Skip to content

[ci] Validate all inputs before CI planning - #3579

Open
joshlf wants to merge 1 commit into
Gocqawbn3p3zj7xyfo7etk6vo4633r3tnfrom
Gsizgstaatljzyuwyc4tp4ha6krvibz64
Open

[ci] Validate all inputs before CI planning#3579
joshlf wants to merge 1 commit into
Gocqawbn3p3zj7xyfo7etk6vo4633r3tnfrom
Gsizgstaatljzyuwyc4tp4ha6krvibz64

Conversation

@joshlf

@joshlf joshlf commented Aug 25, 2026

Copy link
Copy Markdown
Member

Add one loading boundary which reads the typed policy, audits live Cargo
metadata and repository files, inventories every workflow job, and
strictly parses the frozen legacy baseline. Return planning inputs only
after every layer succeeds. Wiring the workflow audit here also removes
the temporary unused-code allowance from its introductory commit.

This keeps future planners from depending on call order or accidentally
skipping a validation pass. It also keeps the policy-owned baseline
paths in one place rather than repeating their coordination in each
consumer.

Resolve each input through the canonical repository boundary before
opening it. Reject baseline roles which identify the same underlying
file even when their policy spellings differ through symlinks or hard
links, so supposedly independent review evidence cannot silently alias.
Cross-platform open handles keep each identity stable for the complete
comparison.

Tests: CARGO_NET_OFFLINE=true ./ci/check_tools.sh
Tests: ./ci/check_fmt.sh

Authored by an agent, posting via joshlf's account


Latest Update: v29 — Compare vs v28

📚 Full Patch History

Links show the diff between the row version and the column version.

Version v28 v27 v26 v25 v24 v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v29 v28 v27 v26 v25 v24 v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v28 v27 v26 v25 v24 v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v27 v26 v25 v24 v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v26 v25 v24 v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v25 v24 v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v24 v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v23 v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v22 v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v21 v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v20 v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v19 v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v18 v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v17 v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v16 v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v15 v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v14 v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v8 v7 v6 v5 v4 v3 v2 v1 Base
v7 v6 v5 v4 v3 v2 v1 Base
v6 v5 v4 v3 v2 v1 Base
v5 v4 v3 v2 v1 Base
v4 v3 v2 v1 Base
v3 v2 v1 Base
v2 v1 Base
v1 Base
⬇️ Download this PR

Branch

git fetch origin refs/heads/Gsizgstaatljzyuwyc4tp4ha6krvibz64 && git checkout -b pr-Gsizgstaatljzyuwyc4tp4ha6krvibz64 FETCH_HEAD

Checkout

git fetch origin refs/heads/Gsizgstaatljzyuwyc4tp4ha6krvibz64 && git checkout FETCH_HEAD

Cherry Pick

git fetch origin refs/heads/Gsizgstaatljzyuwyc4tp4ha6krvibz64 && git cherry-pick FETCH_HEAD

Pull

git pull origin refs/heads/Gsizgstaatljzyuwyc4tp4ha6krvibz64

Stacked PRs enabled by GHerrit.

@codecov-commenter

codecov-commenter commented Aug 25, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (Gocqawbn3p3zj7xyfo7etk6vo4633r3tn@1e67168). Learn more about missing BASE report.

Additional details and impacted files
@@                         Coverage Diff                          @@
##             Gocqawbn3p3zj7xyfo7etk6vo4633r3tn    #3579   +/-   ##
====================================================================
  Coverage                                     ?   91.85%           
====================================================================
  Files                                        ?       20           
  Lines                                        ?     6093           
  Branches                                     ?        0           
====================================================================
  Hits                                         ?     5597           
  Misses                                       ?      496           
  Partials                                     ?        0           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

joshlf commented Aug 25, 2026

Copy link
Copy Markdown
Member Author

Authored by an agent, posting via joshlf's account

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Swish!

