Skip to content

feat: prepare template release compatibility contract - #15

Merged
Nickfost merged 15 commits into
mainfrom
feat/issue-12-template-release-compatibility
Sep 2, 2026
Merged

feat: prepare template release compatibility contract#15
Nickfost merged 15 commits into
mainfrom
feat/issue-12-template-release-compatibility

Conversation

@Nickfost

@Nickfost Nickfost commented Sep 1, 2026

Copy link
Copy Markdown
Member

Goal

Prepare the standalone template's first immutable release contract and pin it to the exact reviewed embedded template, without publishing a tag or release.

Problem

The repository documented tagged updates but had no release package, machine-readable core compatibility record, exact-core drift check, or current optional status/network-policy contract.

Exact source

Reviewed core commit: 0aed0d7e85e10050028b7d11fb12b84b3619e638
Embedded path: templates/config-repository

Approach

  • Sync the schema-v3 validator, initializer, rollout evidence, and fictional network-policy examples with that exact embedded template.
  • Record schema, validator/initializer, optional-capability, example-engine, and prepared-release compatibility in template-compatibility.json.
  • Add exact-commit drift and fictional unrelated-history release-update checks to CI.
  • Document immutable tag handling, rewrite refusal, migration naming, and the prepared v1.0.0 release.

TDD evidence

Each behavior was introduced vertically. Focused tests first failed because the optional schema fields, network semantics, prior-state evidence checks, initializer output, example policy, compatibility record, drift checker, or CI release commands were absent. Each focused check then passed after the matching minimum change. A separate portability RED proved the drift policy test depended on a workstation-only /tmp fixture; it now fetches only the pinned immutable commit. Temporary sabotage of network-capacity validation and the exact-core schema comparison made their regression checks fail as expected.

Compatibility guarantees

  • schema_version remains 3.
  • Existing configurations may omit status_reporting and docker_network_policy.
  • The fictional example engine pin remains 8df97cc7575f47696fa82a179bbe39cd2874b1ca; compatibility relies on omitting unsupported optional status reporting.
  • Public RFC 5737 pools pass ordinary validation and fail strict validation until adopters provide reviewed operational CIDRs.
  • Exact-core comparison allows only the documented fictional example engine_ref difference.

Final evidence

Final head: 1395f9dbade9d7f16397b9b7d4459a8ae1ff12a4

  • The operator independently verified python3 scripts/test_policy.py: 62 tests passed.
  • Remaining non-Docker gates passed: Bash syntax, ShellCheck, Python compilation, exact-core compatibility, release-update flow, base-aware and ordinary validation, strict initializer validation, expected strict fixture refusals, initialized file mode, and diff checks.
  • Candidate and exact-core trusted secret scans passed. No untracked, scratch, or private files were included.
  • Exact-head GitHub Actions run 33462941042, job 99716768420, completed validate successfully.

Risks and exclusions

The drift check reads files from one immutable GitHub commit, so CI requires GitHub availability. This PR does not activate status reporting, change the example engine pin, handle PR #14's deployment policy, use private data, invoke Docker, deploy, mutate infrastructure, merge, tag, or publish a release.

The v1.0.0 tag and GitHub release remain separately unauthorized and unpublished.

Refs #12

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 1, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-02T14:42:03.496572Z 5f5ef5d New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4ffa3be813

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/validate.yml Outdated
Comment thread fleet.json Outdated
Comment thread scripts/validate.py
Comment thread scripts/validate.py

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1395f9dbad

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/validate.yml Outdated
Comment thread scripts/validate.py

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6ba28dd111

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/test_policy.py Outdated
Comment thread scripts/init.py Outdated
@nick-s-hermes

nick-s-hermes Bot commented Sep 1, 2026

Copy link
Copy Markdown

@codex review

Please perform one final independent review of exact head fbd7ab56bbb5de3eab3f2d5ebb35792b702363e3 for #15.

Review only the current head. Recheck derived-repository portability, strict pre-write initialization, standalone Docker network-policy evidence, exact-core gating, and release tag-rewrite refusal. Report only actionable current-head findings. Do not merge, tag, release, or deploy.

@chatgpt-codex-connector

Copy link
Copy Markdown

To use Codex here, create a Codex account and connect to github.

@Nickfost

Nickfost commented Sep 1, 2026

Copy link
Copy Markdown
Member Author

@codex review

Retrying from the connected owner account because the repository-limited GitHub App cannot connect a Codex account. Please perform one final independent review of exact head fbd7ab56bbb5de3eab3f2d5ebb35792b702363e3 for #15. Report only actionable findings that still exist at this SHA. Do not merge, tag, release, or deploy.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fbd7ab56bb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/test_policy.py
Comment thread .github/workflows/validate.yml Outdated
Comment thread scripts/validate.py
Comment thread scripts/test_release_update.py Outdated
Comment thread scripts/test_core_compatibility.py Outdated
@Nickfost

Nickfost commented Sep 1, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please perform the authorized final exact-head review of 8220e7c4b13f0082908483bda4b4bcfcf2a91848 for #15. Recheck the six reproduced blockers only: derived optional-capability portability, offline derived policy execution, base-less first-state staging, engine upgrades with retained capabilities, template-update evidence preservation, and two-sided core-delta hash binding. Exact-head Actions run 33477094267 passes. Report only actionable defects present at this SHA. Do not infer merge, release, deployment, or private-rollout authorization.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8220e7c4b1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread docs/UPDATING.md Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0bbf14fcd9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/validate.py Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a74be487fe

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/validate.py Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b93212f234

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/validate.py
@nick-s-hermes

nick-s-hermes Bot commented Sep 1, 2026

Copy link
Copy Markdown

@codex review

Please review exact head b93212f2342a4ce3960dd340cfb9df02e9ef0d1a of #15. Focus on the pinned-core-compatible next-engine sidecar protocol, network-only/status-only/both-capability promotions, required sidecar cleanup, and strict prior-integrated evidence. Report only reproducible current-head contract violations. Do not merge or mutate the branch.

@chatgpt-codex-connector

Copy link
Copy Markdown

To use Codex here, create a Codex account and connect to github.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5fdd290eeb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/validate.yml Outdated
@nick-s-hermes

nick-s-hermes Bot commented Sep 1, 2026

Copy link
Copy Markdown

@codex review

Please perform the terminal exact-head review for #15 at 5fdd290. Exact-head Actions run 33565236647 passes. Focus on the staged next-engine sidecar protocol, network-only and status-only promotions, pinned core 0aed0d7e85e10050028b7d11fb12b84b3619e638 compatibility, and sidecar cleanup rules. Report only concrete reproducible blockers.

@chatgpt-codex-connector

Copy link
Copy Markdown

To use Codex here, create a Codex account and connect to github.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c6579fb0df

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/validate.py Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: cfaf9af506

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/test_core_compatibility.py Outdated
Comment thread scripts/test_policy.py

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 81cd4e91be

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/test_policy.py
@Nickfost
Nickfost merged commit cf4a4d1 into main Sep 2, 2026
1 check passed
@Nickfost
Nickfost deleted the feat/issue-12-template-release-compatibility branch September 2, 2026 19:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant