ci(automation): schedule NVIDIA NIM OpenCode development - #64

Merged

seonghobae merged 94 commits into

mainfrom

feat/hourly-nim-opencode-development

Aug 5, 2026

Commits on Aug 5, 2026

docs: design hourly NVIDIA NIM OpenCode development
seonghobae
committed
eae3722
docs: plan hourly NVIDIA NIM OpenCode development
seonghobae
committed
346a31d
test(automation): define NIM OpenCode development contract
seonghobae
committed
0fd88ae
test(automation): require bounded verified agent proposals
seonghobae
committed
e9ff9d3
ci(automation): schedule NVIDIA NIM OpenCode development
seonghobae
committed
1daa40e
docs(automation): add hourly NIM development runbook
seonghobae
committed
f7af7fb
docs(doctoring): record NIM OpenCode trust boundaries
seonghobae
committed
a6b8703
docs(readme): expose proposal-only hourly development loop
seonghobae
committed
e3015d7
docs(changelog): record NIM OpenCode proposal scheduler
seonghobae
committed
9fe744c
test(automation): expose stale-base and metadata races
seonghobae
committed
96691bd
test(automation): define bounded PR metadata parser
seonghobae
committed
b4beb5a
feat(automation): add bounded PR metadata parser
seonghobae
committed
d4e73d8
test(automation): require credential-separated proposal handoff
seonghobae
committed
27cde2b
ci(automation): isolate NIM proposals from repository writes
seonghobae
committed
b3e465c
fix(automation): harden credential-separated proposal packaging
seonghobae
committed
eb8aafb
test(automation): align exact two-job proposal contract
seonghobae
committed
365c75c
docs(automation): document two-job proposal handoff
seonghobae
committed
01e1241
docs(doctoring): record two-job NIM trust boundary
seonghobae
committed
3f53e1e
fix(ci): restrict workflow token and isolate publication credentials
seonghobae
committed
7993b5b
test(ci): require least-privilege publication token boundary
seonghobae
committed
8c0c57c
docs(operations): document least-privilege Maintainer App publication
seonghobae
committed
cb6bac4
docs(doctoring): record late-bound Maintainer App boundary
seonghobae
committed
c60fa18
fix(docs): restore workflow contract wording
seonghobae
committed
218fe43
test(security): require fresh publication runner isolation
seonghobae
committed
006cb97
test(security): require gitlink rejection in agent proposals
seonghobae
committed
514cd0f
fix(security): isolate publication credentials on a third runner
seonghobae
committed
33ad5c4
fix(security): reject symlink and gitlink proposals
seonghobae
committed
5c878af
test(security): cover three-runner Git object gates
seonghobae
committed
f0aee66
docs(operations): document three-runner publication isolation
seonghobae
committed
dc69f91
docs(doctoring): record runner isolation and artifact evidence
seonghobae
committed
76f87b9
docs(changelog): record three-runner proposal isolation
seonghobae
committed
7b3ee42
docs(doctoring): clarify isolated write-capable publisher
seonghobae
committed
50be379
test(docs): require three-runner architecture alignment
seonghobae
committed
ed5ab73
docs(spec): align design with three-runner boundary
seonghobae
committed
2eae6fb
docs(plan): replace stale same-job packaging sequence
seonghobae
committed
ab58cfb
test(automation): tighten fallback and runner-boundary contracts
seonghobae
committed
4d863da
test(security): require raw Git mode inspection
seonghobae
committed
d7ef1c1
ci: apply exact-head hourly development review fixes
seonghobae
committed
79f18cb
ci: make CodeRabbit review repair deterministic
seonghobae
committed
1db7981
ci: stage deterministic hourly review repair
seonghobae
committed
7707292
fix(ci): simplify bounded review-fix runner
seonghobae
committed
bad8c4c
fix(ci): align doctoring timeout wording
seonghobae
committed
a0ad30e
ci: expose verified review-fix commit identity
seonghobae
committed
81c089a
fix(ci): close hourly development review gaps
github-actions[bot]
committed
9182ca9
test(quality): require parser coverage and JSDoc
seonghobae
committed
45ed94d
