Skip to content

docs: RCE replay mode action contract (PR E gate) - #3

Merged
Haserjian merged 1 commit into
mainfrom
feat/rce-replay-mode-gate
Apr 7, 2026
Merged

docs: RCE replay mode action contract (PR E gate)#3
Haserjian merged 1 commit into
mainfrom
feat/rce-replay-mode-gate

Conversation

@Haserjian

Copy link
Copy Markdown
Owner

Summary

Design gate for adding RCE replay verification to this action. No code changes — this is the contract that PR E implementation must follow.

  • RCE_REPLAY_ACTION_CONTRACT.md: full contract covering inputs, discovery rules, runtime behavior, verdict mapping, summary/comment flow, artifact upload, and explicit non-goals
  • README.md: pointer noting replay mode is not yet implemented
  • .gitignore: suppress Python cache residue

Key decisions in the contract

  • Mode selector: verification-mode: rce_replay (not a boolean flag)
  • CLI wrapper only: action calls assay rce-verify, does not reimplement verifier logic
  • Fail closed: missing CLI, malformed replay surfaces, or JSON parse failures → exit 2
  • Verdict mapping: MATCH→0, DIVERGE→1, INTEGRITY_FAIL→2 (matches existing action exit model)
  • Rejected inputs in replay mode: require-claim-pass: false, lock-file, trust-target, trust-policy-dir, enforce-trust
  • Scope: recorded-trace only, Tier A only, no replay-bundle packing

Depends on

Test plan

  • Review contract for completeness against existing action.yml inputs/outputs
  • Confirm verdict mapping matches profile §6 verdict table
  • Implementation PR follows this contract exactly

🤖 Generated with Claude Code

Design gate for adding replay verification to the action. Defines:
- verification-mode input (proof_pack | rce_replay)
- artifact discovery rules for episode packs
- fail-closed runtime behavior
- verdict mapping (MATCH/DIVERGE/INTEGRITY_FAIL → action outputs)
- summary/comment/upload contracts
- explicit non-goals and deferred items

No action code changes. This note is the implementation contract
that PR E must follow.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings April 7, 2026 00:38

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a design-gate contract for a planned “RCE replay” verification mode in this GitHub Action, clarifying expected inputs, behavior, and non-goals ahead of the implementation PR.

Changes:

  • Added RCE_REPLAY_ACTION_CONTRACT.md defining the proposed replay-mode contract (inputs, discovery rules, runtime behavior, verdict/output mapping, summaries, artifacts, non-goals).
  • Updated README.md with a pointer noting replay mode is not yet implemented and linking to the contract.
  • Added a .gitignore to ignore common Python cache artifacts.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File Description
README.md Documents that RCE replay mode is planned (not implemented) and links to the contract.
RCE_REPLAY_ACTION_CONTRACT.md Introduces the design contract for the future replay-mode implementation (PR E gate).
.gitignore Ignores Python bytecode and pytest cache directories.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +33 to +39
PR E should add one new input and keep the existing proof-pack inputs stable.

| Input | Contract |
|------|----------|
| `verification-mode` | New enum input. Allowed values: `proof_pack` (default), `rce_replay`. |
| `pack-path` | Reused as-is. In replay mode, each matched directory is treated as a replayable episode root. |
| `replay-output-dir` | New input. Default: `replay_results`. Relative directory created inside each matched replay root. |

Copilot AI Apr 7, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The contract states “PR E should add one new input…”, but the table below introduces two new inputs (verification-mode and replay-output-dir). Please reconcile this (either update the text to reflect two new inputs, or remove one from the v1 contract).

Copilot uses AI. Check for mistakes.
@Haserjian
Haserjian merged commit 90f96ad into main Apr 7, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants