weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 7 Actions 2 Packages Projects Releases Wiki Activity
4,036 Commits 20 Branches 4 Tags
35ef55822a3f0e594a238e25683655fed13fd098
Commit Graph
4 Commits
Author SHA1 Message Date
weichenandCursor 7331323df4 Give pin materialize the CI git channel and a private database 
Why: test-pg has no SSH known_hosts, and the shared agent_test database already holds another instance identity.
Evidence: SELF python3 -m unittest tests.test_ci_credentials.CheckoutTests.test_rdm_pin_fetch_is_three_shas_on_the_allowlist tests.integration.lifecycle.test_lifecycle_real (1 pass, 24 skip).
Impact: lifecycle children forward GIT_CONFIG_* only; serve stays env -i. Login and rdm.ping stay NOT_RUN.
Refs: .task/feature-svc-d3-real-scenarios.md
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-13 04:03:55 +00:00
weichenandCursor 8dda121c0d Fetch and build the three pinned RDM SHAs in CI 
Why: test-pg only cloned the default branch, so prev_sha and legacy_sha were never built or attested.
Evidence: SELF python3 -m unittest tests.test_ci_credentials tests.test_lifecycle_pin (11 tests, exit 0).
Impact: the lifecycle suite prints the combination inventory and keeps login and rdm.ping as NOT_RUN.
Refs: .task/feature-svc-d3-real-scenarios.md
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-13 02:59:44 +00:00
weichen 9374986b63 Lock CI checkout credential scope to the injected server and allowlist
ci / test (pull_request) Successful in 2m10s
Details 
Why: 复核轮遗留的安全测试草稿按「常量=传输端点」设计，与 PR #213 已合入的
「注入基址=传输端点」语义相反，原样提交会红。适配为锁定真实不变量。
Evidence: python3 -m unittest tests.test_ci_credentials 8/8 OK（含新用例：
任一注入拼写检出成功、凭据仅落白名单路径且令牌分离、非 http(s) 注入 fail-closed）。
Impact: 仅测试文件；不改 ci.yaml 行为。
Refs: PR #213 run 950 诊断（GITHUB_SERVER_URL=http://172.17.0.1:3000）。
 2026-10-05 13:45:58 +00:00
weichen 8af945a1d5 Make development gates preserve work and verifiable evidence 
Why: cleanup, component synchronization, receipt recording and credential handling could contradict the documented development boundaries.

Evidence: SELF 75 isolated governance tests and source checks are captured in .task/feature-governance-reliability.md; combination and CI verification follow.

Impact: hardens local task and CI tooling, aligns policy and component documentation, and adds continuous regression tests without changing product behavior.

Refs: .task/feature-governance-reliability.md; policy/governance.md; policy/platform-admission.md
 2026-10-05 12:36:02 +00:00