From 3ea7cc5b2c1b26650093b07956786c0d5c8aac03 Mon Sep 17 00:00:00 2001 From: Danilo Campos Date: Thu, 25 Jun 2026 14:49:31 -0400 Subject: [PATCH] Revert the mutation-ratchet CI step (green main; re-land after fix) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The boundary-oracle mutation ratchet (#16) failed on the push-to-main full run: all 6 anchored edges came back INVALID in CI. The harness spawns 7 separate `vitest` invocations, each of which boots the vitest-pool-workers pool and opens a remote Cloudflare proxy session (AI/Vectorize are remote=true). `npm test` opens one such session; 7 rapid isolated boots fail in the CI environment, so every mutated oracle exits nonzero WITHOUT a "Tests N failed" line → INVALID → ratchet fail. It passes locally because a dev box reuses/holds the session fine. Remove the CI step to restore a green main. The harness (scripts/invariant- mutation-probe.py) and its --changed mode stay as a local / pre-push tool. Re-land as a CI gate once the harness emits the captured oracle output on non-ANCHORED verdicts (to diagnose) and the 7x-pool-boot incompatibility is solved (e.g. a single-process driver, or a job variant without the remote-proxy boot). Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/ci.yml | 18 ------------------ 1 file changed, 18 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 38f6074..70c0357 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -103,24 +103,6 @@ jobs: - name: Test run: npm test - # Boundary-oracle mutation ratchet: a totality oracle only protects the system - # if it actually CATCHES a break at its chokepoint. This breaks each boundary's - # chokepoint with a compile-safe mutation and requires its oracle to fail - # (ANCHORED); an oracle that stays green under a broken floor (VACUOUS) — the - # exact rot that let the trust-split oracle pass a literal inversion before it - # was hardened — fails the gate. PR runs only edges whose chokepoint/oracle - # changed (incremental); push to main runs the full backstop. python3 is - # preinstalled on ubuntu-latest; the harness reverts every mutation via git. - - name: Boundary oracle mutation ratchet - if: github.event_name == 'pull_request' || github.ref == 'refs/heads/main' - run: | - if [ "${{ github.event_name }}" = "pull_request" ]; then - git fetch --no-tags --depth=1 origin "${{ github.event.pull_request.base.ref }}" - python3 scripts/invariant-mutation-probe.py --changed FETCH_HEAD - else - python3 scripts/invariant-mutation-probe.py - fi - # Ratchets: no new conventions, no new raw SQL interpolation sites, and the # trust atlas stays in sync with the boundary claims (no managed chokepoint # left off the atlas, no dangling edge).