Phase A: close deterministic evolution kernel gate

.github/workflows/ci.yml

@@ -7,54 +7,69 @@ on:
     branches: [main]
 
 jobs:
-  backend:
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
+  kernel:
+    name: kernel-${{ matrix.machine }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - runner: ubuntu-24.04
+            machine: x86_64
+          - runner: macos-14
+            machine: arm64
+    runs-on: ${{ matrix.runner }}
+    timeout-minutes: 20
     steps:
       - uses: actions/checkout@v4
-
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
-
       - uses: astral-sh/setup-uv@v5
         with:
           enable-cache: true
-          cache-dependency-glob: "pyproject.toml"
-
-      - name: Create venv and install deps
+          cache-dependency-glob: "uv.lock"
+      - name: Assert runtime architecture
+        env:
+          EXPECTED_MACHINE: ${{ matrix.machine }}
+        run: python -c "import os, platform; actual = platform.machine(); expected = os.environ['EXPECTED_MACHINE']; assert actual == expected, f'expected {expected}, got {actual}'"
+      - run: uv sync --extra dev --frozen
+      - run: uv lock --check
+      - run: uv run ruff check antelab tests scripts
+      - run: uv run mypy antelab scripts
+      - run: uv run pytest -q
+      - name: Verify 500-tick golden repeatability
+        shell: bash
         run: |
-          uv venv .venv --python 3.12
-          uv pip install -e ".[dev]" --python .venv/bin/python
+          tmp_dir="$(mktemp -d)"
+          trap 'rm -rf "$tmp_dir"' EXIT
+          uv run antelab run experiments/foraging-genesis.yaml --ticks 500 --output "$tmp_dir/run-a.json"
+          uv run antelab run experiments/foraging-genesis.yaml --ticks 500 --output "$tmp_dir/run-b.json"
+          cmp "$tmp_dir/run-a.json" "$tmp_dir/run-b.json"
+          uv run python - "$tmp_dir/run-a.json" tests/golden/foraging-genesis-500.json <<'PY'
+          import hashlib
+          import json
+          import sys
+          from pathlib import Path
 
-      - name: Ruff check
-        run: uv run ruff check antelab/ tests/
-
-      - name: Pytest
-        run: uv run pytest tests/
-
-  frontend:
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          cache: npm
-          cache-dependency-path: frontend/package-lock.json
-
-      - name: Install deps
-        run: npm ci
-        working-directory: frontend
-
-      - name: Typecheck
-        run: npm run typecheck
-        working-directory: frontend
-
-      - name: Build
-        run: npm run build
-        working-directory: frontend
+          artifact_path, golden_path = (Path(value) for value in sys.argv[1:])
+          artifact_bytes = artifact_path.read_bytes()
+          artifact = json.loads(artifact_bytes)
+          golden = json.loads(golden_path.read_text(encoding="utf-8"))
+          actual = {
+              "artifact_sha256": hashlib.sha256(artifact_bytes).hexdigest(),
+              "config_version": artifact["config"]["schema_version"],
+              "engine_version": artifact["engine_version"],
+              "final_checksum": artifact["final_checksum"],
+              "ticks": artifact["ticks_completed"],
+          }
+          if actual != golden:
+              raise SystemExit(f"golden mismatch: actual={actual!r} expected={golden!r}")
+          PY
+      - name: Build and install wheel smoke
+        shell: bash
+        run: |
+          uv build --out-dir "$RUNNER_TEMP/dist"
+          uv venv "$RUNNER_TEMP/wheel-venv" --python 3.12
+          uv pip install --python "$RUNNER_TEMP/wheel-venv/bin/python" "$RUNNER_TEMP"/dist/*.whl
+          "$RUNNER_TEMP/wheel-venv/bin/antelab" --help
+          "$RUNNER_TEMP/wheel-venv/bin/antelab" run experiments/foraging-genesis.yaml --ticks 10 --output "$RUNNER_TEMP/installed-smoke.json"