Skip to content

chore(ci): regenerate velnor-workflow tree at schema 2 (wave pin 4dec6b9e) - #98

Merged
donbeave merged 2 commits into
mainfrom
rollout/velnor-wave
Sep 21, 2026
Merged

donbeave merged 2 commits into
mainfrom
rollout/velnor-wave

Conversation

@donbeave

Copy link
Copy Markdown
Contributor

W4.2 consumer regen: degenerate s1 (orphan docs unit) to full schema-2 tree at wave pin 2.

  • Hosted-only singleton (public repo); full entrypoints minted (ci-pr/ci-main/ci-policy/nightly/maintenance)
  • [release] kind=apt via [[declare]] row, holla values (signer 925B7B4B…0F3E0A, holla.gpg, Origin Holla, https://holla-apt.tailrocks.com)
  • Policy in declared required checks (live ruleset requires DCO+ci-required; Policy flip recorded for W6.2)
  • Deletes obsolete NO_WORKFLOWS_REQUIRED.md; root APT configs unchanged
  • package-feed environment created (no reviewers, matches velnor-apt)

Deferred ([renovate], W4 escalation): s2 validation requires the velnor provider for the writer, unsatisfiable on public repos; follow-up once the generator admits a hosted writer.

Note: feed verify/publish stays fail-closed until tailrocks/holla adopts the package-release contract (signer workflow, attestations, coherence assets) — source-side follow-up.

…6b9e)

Degenerate s1 (4fa7a3a8, orphan docs unit) to full schema-2 tree at the
wave pin: hosted-only singleton, ci-pr/ci-main/ci-policy/nightly/
maintenance, [release] kind=apt via declare row (holla values), Policy in
declared required checks. Deletes obsolete NO_WORKFLOWS_REQUIRED.md; root
APT source configs (conf/, holla.gpg, package-state.json, renovate.json)
unchanged.

[renovate] deferred: s2 validation requires the velnor provider for the
writer, which the visibility policy forbids on public repos (W4
escalation); re-add once the generator admits a hosted writer.

Note: the feed cannot verify/publish until the source repo adopts the
package-release contract (signer workflow + attestations + velnor-style
coherence assets); release.yml is fail-closed until then.

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

…assertions

The s2 runtime refuses command-less CI units, and the s1 tree ran none.
Wire ci_tasks=[check] with lock-pinned tools, and port
test-package-update.sh's publication assertions from the deleted hand
publish.yml to the generated release.yml (verify-before-mutate ordering,
attestation + apt-verify/apt-publish presence, handoff artifacts,
mutable-authority negatives). check is green again (was red-on-main).

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
@donbeave
donbeave merged commit e7f3700 into main Sep 21, 2026
5 checks passed
@donbeave
donbeave deleted the rollout/velnor-wave branch September 21, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant