Commit Graph
6 Commits
Author SHA1 Message Date
agent-exec-transport 39834ead7d agent-exec transport 3cbfba3aed64b516704b0d68a7a9f2fa/82da3fb3f31d 2026-10-18 17:28:55 +00:00
agent-exec-transport 7e0b0e4ff8 agent-exec transport 49a82f74c1def272b56afa8e0ac78c2e/97ab25ec9da4 2026-10-18 17:20:46 +00:00
weichen 3b0e100fba Fix facts registry commands and make precheck parsing escape-aware
ci / svc-realcombo (pull_request) Successful in 1m59s
ci / test (pull_request) Successful in 5m13s
ci / test-pg (pull_request) Successful in 8m6s
Why: F2 token extraction predates the two-section (HOME/IMC) layout of
~/.secrets/gitea so it concatenated both tokens and always failed; F6
registered a grep BRE alternation that facts-verify unescapes into a
literal pipe, failing re-verification and misaligning precheck's naive
pipe split into a spurious F6 date-format expiry warning, while both
underlying facts still hold.

Evidence: make facts-verify now 6/6 PASS with last_verified refreshed
to 2026-10-14; new regression test for escaped pipes in facts rows;
full governance suite 342 tests OK (18 skipped); precheck [facts] line
reports all facts fresh on the fixed parser.

Impact: policy/facts.md F2 (HOME-section awk extraction) and F6
(negated pipe-free grep); scripts/task.sh precheck neutralizes escaped
pipes the same way facts-verify does; tests/test_task.py covers it.

Refs: precheck WARN 过期事实 F6(日期格式); AGENTS.md 证据与验证门禁.
2026-10-14 06:13:51 +00:00
weichen dc679e9ded Bump frontend and backend pins; register account facts F5/F6
ci / svc-realcombo (pull_request) Failing after 34s
ci / test-pg (pull_request) Failing after 2m34s
ci / test (pull_request) Failing after 4m24s
Why: P2 前端系统设置面板(Frontend #78)与 P3 账号搜索扩展(Backend #191)已合入各仓 main,组合 bump 进 Dev;账号姓名字段与停用能力现状按门禁登记 facts。
Evidence: check-pins 通过(evidence 写卡);组合验证由本 PR 的 Dev CI 承担(test/test-pg/svc-realcombo);前端 design-guard 6/6 与 tsc/build 在 Frontend PR 内完成。
Impact: gitlink 两枚 + facts F5/F6 新增。
Refs: 提案 r1 P2/P3;Frontend #78;Backend #191;RDM #345/#346
2026-10-13 06:41:34 +00:00
weichen 6518f6ed0a Fix F2 verify command for the markdown-list token file format
Why: facts-verify failed closed on first run — the real token file stores keys
as markdown bullets ("- ACCESS_TOKEN=..."), so the ^-anchored sed match in the
registry never fired; the earlier manual probe had used grep (anywhere-in-line)
and passed, which is exactly the drift the registry re-verification exists to
surface.

Evidence: re-run recorded in the task card — [facts-verify] total=4 pass=4
fail=0 (sha256 919401b838d77909), after fixing the sed pattern to
"^[ -]*ACCESS_TOKEN=".

Impact: policy/facts.md F2 command now matches the actual file shape and the
fact text documents the file format; no behavior change elsewhere.

Refs: task card evidence table (failed run sha256 6c61e644395042fa, then pass).
2026-10-05 10:49:29 +00:00
weichen ba83a17c11 Add evidence gates: facts registry, evidence tooling, and precheck checks
Why: declarations were passing as capability; hand-transcribed outputs flowed
through cards and PR bodies as if they were execution evidence, and stale
external facts (e.g. the dead git-panel host) kept being trusted until burned.

Evidence: guidelines draft.10 (PR Development-Guidelines#4, merged af199ee)
pinned here; policy/facts.md F1-F4 each re-verified on 2026-10-05 before
registration (endpoint version, token HTTP 200 via header only, SSH ls-remote,
dead-host negative probe); scripts syntax-checked (bash -n); tool self-tests
and make test recorded in the task card via the new make evidence.

Impact: new AGENTS.md section (SELF/REPLAY/GATE, tool-written evidence,
replay-on-review, zero-trust facts, honest-empty); make evidence/facts-verify;
precheck gains [hooks]/[facts], task-sync gains stale-evidence-HEAD warning;
task-start cards now embed the evidence table; gitlink advances to draft.10.

Refs: task card .task/feature-evidence-driven-gates.md; guidelines CHANGELOG
0.1.0-draft.10.
2026-10-05 10:47:27 +00:00