weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 6 Actions 2 Packages Projects Releases Wiki Activity

Harden development gates and align the governing rules #213

Merged
weichen merged 14 commits from feature/governance-reliability into main 2026-10-05 13:43:15 +00:00
Conversation 0 Commits 14 Files Changed 28
+3781 -242
14 Commits
Author SHA1 Message Date
weichen a4e4f1cb69 Record reviewer replay evidence for the CI fix round
ci / test (pull_request) Successful in 2m33s
Details
2026-10-05 13:40:14 +00:00
weichen 89468bba4c Allow the platform-injected internal http server URL in CI checkout
ci / test (pull_request) Successful in 2m11s
Details 
Why: 运行器注入 GITHUB_SERVER_URL='http://172.17.0.1:3000'（docker 网关直连宿主 Gitea，
run 950 诊断实测）；https 限定与硬编码常量比对都会拒绝合法检出，GATE 无法变绿。
Evidence: 校验收宽为 http(s)+netloc；凭据仍仅附着于注入基址+仓库白名单 URL，固定 SHA/
路径/递归深度 fail-closed 语义不变。
Impact: 仅 ci.yaml checkout 一处。
 2026-10-05 13:37:12 +00:00
weichen 017502f4cc Diagnose the runner-injected server URL in CI checkout
ci / test (pull_request) Failing after 1s
Details
2026-10-05 13:35:42 +00:00
weichen a1fb67c569 Derive CI checkout server from the runner-injected URL
ci / test (pull_request) Failing after 1s
Details 
Why: 加固 checkout 把 GITHUB_SERVER_URL 与硬编码常量严格比对，运行器注入值与公网拼写
不一致时合法检出被拒（PR #213 run 948/job 1333：Checkout server is outside the
reviewed allowlist），GATE 无法变绿。
Evidence: 本地同树 make test exit 0（REPLAY 行已入卡）；修复后凭据仍只附着于
「平台注入基址 + 仓库白名单」URL，路径/固定 SHA/递归深度校验全部保留。
Impact: 仅 ci.yaml checkout 脚本一处；仓库白名单与 fail-closed 语义不变。
Refs: .task/feature-governance-reliability.md 授权记录（2026-10-05 安全收尾授权）。
 2026-10-05 13:34:22 +00:00
weichen 005e2a1bd5 Record merge authorization and final synchronized evidence
ci / test (pull_request) Failing after 0s
Details 
Why: the owner authorized conflict-free integration and safe worktree cleanup after verification.

Evidence: final fixed combination passes make test and make build; full outputs and review replay records are in the task card.

Impact: authorization and evidence metadata only; no source or component change.

Refs: .task/feature-governance-reliability.md
 2026-10-05 13:29:31 +00:00
weichen d932828e8c Record the sync checkpoint 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=fd442d933c051fe538b224e067c214c1976f6dd0; candidate=d96e4ae016def6ce4f93548a55e6b26de8924d37.

Impact: task metadata only.

Refs: .task/feature-governance-reliability.md
 2026-10-05 13:16:46 +00:00
weichen d96e4ae016 Record final combination evidence and component review links 
Why: bind the reviewable governance repair to the synchronized candidate and related component PRs.

Evidence: tool-generated SELF make test and make build output plus independent repair REPLAY records in the task card.

Impact: task metadata only; platform protection and deployment remain owner-controlled.

Refs: .task/feature-governance-reliability.md
 2026-10-05 13:16:20 +00:00
weichen 1c79932714 Record the sync checkpoint 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=fd442d933c051fe538b224e067c214c1976f6dd0; candidate=c1fdf0141ca4e833c5b391c1847ee53d953b1cf3.

Impact: task metadata only.

Refs: .task/feature-governance-reliability.md
 2026-10-05 13:12:15 +00:00
weichen c1fdf0141c Merge current main while preserving governance repairs 
Why: main advanced with merged-task-name and legacy evidence guards during this task.

Evidence: SELF 44 lifecycle regressions pass after resolving both hunks; independent review repairs are recorded in the task card.

Impact: retains both task-start protections and the stronger JSON/legacy receipt reader, without rewriting either branch history.

Refs: Dev PR #211 and #212; .task/feature-governance-reliability.md
 2026-10-05 13:11:50 +00:00
weichen b84667a697 Close review gaps in cleanup and evidence handling 
Why: independent review found shared submodule metadata risk, quoted header leakage, stale JSON receipt blindness and missing abandon coverage.

Evidence: SELF 92 governance regressions pass; the original review receipt and replay output are recorded in the task card.

Impact: preserves external component worktrees, handles both evidence formats and adds targeted failure-path coverage; no product behavior changes.

Refs: .task/feature-governance-reliability.md; .task/reviews/governance-reliability.json
 2026-10-05 13:07:10 +00:00
weichen 976d2e8443 Record synchronized combination test and build evidence 
Why: retain complete tool-generated local verification for the governance repair candidate.

Evidence: SELF task-sync, 75 governance tests, full make test, make build and syntax checks are recorded in the task card.

Impact: evidence metadata only; product and gate implementations are unchanged.

Refs: .task/feature-governance-reliability.md
 2026-10-05 12:46:53 +00:00
weichen c0abfb0250 Record the sync checkpoint 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=43d33aa4921078bc202393b99cba017d7f731b98; candidate=8af945a1d53bd3aa934994070417c91508cba994.

Impact: task metadata only.

Refs: .task/feature-governance-reliability.md
 2026-10-05 12:36:27 +00:00
weichen 8af945a1d5 Make development gates preserve work and verifiable evidence 
Why: cleanup, component synchronization, receipt recording and credential handling could contradict the documented development boundaries.

Evidence: SELF 75 isolated governance tests and source checks are captured in .task/feature-governance-reliability.md; combination and CI verification follow.

Impact: hardens local task and CI tooling, aligns policy and component documentation, and adds continuous regression tests without changing product behavior.

Refs: .task/feature-governance-reliability.md; policy/governance.md; policy/platform-admission.md
 2026-10-05 12:36:02 +00:00
weichen 46a1770798 Record the task card for feature-governance-reliability 2026-10-05 12:18:49 +00:00