Skip to content

Prevent manager validation bytecode drift - #43

Merged
Nickfost merged 1 commit into
mainfrom
fix/issue-41-manager-bytecode
Jul 23, 2026
Merged

Prevent manager validation bytecode drift#43
Nickfost merged 1 commit into
mainfrom
fix/issue-41-manager-bytecode

Conversation

@Nickfost

Copy link
Copy Markdown
Member

Closes #41.

Prevents the managed installer and its validators from writing Python bytecode into the immutable manager release. Adds a regression contract for the environment boundary and post-check manager tree.

Validated locally:

  • ./scripts/test-install-worker-controller.sh
  • ./scripts/test-capacity-preflight.sh
  • python3 templates/config-repository/scripts/test_policy.py
  • template single-host and multi-host validation
  • bash -n and git diff --check
  • secret scan

Local Docker and native ShellCheck are unavailable; GitHub CI remains authoritative for those checks.

@Nickfost

Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: 66329d8d64

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@Nickfost
Nickfost merged commit 8df97cc into main Jul 23, 2026
1 check passed
@Nickfost
Nickfost deleted the fix/issue-41-manager-bytecode branch July 24, 2026 03:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Prevent manager validation from mutating immutable release tree

1 participant