Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 0 additions & 18 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -103,24 +103,6 @@ jobs:
- name: Test
run: npm test

# Boundary-oracle mutation ratchet: a totality oracle only protects the system
# if it actually CATCHES a break at its chokepoint. This breaks each boundary's
# chokepoint with a compile-safe mutation and requires its oracle to fail
# (ANCHORED); an oracle that stays green under a broken floor (VACUOUS) — the
# exact rot that let the trust-split oracle pass a literal inversion before it
# was hardened — fails the gate. PR runs only edges whose chokepoint/oracle
# changed (incremental); push to main runs the full backstop. python3 is
# preinstalled on ubuntu-latest; the harness reverts every mutation via git.
- name: Boundary oracle mutation ratchet
if: github.event_name == 'pull_request' || github.ref == 'refs/heads/main'
run: |
if [ "${{ github.event_name }}" = "pull_request" ]; then
git fetch --no-tags --depth=1 origin "${{ github.event.pull_request.base.ref }}"
python3 scripts/invariant-mutation-probe.py --changed FETCH_HEAD
else
python3 scripts/invariant-mutation-probe.py
fi

# Ratchets: no new conventions, no new raw SQL interpolation sites, and the
# trust atlas stays in sync with the boundary claims (no managed chokepoint
# left off the atlas, no dangling edge).
Expand Down
Loading