Skip to content

fix(runtime): pin structured-ready orchestrator #789

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
seonghobae merged 1 commit into from
Aug 28, 2026
Merged

fix(runtime): pin structured-ready orchestrator #789

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -106,8 +106,8 @@ services:
context: ./docker/contextual-orchestrator
dockerfile: Dockerfile
args:
CONTEXTUAL_ORCHESTRATOR_SOURCE_REVISION: 41d7110d0f2553f4fabb3fdfb06a4b8ff0cc984a
image: ${COMPOSE_PROJECT_NAME:-lineageweave}-orchestrator:41d7110d0f2553f4fabb3fdfb06a4b8ff0cc984a
CONTEXTUAL_ORCHESTRATOR_SOURCE_REVISION: 2712827bfebd8be39e25c24924ad1f18522fd5f9
image: ${COMPOSE_PROJECT_NAME:-lineageweave}-orchestrator:2712827bfebd8be39e25c24924ad1f18522fd5f9
env_file:
- ${HOME}/.env
environment:
Expand Down
2 changes: 1 addition & 1 deletion docker/contextual-orchestrator/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
ARG MATURIN_BUILDER_IMAGE=ghcr.io/pyo3/maturin@sha256:b6c8b59a0170b77eb31a35b56034abd39972483ad0ebfff344deaa42a85f3bd3
FROM ${MATURIN_BUILDER_IMAGE} AS token-builder

ADD --checksum=sha256:70beecac5527650c48f63d653677841869081d182e36fc9855dcaa3c905f2167 https://github.com/ContextualWisdomLab/contextual-orchestrator/archive/41d7110d0f2553f4fabb3fdfb06a4b8ff0cc984a.tar.gz /tmp/contextual-orchestrator.tar.gz
ADD --checksum=sha256:0220f0cff25446c38260cb4cd10be5de7d4b5dca5b36ae5dd0b7eb49cef625fd https://github.com/ContextualWisdomLab/contextual-orchestrator/archive/2712827bfebd8be39e25c24924ad1f18522fd5f9.tar.gz /tmp/contextual-orchestrator.tar.gz

@devin-ai-integration devin-ai-integration Bot Aug 28, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📝 Info: Pin hash and checksum updated consistently

The old commit hash is gone from the repo, and all references to the new hash are byte-identical across Compose, the Dockerfile ADD URL, ADR 0083, the gap baseline, and both contract tests, satisfying the cross-file pin checks. The archive SHA-256 also changed and cannot be verified from the repo alone.

Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

RUN mkdir -p /build/contextual-orchestrator \
&& tar -xzf /tmp/contextual-orchestrator.tar.gz --strip-components=1 \
-C /build/contextual-orchestrator \
Expand Down
13 changes: 8 additions & 5 deletions docs/adr/0083-orchestrator-runtime-commit-pin.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,11 +15,14 @@ multi-agent.
## Decision

`docker/contextual-orchestrator/Dockerfile` pins the downloaded archive to
commit `41d7110d0f2553f4fabb3fdfb06a4b8ff0cc984a` from stacked upstream PR
#907. The candidate pin supplies the exact `Retry-After` admission deferral and
rate-budget-derived readiness polling cadence consumed by this stack. PR #907
remains open over PR #857, so neither the candidate pin nor local runtime
evidence is protected upstream release evidence. The pin remains explicit and
commit `2712827bfebd8be39e25c24924ad1f18522fd5f9` from upstream PR #857.
The candidate pin supplies exact `Retry-After` admission deferral,
rate-budget-derived readiness polling cadence, and endpoint-scoped structured
admission. Readiness now measures both the internal JSON-Schema judge and the
final JSON-object transport before a synthesizer can serve structured output;
an explicitly requested non-admitted model fails closed. PR #857 remains open,
so neither the candidate pin nor local runtime evidence is protected upstream
release evidence. The pin remains explicit and
immutable until the reviewed upstream change is superseded; it is not a moving
`main` reference and it is not a LineageWeave monkey patch.
The Docker builder verifies that archive against its committed SHA-256 before
Expand Down
6 changes: 3 additions & 3 deletions docs/product-technical-gap-baseline.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,9 @@
> `b87b186dd7213dc59d8e933e7d8c3f330598470f`; PR #781's last remote
> exact-head evidence before this overlay is
> `760d05896f96e5ce7fb9df0e4b62369448913fbd` and remains candidate-only.
> Its contextual-orchestrator runtime is pinned to stacked upstream PR #907
> exact `41d7110d0f2553f4fabb3fdfb06a4b8ff0cc984a` over open PR #857; neither
> open upstream head is protected-main evidence.
> Its contextual-orchestrator runtime is pinned to open upstream PR #857 exact
> `2712827bfebd8be39e25c24924ad1f18522fd5f9`; this candidate is not
> protected-main evidence.
> The open queue has 14 PRs:
> #783, #782, #781, #780, #778, #774, #772, #771, #770, #702, #679, #672,
> #667, and #640; #702/#679/#672/#667 remain drafts. Local candidate tests do
Expand Down
2 changes: 1 addition & 1 deletion tests/test_documentation_hygiene.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,7 @@ def test_role_catalog_identity_migration_is_wired() -> None:

def test_orchestrator_runtime_pin_matches_adr() -> None:
"""The image pin and ADR must describe the same immutable upstream commit."""
expected_embedding_contract_commit = "41d7110d0f2553f4fabb3fdfb06a4b8ff0cc984a"
expected_embedding_contract_commit = "2712827bfebd8be39e25c24924ad1f18522fd5f9"
dockerfile = (
_ROOT / "docker" / "contextual-orchestrator" / "Dockerfile"
).read_text(encoding="utf-8")
Expand Down
2 changes: 1 addition & 1 deletion tests/test_runtime_image_revision_contract.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ def test_compose_passes_revision_to_all_product_images() -> None:
) == 4
assert (
"CONTEXTUAL_ORCHESTRATOR_SOURCE_REVISION: "
"41d7110d0f2553f4fabb3fdfb06a4b8ff0cc984a"
"2712827bfebd8be39e25c24924ad1f18522fd5f9"
) in compose


Expand Down
Loading