Skip to content

ci(#3668): docs-only PRs skip guard-cargo/determinism, fail-closed (PR-2b of #4588 split) - #4639

Closed
noahgift wants to merge 1 commit into
mainfrom
a07/pr2b-3668-4429
Closed

noahgift wants to merge 1 commit into
mainfrom
a07/pr2b-3668-4429

Conversation

@noahgift

Copy link
Copy Markdown
Member

Split out of #4588 by cop ruling 19:35Z. This PR is not in the 0.70 batch, and auto-merge is NOT armed: it changes the gate's skip rule, so it gets its own Q0 review.

  • The gate accepts a skipped guard-cargo or determinism-compare only when the changes job succeeded and said docs_only=true (GATE-DOCS-ONLY-RULE, scripts/check_ci_gate_docs_only_rule.sh). Any other skip is RED.
  • The three docs-reading guards move from guard-cargo to guard-tree, so docs-only diffs are still judged by them.
  • Car release(0.70.0): sealed car — REPLACES #4372 #4429's intel pin is not carried. Main already runs x86-main on any free X64 runner.

Checks: fat_driver self-test 52/52; docs-only rule and its self-test rc 0; ci_docs_only self-test 13 rows; mutants rule, guards-wired and secrets-plumbed rc 0; roadmap-aggregate-check ok; actionlint findings equal to main.

Refs #3668 #4588

🤖 Generated with Claude Code

…t read docs run in guard-tree (PR-2b of #4588 split)

Moved out of #4588 by cop ruling 19:35Z. Neither rc.1 nor FINAL needs it (gate-graph walk in docs/audits/impl-PMAT-4588-receipts.md on #4588).

The gate accepts a skipped guard-cargo or determinism-compare only when the changes job SUCCEEDED and said docs_only=true (GATE-DOCS-ONLY-RULE, scripts/check_ci_gate_docs_only_rule.sh). Any other skip is RED. The three docs-reading guards (dogfood shim, claim literals, perf claims cite receipts) move from guard-cargo to guard-tree, so a docs-only diff is still judged by them.

Car #4429's intel pin is NOT carried: main's x86-main already takes any free X64 runner (operator fw16 parity rule).

Checks: fat_driver self-test 52/52; check_ci_gate_docs_only_rule.sh and --self-test rc 0; ci_docs_only.sh --self-test 13 rows; check_ci_gate_mutants_rule, check_guards_are_wired, check_ci_fat_secrets_plumbed rc 0; roadmap-aggregate-check ok; actionlint findings equal to main (2 shellcheck).

Pmat-Ticket: PMAT-3668
Agent: aprender-07

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

§13.11 rung 1 — quorum shadow verdict

S13-SHADOW pr=4639 head=60857aeef1199ee232af61b8c98753b14746f739 verdict=REFUSE class=Q1 arm_rc=1

Shadow mode: this records a verdict and merges nothing. A refusal
to arm is not a block (§13 adds zero rows to §7) — the pull request is
exactly as green as it was.

noahgift added a commit that referenced this pull request Oct 4, 2026
…gets a mutation-tested guard

`gate` and `ci / gate` now excuse sov.gate / determinism-compare only when
needs.change-class.result == success AND class == docs; a docs output from a
failed classifier job judges every section as before.

scripts/check_ci_gate_docs_class_rule.sh extracts both verdict steps from ci.yml
and executes them over an 18-row table (docs passes only with guard-tree,
guard-cargo, workspace-test / x86-main green; empty, failed or full class never
excuses a section). --self-test plants three wrong rules (trust the output
without the job result, excuse every section on docs, ci / gate trusting
x86-main alone): each turns the table RED; a workflow with no verdict steps is
ENV rc=2. Wired into guard-tree-steps beside the mutants-rule checker.

Adopted from the review of #4639 (its changes-job SUCCEEDED requirement and its
executed gate-block checker), in #4717's own terms; no commit of #4639 is moved.

Refs #4472
Agent: aprender-w4472

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@noahgift

noahgift commented Oct 4, 2026

Copy link
Copy Markdown
Member Author

Superseded by #4717 (#4472), folded on the cop's instruction. The branch a07/pr2b-3668-4429 is kept. No commit is moved. #4717 keeps guard-cargo running on docs PRs, which is stricter than moving its three docs readers into guard-tree. It adopts two things from this PR in its own terms: docs counts only when the classifier job succeeded, and a guard executes the gate's verdict block (scripts/check_ci_gate_docs_class_rule.sh, 18 rows plus planted mutants). One scope gap remains: this PR also fast-pathed roadmap YAML (docs/roadmaps/**). #4717's docs class is Markdown only, so widening it to roadmap YAML is a follow-up on #3668.

Agent: aprender-w4472

@noahgift noahgift closed this Oct 4, 2026
@noahgift
noahgift deleted the a07/pr2b-3668-4429 branch October 9, 2026 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant