fix(hardening): operation-identity authority — explicit sha end-to-end #342
Merged
conductor
merged 1 commits from 2026-09-18 10:31:35 +01:00
hardening-authority-identity into master
1
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 Nick
|
81c6d1f9c6 |
fix(hardening): operation-identity authority — explicit sha end-to-end, paginated runs fetch, model-sha-as-hint
CI Pipeline / best-practices (push) Successful in 8s
CI Pipeline / documentation (push) Successful in 4s
CI Pipeline / canary (push) Successful in 32s
CI Pipeline / lint (push) Successful in 42s
CI Pipeline / type-check (push) Successful in 30s
deploy / deploy (push) Skipped
CI Pipeline / gitea-offline (push) Successful in 21s
Auto-label / auto-label (pull_request) Successful in 23s
Auto-label / priority-gate (pull_request) Skipped
CI Pipeline / documentation (pull_request) Successful in 6s
CI Pipeline / canary (pull_request) Successful in 36s
CI Pipeline / type-check (pull_request) Successful in 27s
CI Pipeline / gitea-offline (pull_request) Successful in 22s
Spec gate (headless) / spec-gate (pull_request) Successful in 18s
CI Pipeline / best-practices (pull_request) Successful in 7s
CI Pipeline / lint (pull_request) Successful in 40s
CI Pipeline / unit-tests (push) Successful in 3m22s
CI Pipeline / required-checks (push) Successful in 1s
CI Pipeline / CI Pipeline / notify-event-bridge (push) Successful in 5s
CI Pipeline / unit-tests (pull_request) Successful in 3m22s
CI Pipeline / required-checks (pull_request) Successful in 1s
CI Pipeline / CI Pipeline / notify-event-bridge (pull_request) Successful in 5s
Auto-version and Release / release (pull_request) Successful in 39s
Defect A root cause: Gitea runs-list page flood (scheduled merge-robot runs push relevant SHAs past the limit=50 first page) + collect-only- first-page pagination -> terminal commit read as pending -> parked until deadline. FIX: _fetch_runs paginates up to 4 pages collecting all matches before verdict. Defect B root cause: authority_verdict spawned deploy_qualify reading DEPLOY_SHA from ambient env. FIX: explicit --sha arg (env masked when sha is explicit); _ci_runs_verdict/op_ci_alive take sha as parameter only; no env read remains in the authority path. Defect C root cause: model sha treated as lookup key — a typo derived a ghost operation. FIX: model sha is a HINT; unresolved sha + single pending op -> stored target used with model_sha_mismatch logged; bound op always wins over hints. deploy_qualify gained --sha flag (env kept for workflow backward-compat only). Tests: H-matrix (identity, prefix collision, env staleness, monotonicity, aggregator lag, operation-id-first) + full 2179 suite. |