Reviewed commit: 16d8463814

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d4cdca490a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread tools/zc/src/ci.rs Outdated
@joshlf
joshlf force-pushed the Gocqawbn3p3zj7xyfo7etk6vo4633r3tn branch from 1efd245 to 205aa5e Compare August 26, 2026 17:40
@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from d4cdca4 to 20eff57 Compare August 26, 2026 17:40
@joshlf

joshlf commented Aug 26, 2026

Copy link
Copy Markdown
Member Author

Authored by an agent, posting via joshlf's account

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: 20eff57bd9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@joshlf
joshlf force-pushed the Gocqawbn3p3zj7xyfo7etk6vo4633r3tn branch from 205aa5e to 467e8ab Compare August 26, 2026 18:55
@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from 20eff57 to 18f67fd Compare August 26, 2026 18:55
@joshlf

joshlf commented Aug 26, 2026

Copy link
Copy Markdown
Member Author

Authored by an agent, posting via joshlf's account

@codex review

Please review the current head, 18f67fdde6fb3ae45a529b7971f5151a7325e276.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Swish!

Reviewed commit: 18f67fdde6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@joshlf
joshlf force-pushed the Gocqawbn3p3zj7xyfo7etk6vo4633r3tn branch from 467e8ab to ce33423 Compare August 26, 2026 20:11
@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from 18f67fd to c5520b4 Compare August 26, 2026 20:11
@joshlf

joshlf commented Aug 26, 2026

Copy link
Copy Markdown
Member Author

Authored by an agent, posting via joshlf's account

@codex review

Please review the current head, c5520b4a91a15c9cd7a3ce8a50e0571873b8713a.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: c5520b4a91

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from c5520b4 to d916ace Compare August 26, 2026 22:09
@joshlf
joshlf force-pushed the Gocqawbn3p3zj7xyfo7etk6vo4633r3tn branch from ce33423 to 6cc20d1 Compare August 26, 2026 22:09
@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from d916ace to d57f111 Compare August 26, 2026 22:35
@joshlf
joshlf force-pushed the Gocqawbn3p3zj7xyfo7etk6vo4633r3tn branch from 6cc20d1 to b3a0666 Compare August 26, 2026 22:35
@joshlf

joshlf commented Aug 26, 2026

Copy link
Copy Markdown
Member Author

Authored by an agent, posting via joshlf's account

@codex review

Please review the current head, d57f111ce1d12bd85eb94434b2d0183232ca6a4d.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d57f111ce1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread tools/zc/src/ci.rs
@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from d57f111 to 9b3d33e Compare August 26, 2026 23:31
@joshlf
joshlf force-pushed the Gocqawbn3p3zj7xyfo7etk6vo4633r3tn branch 2 times, most recently from 0128ac8 to 1e67168 Compare August 27, 2026 01:18
@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from 9b3d33e to 30011a4 Compare August 27, 2026 01:18
Add one loading boundary which reads the typed policy, audits live Cargo
metadata and repository files, inventories every workflow job, and
strictly parses the frozen legacy baseline. Return planning inputs only
after every layer succeeds. Wiring the workflow audit here also removes
the temporary unused-code allowance from its introductory commit.

This keeps future planners from depending on call order or accidentally
skipping a validation pass. It also keeps the policy-owned baseline
paths in one place rather than repeating their coordination in each
consumer.

Resolve each input through the canonical repository boundary before
opening it. Reject baseline roles which identify the same underlying
file even when their policy spellings differ through symlinks or hard
links, so supposedly independent review evidence cannot silently alias.
Cross-platform open handles keep each identity stable for the complete
comparison.

Tests: CARGO_NET_OFFLINE=true ./ci/check_tools.sh
Tests: ./ci/check_fmt.sh

*Authored by an agent, posting via joshlf's account*

gherrit-pr-id: Gsizgstaatljzyuwyc4tp4ha6krvibz64
@joshlf
joshlf force-pushed the Gocqawbn3p3zj7xyfo7etk6vo4633r3tn branch from 1e67168 to c87afd9 Compare August 27, 2026 10:15
@joshlf
joshlf force-pushed the Gsizgstaatljzyuwyc4tp4ha6krvibz64 branch from 30011a4 to 854f7f6 Compare August 27, 2026 10:15
@joshlf

joshlf commented Aug 27, 2026

Copy link
Copy Markdown
Member Author

Authored by an agent, posting via joshlf's account

@codex review

Please review the current head, 854f7f661215eea6d5280dc810a23ec49d4aeee5.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: 854f7f6612

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants