docs: RCE replay mode action contract (PR E gate) - #3
Merged
Conversation
Design gate for adding replay verification to the action. Defines: - verification-mode input (proof_pack | rce_replay) - artifact discovery rules for episode packs - fail-closed runtime behavior - verdict mapping (MATCH/DIVERGE/INTEGRITY_FAIL → action outputs) - summary/comment/upload contracts - explicit non-goals and deferred items No action code changes. This note is the implementation contract that PR E must follow. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
Adds a design-gate contract for a planned “RCE replay” verification mode in this GitHub Action, clarifying expected inputs, behavior, and non-goals ahead of the implementation PR.
Changes:
- Added
RCE_REPLAY_ACTION_CONTRACT.mddefining the proposed replay-mode contract (inputs, discovery rules, runtime behavior, verdict/output mapping, summaries, artifacts, non-goals). - Updated
README.mdwith a pointer noting replay mode is not yet implemented and linking to the contract. - Added a
.gitignoreto ignore common Python cache artifacts.
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| README.md | Documents that RCE replay mode is planned (not implemented) and links to the contract. |
| RCE_REPLAY_ACTION_CONTRACT.md | Introduces the design contract for the future replay-mode implementation (PR E gate). |
| .gitignore | Ignores Python bytecode and pytest cache directories. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+33
to
+39
| PR E should add one new input and keep the existing proof-pack inputs stable. | ||
|
|
||
| | Input | Contract | | ||
| |------|----------| | ||
| | `verification-mode` | New enum input. Allowed values: `proof_pack` (default), `rce_replay`. | | ||
| | `pack-path` | Reused as-is. In replay mode, each matched directory is treated as a replayable episode root. | | ||
| | `replay-output-dir` | New input. Default: `replay_results`. Relative directory created inside each matched replay root. | |
There was a problem hiding this comment.
The contract states “PR E should add one new input…”, but the table below introduces two new inputs (verification-mode and replay-output-dir). Please reconcile this (either update the text to reflect two new inputs, or remove one from the v1 contract).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Design gate for adding RCE replay verification to this action. No code changes — this is the contract that PR E implementation must follow.
RCE_REPLAY_ACTION_CONTRACT.md: full contract covering inputs, discovery rules, runtime behavior, verdict mapping, summary/comment flow, artifact upload, and explicit non-goalsREADME.md: pointer noting replay mode is not yet implemented.gitignore: suppress Python cache residueKey decisions in the contract
verification-mode: rce_replay(not a boolean flag)assay rce-verify, does not reimplement verifier logicrequire-claim-pass: false,lock-file,trust-target,trust-policy-dir,enforce-trustDepends on
Test plan
🤖 Generated with Claude Code