Umbrella propagation: impact map + gate + henxels contracts (#204) #212

Merged

conductor merged 34 commits from umbrella-pipeline into master 2026-09-08 03:35:58 +01:00

Conversation 13 Commits 34 Files Changed 33

+3094 -82

34 Commits

Author	SHA1	Message	Date
conductor	c9d7c1ccef	Merge branch 'master' into umbrella-pipeline	2026-09-08 03:34:19 +01:00
Nick	2d2d8aa21c	fix(tests): lint-contract discovers ruff from the interpreter env, probe uses pytest tmp_path — CI builds .ci-venv not .venv; shared /tmp probe dir collided across runs	2026-09-08 01:58:29 +01:00
Nick	efe83a86d6	fix(ci): re-graft #126 silent-handler ratchet — lost in merge resolution again; test_ci_lint_contract guards it (this is the last manual fix: the robot now self-heals staleness)	2026-09-08 01:40:54 +01:00
Nick	2f6625de55	docs(registry): register research-stage + backlog-sweep workflows — the registry henxel caught them on the #212 tree (fix on landing branch)	2026-09-08 01:18:43 +01:00
Nick	9996032b8f	merge remote branch (keep ROBOT_TOKEN-wired spec-gate)	2026-09-08 01:09:28 +01:00
Nick	2bbea0fe95	fix(pipeline): restore #126 silent-handler ratchet to ci.yml — lost in a merge resolution; graft block + umbrella-map registration for failure_auto_filer	2026-09-08 01:09:03 +01:00
Nick	08c53dd1b8	chore(governance): register failure_auto_filer in umbrella map (#122 landed via #209 — map must travel with change)	2026-09-08 01:07:46 +01:00
Nick	e4e81cfa6e	merge master (resolve: master reviewed state wins; spec-gate branch copy already wired ROBOT_TOKEN)	2026-09-08 01:03:57 +01:00
Nick	a64ae2d0ff	merge master (resolve: master's ci/README evolution wins)	2026-09-08 00:58:24 +01:00
Nick	d1a394289c	ci: retrigger — Propagation statement added to PR body (own gate demanded it, body edits do not re-fire CI)	2026-09-07 22:34:45 +01:00
Nick	26f79b8ae3	docs(registry): register spec-gate-headless workflow — own henxel's demand honored	2026-09-07 21:16:55 +01:00
Nick	748c63823f	Merge commit '1236273' into umbrella-pipeline	2026-09-07 21:15:16 +01:00
Nick	1236273dd3	docs(plan): #126 umbrella-gate Propagation line for the PR body (#126)	2026-09-07 21:12:04 +01:00
Nick	31d849eff4	style: ruff format remaining added files	2026-09-07 21:00:44 +01:00
Nick	16c5150a9c	docs(#126): lower silent-handler ledger to 430 — baseline travels with the fix ... Baseline {BLE001: 351, S110: 79} (was 455/117): 103 handlers in memory_store.py, warm_router.py, curator.py, tool_executor.py now log tracebacks via logger.debug(.., exc_info=True) or carry reasoned # noqa: BLE001 (warm_router P0-06 record_failure paths). Ledger table regenerated from the live tree; Completion Record appended to the plan.	2026-09-07 21:00:34 +01:00
Nick	7fe82ec307	style: ruff format added files — CI lint format-check green	2026-09-07 20:58:28 +01:00
Nick	49d7924c74	Merge remote-tracking branch 'gitea/master' into umbrella-pipeline	2026-09-07 20:56:55 +01:00
Nick	62705bb219	ci(lint): silent-handler ratchet — S110+BLE001 selection with shrinking baseline (#126) ... Blast radius at ab4dbf8: BLE001 455 / S110 117 over src/ shared/ scripts/ (T201 1625 measured, not enforced). Enforcement mirrors the pyright ratchet: scripts/lint_ratchet.py + lint-baseline.json, wired as an append-only step in the ci.yml lint job. Contract tests red->green in tests/test_ci_lint_contract.py; debt ledger docs/silent-handler-debt.md.	2026-09-07 20:42:41 +01:00
Nick	b9250a5fb1	fix(pipeline): spec-gate stage runs agent as runner user — binary/auth/model wiring verified live (HEADLESS-OK smoke); fail-loud (no swallow) (#204)	2026-09-07 20:39:04 +01:00
Nick	ab4dbf8d41	feat(pipeline): headless spec-gate stage — agent cognition as scoped Actions step, non-blocking verdict (#204 first slice)	2026-09-07 20:21:40 +01:00
Nick	860a0440a5	docs(plan): #139 tui-validator drift — plan + completion record (#139) ... Red-first evidence, canary before/after, kill-test transcripts, suite and ratchet results, deviations (pre-existing canary_native format drift; system-python environment artifact; foreign-stash pop incident — recovered, no data lost). (#139)	2026-09-07 20:17:59 +01:00
Nick	9f4df225cb	style(tui): ruff format on #139-touched files (#139) ... tui_validator.py and tests/test_tui_validator_imports.py fully format-clean. canary_native.py: blank line added in the #139-edited region only; the file carries pre-existing format drift (import blocks at L19/L199 wanting blank lines) that predates #139 — reformatting wholesale would add churn outside this issue's diff. (#139)	2026-09-07 20:14:57 +01:00
Nick	5c75c6b4fb	feat(canary): drop #139 false-failure tolerance — validator is the gate (#139) ... The content-matched tolerance tuple in canary_native.py (added by #138 as a stopgap for the drifted validator allowlist) is removed: with #139's declarative classification in tui_validator.py there are no known false-failures left to tolerate, and a residual shim would mask a regression of this very class. Every TUI validator error now counts as failed. The I2 frozen test (test_canary_native_tolerance_is_content_matched) is replaced by test_canary_native_has_no_false_failure_tolerance, which fails if the tolerance tuple or its warning branch returns — red at HEAD (tuple still present), green after this change. Red demonstration: with the pre-#139 validator restored, the tolerance-free canary reports '91 passed, 2 failed' (__future__ + rune) instead of silently warning. plans/2026-09-05-structural-contract.md:241 assigned tolerance removal to #139. (#139)	2026-09-07 20:10:38 +01:00
