Add CI, version stamping, and the high-consequence two-key rule #11

2026-09-30T04:06:12Z

weichen commented

2026-09-30 04:06:12 +00:00

CI：.gitea/workflows/ci.yaml（PR/push 触发 make test + make build，子仓经 HTTPS insteadOf 物化）——本 PR 即首跑，绿后合并；2) 版本溯源：make version / agent-system version 输出 git describe+四组件 SHA（ldflags 注入 main.version）；3) 双钥匙：AGENTS.md 高后果清单（Agent 只准备、用户执行）+ adoption 差异表登记。

1) CI：.gitea/workflows/ci.yaml（PR/push 触发 make test + make build，子仓经 HTTPS insteadOf 物化）——本 PR 即首跑，绿后合并；2) 版本溯源：make version / agent-system version 输出 git describe+四组件 SHA（ldflags 注入 main.version）；3) 双钥匙：AGENTS.md 高后果清单（Agent 只准备、用户执行）+ adoption 差异表登记。

weichen added 3 commits 2026-09-30 04:06:13 +00:00

Record the task card for feature-hardening-batch f8dc724862

Add CI, version stamping, and the high-consequence two-key rule 8252363c04

Why: PR test evidence depended on the agent's word (single point); the
running binary could not answer what combination it was built from; and
irreversible operations lacked an explicit agent-stops-here boundary.
Evidence: Gitea runner online (home-runner, ubuntu-latest+docker); make
version prints describe+component SHAs; two-key line maps to baseline hard
boundary 1. CI first run observed on this PR before merge (see Actions tab).
Impact: .gitea/workflows/ci.yaml runs make test + make build on PR/push;
Makefile injects main.version (make version / agent-system version);
AGENTS.md and adoption register the two-key rule. No product code change.
Refs: policy/adoption.md; release-operations requirements

Record the sync checkpoint

ci / test (pull_request) Failing after 6s

Details

51d9e92b88

weichen added 1 commit 2026-09-30 04:07:24 +00:00

Use a repo-scoped PAT secret for private submodule clones in CI

ci / test (pull_request) Successful in 1m17s

Details

4bd0803c51

Why: the job token only authorizes the event repository; sibling private
submodules (Development-Guidelines et al.) returned 404 on the first run.
Evidence: run 194 log — clone of deps/development-guidelines failed with
repository not found despite the insteadOf rewrite.
Impact: ci.yaml reads secrets.SUBMODULE_TOKEN (stored via API, never in
tree or chat); no other change.
Refs: run 194; PR#11

weichen merged commit dca932c6da into main

2026-09-30 04:09:07 +00:00

weichen referenced this issue from a commit

2026-09-30 07:56:19 +00:00

Pin the T3 command-bus combo: cmdbus backend, InlineConfirmCard, wiring

weichen referenced this issue from a commit

2026-09-30 08:09:36 +00:00

Pin the T4 workspaces combo and extend the example plugin (overlay shell, pure inbox rail)

weichen referenced this pull request

2026-09-30 10:46:15 +00:00

Task-centric sidebar R1 (option A): gitlinks + task card #37

weichen referenced this pull request