release: isolate experimental source - #1
Merged
Conversation
Derive every experimental root from the release catalog, bind it to executable repository gates, and reject domain-owned source or mutable evidence locators. Add the canonical clean-checkout workflow and revision-bound receipt contract. Mutation review exposed no-op gate mentions, incomplete citation populations, and standalone release qualification as false-positive paths; the new account fails each closed.
|
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (18)
📝 WalkthroughWalkthroughThis PR adds a GitHub Actions CI workflow, an experimental-source isolation qualification tool ( ChangesExperimental Source Isolation
Estimated code review effort: 4 (Complex) | ~60 minutes Sequence Diagram(s)sequenceDiagram
participant CLI as isolate_experiments.py CLI
participant Qualify as qualify_experimental_isolation
participant Catalog as experiment catalog
participant Workflow as CI workflow validator
participant Receipt as workflow receipt validator
CLI->>Qualify: run with --experiments-executed
Qualify->>Catalog: derive root accounts
Qualify->>Workflow: validate_workflow
Qualify->>Receipt: validate_workflow_receipt
Receipt-->>Qualify: fingerprint and revision match
Qualify->>Qualify: write_linkage artifacts
Qualify-->>CLI: qualification record
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
GitHub rejected setup-java v6 during job preparation because that major is not published. Use the current v5 major so the clean-checkout gate can start; the other declared action majors were confirmed through GitHub.
Run the hosted gate under Java 21, matching the Kotlin experiment's declared toolchain and the clean local execution. Java 25 reached the fixture but caused JUnit Jupiter discovery to fail before any test ran.
Use grep for the assurance-extension model counts so the experiment gate runs on the declared hosted runner. The GitHub execution exposed that local ripgrep availability had hidden this checkout dependency.
Accept C3 from the exact successful GitHub workflow receipt, record sound judgments for both hosted-run-dependent claims, and preserve the deterministic finalization fingerprint. Hosted execution surfaced two action/toolchain mismatches and one undeclared ripgrep prerequisite before succeeding; the outcome records all three rather than treating failed runs as evidence.
Reopen C3 after the post-archive workflow proved that an ignored receipt could not survive the acceptance commit. Store future receipts with the archive and bind reuse to both Git ancestry and a derived isolation-account fingerprint. The first archive finalization is removed because its own hosted check produced two stale judgments. Full checkout history is now an explicit workflow prerequisite, and receipt/account mutations fail closed.
Archive C3 with the exact successful workflow receipt, its derived isolation-account fingerprint, current sound judgments, and finalization model. The complete local post-archive root gate now reuses that receipt and remains green. This supersedes the earlier archive attempt, which was honestly revoked after its hosted check showed that ignored rollout evidence made accepted judgments stale.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
gate
Why
The alpha release must demonstrate that its experimental corpus is self-contained. The prior
command sequence ran existing lanes but did not fail when a catalog root lost its gate or when
domain-owned source became an executable dependency.
Validation
./scripts/check.shfrom a clean temporary cloneAcceptance and archival intentionally wait for this PR's workflow to succeed at commit
5b09451and for that exact receipt to be judged.
Summary by CodeRabbit
New Features
Bug Fixes
Tests
Documentation