Nick	55ae7ddb42	fix(tui): declarative import classification replaces hand allowlist (#139) ... The hand-rolled allowlist in tui_validator.py drifted from rune_tui.py's real imports: 'from __future__ import annotations' (8126f1c) and bare 'import rune' (44cba5c) were flagged as not-found — the canary printed two known false-failures on every run. The hand list is the defect class (it drifts by construction), so replace it with ruff-isort-style declarative classification, stdlib-only (no new dependency): - relative imports -> their own class, never flagged (ruff semantics) - stdlib via sys.stdlib_module_names (covers __future__, a compiler directive, not a runtime import) - external: explicit 3-name set (textual, textual_autocomplete, rich) — the only hand-maintained list left - first-party: GENERATED from the src/rune/ listing plus the package itself (_first_party_modules); sync-guarded by test - scripts/ fallback kept; only 'unknown' is flagged Tests written first (red: 10 failed incl. the headline zero-false- failures assertion on the real rune_tui.py); regression guard pins _first_party_modules to the directory listing. (#139)	2026-09-07 20:09:14 +01:00
Nick	0d28acb39a	fix(henxels): changed_with patterns without ./ prefix — git diff paths never carry it; two rules were inert (#157 discharge finding)	2026-09-07 19:55:31 +01:00
Nick	135d24d193	docs(plan): #157 fixture pipeline completion record — commits, red evidence, kill tests, deviations (#157)	2026-09-07 19:52:32 +01:00
Nick	c3c95688f7	docs(fixtures): fixture pipeline workflow + seed fixture (#157) ... Seeds the pipeline with the REAL #192 CONVERGED case-mismatch payload: the safety-net convergence step exported Python-cased True/False from json.load while the steps compared env.CONVERGED == 'false' — both conditionals unreachable (discharged on the release-safety-net branch, public in PR #211's diff). Captured via the pipeline itself (--class env-case-mismatch --source ci, 0 redactions — the payload is already public and credential-free). The generated regression test asserts the boolean-export checker still FLAGS the recorded payload (checker_expectation: flags), so a recurrence of the class fails CI. Manifest gains checker_expectation: capture records whether the class's checker raises on the payload ('flags' — the raise IS the recurrence alarm) or must stay quiet ('passes'); the generated tests enforce the recorded expectation, so a checker that stops catching its recorded defect rots the suite red. Docs: bugfix-contract §10 gains the operational capture step + explicit trivial-bug exemption list; README dev section points at the pipeline; tests/fixtures/production/README.md documents the flow. Henxels: capture_failure.py required in scripts/; production fixtures governed (manifest.json + README.md required); payload.json and manifest.json travel together (changed_with both directions, verified to bite on a payload-only staged change).	2026-09-07 19:51:36 +01:00
Nick	a0ec8f2a84	feat(fixtures): manifest-driven regression tests (#157) ... capture_failure.py now generates tests/test_production_fixtures.py (template embedded, written once — manifest-driven parametrization means regeneration would be churn). One regression test per manifest fixture asserts the system's CURRENT handling of the historical payload: sha256 tamper-evidence (a payload edited without re-running capture fails), sanitiser idempotence, metadata shape, and per-class checker dispatch — the recorded payload must be CAUGHT by its class's checker so a recurrence fails CI. First checker: env-case-mismatch (#192's CONVERGED casing defect), mirroring the boolean env-export guard from the #192 discharge.	2026-09-07 19:40:17 +01:00
Nick	5458585e84	feat(fixtures): production failure capture with redaction (#157) ... scripts/capture_failure.py: one command turns a raw failure payload into a sanitised fixture under tests/fixtures/production/<class>/<id>/ plus a manifest.json entry carrying the payload's sha256 (tamper-evidence for the generated regression tests). Redaction reuses #122's filer patterns (query creds, DSN userinfo, bearer, assignments) — copied with attribution because the filer module ships on the failure-auto-filing branch; parity is pinned on the filer's own test literals. After redaction an independent residual scan aborts the capture loudly (exit 3, nothing persisted) when a credential-shaped span survives — over-redaction is a shape witness, a leaked fixture is an incident.	2026-09-07 19:33:46 +01:00
Nick	60e34cee49	docs(plan): #157 fixture pipeline plan — capture, redact, manifest, tamper-evidence (#157)	2026-09-07 19:15:20 +01:00
Nick	1bd276c448	feat(review): structuralized adversarial procedure — black-box test author, mandatory reviewer question, mutation spot-checks (#151)	2026-09-07 19:14:27 +01:00
Nick	ed9ec6df71	feat(docs): living PRDs — generated state sections + staleness gate for pipeline and TUI (#204)	2026-09-07 18:42:54 +01:00
Nick	3e0b74873f	merge: union bugfix-contract rules with umbrella rules — complementary contract surfaces	2026-09-07 18:40:39 +01:00
Nick	c00c0093e6	feat(pipeline): umbrella impact map + propagation gate — change-propagation contract via pipeline, runner, henxels (#204, T32)	2026-09-07 18:32:17 +01:00