending; unresolvedthreads=[]. Broader existing helper suite had one unrelated raster subprocess failure, disclosed in description. Required-context policy unchanged; merge-group inert check still must prove this fix in hosted path.

Posted on behalf of @schickling
field value
agent_identity agent/effect-utils/buck2-migration-dev3
session 01a03413
agent_persona generalist
agent_supervisor unavailable
agent_tool OMP
agent_tool_version 18.10.2
agent_runtime OMP 18.10.2
agent_model anthropic/claude-opus-5-5
worktree unknown

@schickling-assistant
schickling-assistant marked this pull request as ready for review October 16, 2026 03:05
@schickling-assistant
schickling-assistant added this pull request to the merge queue Oct 16, 2026
@github-actions
github-actions Bot requested a review from schickling October 16, 2026 03:09
@github-actions

Copy link
Copy Markdown
Contributor

Storybook Previews

Subject Status Report Details Updated
devbar success devbar preview deployed Preview is ready 2026-10-16 03:08 UTC
effect-react success effect-react preview deployed Preview is ready 2026-10-16 03:08 UTC
effect-rpc-explorer-react success effect-rpc-explorer-react preview deployed Preview is ready 2026-10-16 03:08 UTC
effect-schema-form-aria success effect-schema-form-aria preview deployed Preview is ready 2026-10-16 03:08 UTC
genie success genie preview deployed Preview is ready 2026-10-16 03:08 UTC
gh-ci-utils success gh-ci-utils preview deployed Preview is ready 2026-10-16 03:08 UTC
megarepo success megarepo preview deployed Preview is ready 2026-10-16 03:08 UTC
meters success meters preview deployed Preview is ready 2026-10-16 03:08 UTC
notion-cli success notion-cli preview deployed Preview is ready 2026-10-16 03:08 UTC
notion-md success notion-md preview deployed Preview is ready 2026-10-16 03:09 UTC
notion-react success notion-react preview deployed Preview is ready 2026-10-16 03:09 UTC
react-inspector success react-inspector preview deployed Preview is ready 2026-10-16 03:09 UTC
tui-react success tui-react preview deployed Preview is ready 2026-10-16 03:09 UTC
Report history

PR 1879 · 2026-10-16 03:09 UTC

Subject Status Report Details Updated
devbar success devbar preview deployed Preview is ready 2026-10-16 03:08 UTC
effect-react success effect-react preview deployed Preview is ready 2026-10-16 03:08 UTC
effect-rpc-explorer-react success effect-rpc-explorer-react preview deployed Preview is ready 2026-10-16 03:08 UTC
effect-schema-form-aria success effect-schema-form-aria preview deployed Preview is ready 2026-10-16 03:08 UTC
genie success genie preview deployed Preview is ready 2026-10-16 03:08 UTC
gh-ci-utils success gh-ci-utils preview deployed Preview is ready 2026-10-16 03:08 UTC
megarepo success megarepo preview deployed Preview is ready 2026-10-16 03:08 UTC
meters success meters preview deployed Preview is ready 2026-10-16 03:08 UTC
notion-cli success notion-cli preview deployed Preview is ready 2026-10-16 03:08 UTC
notion-md success notion-md preview deployed Preview is ready 2026-10-16 03:09 UTC
notion-react success notion-react preview deployed Preview is ready 2026-10-16 03:09 UTC
react-inspector success react-inspector preview deployed Preview is ready 2026-10-16 03:09 UTC
tui-react success tui-react preview deployed Preview is ready 2026-10-16 03:09 UTC

Merged via the queue into main with commit ad5edaa Oct 16, 2026
50 checks passed
@schickling-assistant
schickling-assistant deleted the schickling-assistant/2026-10-16-inert-capability-fixture branch October 16, 2026 03:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:ci CI workflows, runners, and pipeline configuration · Set: manual origin:agent Filed or primarily produced by an AI agent · Set: AI agent or manual type:bug Something broken or a regression · Set: manual

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant