feat(authority): add controller and durable promotion evidence - #43
Conversation
|
Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here. |
mindburnlabs
changed the title
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: faef8ce503
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| test "$(jq -er '.enabled' "$contract")" = "true" | ||
| app_id="$(jq -er '.apps.merger.app_id | select(type == "number" and . > 0)' "$contract")" | ||
| installation_id="$(jq -er '.apps.merger.installation_id | select(type == "number" and . > 0)' "$contract")" |
There was a problem hiding this comment.
When the PR being promoted is the one that flips config/autonomous-release-controller.json from the committed fail-closed state to the live merger App IDs, this job still checks the parent checkout (needs.verify-candidate.outputs.parent_sha) rather than the candidate tree. Because this commit's parent-side contract has enabled: false and null merger IDs, the promotion fails here before it can merge the activation PR, leaving the new merger-gated workflow unable to bootstrap itself.
Useful? React with 👍 / 👎.
* feat(authority): make promotions crash-recoverable * fix(authority): bind durable promotion evidence * fix(authority): bind supported App token metadata * security: close autonomous authority successor chain * docs: clarify autonomous successor control * fix(authority): require merge authorization evidence * fix(authority): refresh protected gate profiles * fix(authority): evaluate commercial repositories Signed-off-by: mindburnlabs <mindburnlabs@gmail.com> * chore(authority): bind commercial gate profile Signed-off-by: mindburnlabs <mindburnlabs@gmail.com> --------- Signed-off-by: mindburnlabs <mindburnlabs@gmail.com>
70cb29b
into
codex/autonomous-release-recovery
1 participant
Stack 5 of 6. Adds the fail-closed controller, exact machine merge interlock, and durable promotion evidence. Depends on #42; followed by #36.