fix(quality): document parser production contracts
seonghobae
committed
9865707
fix(quality): enforce parser production coverage
seonghobae
committed
f5efee3
refactor(quality): expose testable metadata boundaries
seonghobae
committed
17f36c7
test(quality): cover PR metadata safety branches
seonghobae
committed
2704bf7
refactor(quality): name production CLI seams
seonghobae
committed
3684f4e
test(quality): cover named PR metadata CLI seams
seonghobae
committed
7606e64
fix(quality): reject unsafe PR metadata limits
seonghobae
committed
0c738b4
test(quality): preserve invalid CLI argument vectors
seonghobae
committed
fe3aec3
fix(quality): validate missing CLI argument arrays
seonghobae
committed
112303e
test(security): exercise Git mode boundary behavior
seonghobae
committed
76ca7bb
docs(tests): document Git mode fixture helpers
seonghobae
committed
e15dc64
docs(tests): document metadata fixture helpers
seonghobae
committed
1c546b6
test(ci): require bounded candidate cleanup reinstall
seonghobae
committed
62958a9
ci: verify bounded candidate cleanup repair
seonghobae
committed
fc64dbc
fix(ci): bound failed-candidate dependency reinstall
seonghobae
committed
3950a15
docs(operations): record bounded cleanup budget
seonghobae
committed
b8667bb
docs(plan): require bounded cleanup reinstalls
seonghobae
committed
74df51a
docs(design): separate candidate and cleanup timeouts
seonghobae
committed
318cae7
chore(ci): remove superseded one-shot repair workflow
seonghobae
committed
748227a
docs(changelog): record bounded cleanup timeout
seonghobae
committed
d1dc35d
test(automation): expose final-candidate cleanup regression
seonghobae
committed
13f83ad
fix(automation): retry final-candidate cleanup repair
seonghobae
committed
3896d74
fix(automation): apply structural final-candidate repair
seonghobae
committed
f14fcf1
chore(automation): remove one-shot repair workflow
seonghobae
committed
4e735b8
chore(automation): remove superseded repair workflow
seonghobae
committed
5ab1da2
chore(automation): remove final one-shot repair workflow
seonghobae
committed
6c52daf
ci(automation): publish verified final-candidate repair
seonghobae
committed
587a12f
test(automation): require inter-candidate cleanup only
seonghobae
committed
252eaee
ci(automation): apply final candidate cleanup repair
seonghobae
committed
ec49b57
fix(automation): tolerate already absent one-shot workflows
seonghobae
committed
7c0b579
fix(automation): publish verified repair with one-shot branch token
seonghobae
committed
0ee9804
ci(automation): publish verified final candidate repair
seonghobae
committed
d9ea1dd
fix(automation): skip cleanup after final candidate
github-actions[bot]
committed
85b46e1
ci(automation): export verified final candidate repair bundle
seonghobae
committed
181da39
chore(automation): remove one-shot repair exporter
seonghobae
committed
13c6f5e
test(automation): require publication prerequisites before OpenCode
seonghobae
committed
431fdc5
docs(automation): document publication prerequisites
seonghobae
committed
c5d8365
docs(doctoring): record publication prerequisite boundary
seonghobae
committed
f4a0ecf
test: fail closed on abnormal git mode gate exits
seonghobae
committed
90a617e
test(automation): centralize hourly workflow contracts
seonghobae
committed
26c1733
test: cover metadata CLI argv boundaries
seonghobae
committed
c205162
fix: guard metadata CLI entrypoint resolution
seonghobae
committed
5fba3cb
test: bind candidate cleanup budget parsing
seonghobae
committed
ea303cf
fix(automation): gate inference on publication readiness
seonghobae
committed
06ae8c4
test: reuse bounded workflow contract helpers
seonghobae
committed
6c8b794
docs: state publication prerequisite least privilege control
seonghobae
committed
71a7121
docs(changelog): record publication prerequisite gate
seonghobae
committed
900c57e
test(coverage): expose metadata entry-path branches
seonghobae
committed
4ce2286
fix(metadata): cover optional entrypoint resolution
seonghobae
committed
189cb19