ci: keep Velnor gating and harden selection/watch proof - #627

Open

donbeave wants to merge 30 commits into

mainfrom

codex/ci-goal-remediation-20260906

donbeave commented Sep 6, 2026 •

edited

Loading

Collaborator

Summary

Document why trusted Velnor stays in the required PR/main/Nightly DAG; no ci-velnor.yml split.
Fail closed when a unit job requests a unit absent from the plan artifact.
Add exact current-project Cargo.lock and velnor-client closure fixtures.
Prove valid artifact handoff on a no-git checkout, no second Git resolution, and SHA-mismatch failure.
Narrow fleet watches and cover Dockerfile/docker/build-mise runtime inputs.

Verification

cargo test --locked -p velnor-workflow: 148 passed
cargo clippy --locked -p velnor-workflow --all-targets --all-features -- -D warnings: pass
cargo check --workspace --all-targets --locked: pass
generated workflow check: pass
fmt/diff checks: pass

Trusted Velnor fleet, cache budget/history, matched performance runs, and merge approval remain external gates.

donbeave and others added 20 commits

September 6, 2026 23:55


          fix(workflow): keep Velnor lanes image-native

6ccf97c

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          test(ci): cover Velnor image-native setup

bb17654

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          docs(ci): record Velnor remediation evidence

eb0b65f

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          fix(ci): narrow generator watch fanout

4df3da2

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          fix(ci): retain cache budget evidence

24e0425

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          fix(workflow): track static GitHub include inputs

6fb75a7

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          fix(workflow): parse include inputs safely

c266ce9

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          fix(ci): stop Docker PR validation before release build

9a88b70

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          fix(runner): synchronize cancellation fan-out

d0315e3

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          fix(artifact): encode protobuf string wrapper correctly

32ce5a3

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          docs(ci): record remote remediation evidence

e9e6f9e

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          merge main into CI remediation

a041d2a

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          docs(ci): record artifact wire evidence

314d909

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          docs(ci): record artifact wire evidence

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          merge shared CI remediation updates

e0af3ed

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          docs(ci): record stale follow-up run

2a3af2d

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          fix(ci): refresh hosted workflow runtime pin

b204a55

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          docs(ci): record synchronized validation

bbfabb2

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          perf(ci): shrink hosted Mr. Boxington cache payload

13f4f8b

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          docs(ci): reject non-gating Velnor split

d795490

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>

chatgpt-codex-connector Bot commented Sep 6, 2026

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.


          Merge origin/main into CI goal remediation

3a7970a

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>

donbeave changed the title ~~perf(ci): use object cache mode without splitting Velnor lanes~~ docs(ci): reject non-gating Velnor split

donbeave and others added 7 commits

September 7, 2026 05:35


          docs(ci): refresh current provider blockers

cc44ff4

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          docs(ci): align safety-net status with current source

e7c36a6

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          Merge origin/main APT dependency fix

6f3514c

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          fix(ci): watch runtime build inputs

7f746db

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          fix(ci): narrow fleet watch coverage

f96bf86

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          fix(ci): fail closed for unselected units

332f4bd

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>


          test(workflow): add current project selection fixtures

257902d

Lock down D1 selected and full unit IDs for Cargo.lock version-only changes and velnor-client source changes.

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>


          test(ci): prove selection artifact handoff

0db4080

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Co-authored-by: Codex <codex@openai.com>

donbeave changed the title ~~docs(ci): reject non-gating Velnor split~~ ci: keep Velnor gating and harden selection/watch proof


          docs(ci): record remediation fixture evidence

3d19bfc

Co-authored-by: Codex <codex@openai.com>
Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet