Skip to content

E4.1.1: Construct the final entry plan - #313

Open
omry wants to merge 1 commit into
pr312from
pr313
Open

omry wants to merge 1 commit into
pr312from
pr313

Conversation

@omry

@omry omry commented Oct 30, 2026 •

Copy link
Copy Markdown
Owner

Construct one private immutable mapped-entry plan from the current locked generation, image, D role, native pending owner and map revision. Reuse existing command and mount resolution, identity closure, syscall policy compiler and startup parser; bind normalized arguments, environment, numeric identities, capability ceilings, active maps, policies and stream facts into the release plan identity.

Reject stale authority, occupied or host-native entries and unqualified streams or credential tuples without effects. Preserve workload mount semantics and command-specific permissions, input/readback isolation and retained reservation history. The constructor performs no I/O or admission and leaves public mapped execution inhibited; lifetime and all-entry integration remain later E slices.

Validation: fresh independent full review, focused map/authority/mount/aliasing regressions, packaging and CI-tool Python tests, targeted vet, applicable shipping/conformance Go suite, linux-amd64 build and CLI smoke. Existing WSL ordinary-tmpfs exclusion and explicit Docker skip remain; exact-head CI and PR review are still required.


Construct one private immutable mapped-entry plan from the current locked generation, image, D role, native pending owner and map revision. Reuse existing command and mount resolution, identity closure, syscall policy compiler and startup parser; bind normalized arguments, environment, numeric identities, capability ceilings, active maps, policies and stream facts into the release plan identity.

Reject stale authority, occupied or host-native entries and unqualified streams or credential tuples without effects. Preserve workload mount semantics and command-specific permissions, input/readback isolation and retained reservation history. The constructor performs no I/O or admission and leaves public mapped execution inhibited; lifetime and all-entry integration remain later E slices.

Validation: fresh independent full review, focused map/authority/mount/aliasing regressions, packaging and CI-tool Python tests, targeted vet, applicable shipping/conformance Go suite, linux-amd64 build and CLI smoke. Existing WSL ordinary-tmpfs exclusion and explicit Docker skip remain; exact-head CI and PR review are still required.
@omry
omry changed the base branch from main to pr312 October 30, 2026 21:54
@omry
omry added this pull request to stack #308 October 30, 2026 21:54
@gitar-bot

gitar-bot Bot commented Oct 30, 2026 •

Copy link
Copy Markdown
Code Review ✅ Approved

🟡 Medium risk · This adds a private mapped-entry planner binding identity maps, capabilities, mounts, and startup facts; errors could yield unsafe launch authority when integrated.

Constructs the final mapped-entry plan from the current locked generation, image, D role, native pending owner, and map revision, binding normalized arguments, identities, capability ceilings, and policies into an immutable release plan identity. No issues found.

Verification

Rules No rules evaluated

Functional validation Not enabled

Set up

For more verification details, comment gitar display:verbose.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply Compact
gitar auto-apply:on         
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Powered by Gitar — free for open source

@omry

omry commented Oct 30, 2026 •

Copy link
Copy Markdown
Owner Author

PR-cycle state — maintained automatically. Do not edit by hand.

Mechanical PR-cycle state (JSON)
{
  "approval": {
    "candidate_revision_fingerprint": "sha256:b28ff3d8c603638b2f73dbb58442702f68168cc133c655eb4a3f6c25d44c50d5",
    "evidence": {
      "attestations": [],
      "candidate_revision_fingerprint": "sha256:b28ff3d8c603638b2f73dbb58442702f68168cc133c655eb4a3f6c25d44c50d5",
      "check_conclusions": [
        {
          "conclusion": "SUCCESS",
          "name": "Bash native evidence checks",
          "run_id": 124344519651,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124344519651,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124333212684
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124336335760
        },
        {
          "conclusion": "SUCCESS",
          "name": "Linux CI checks",
          "run_id": 124341426035,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341426035,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-amd64)",
          "run_id": 124341424996,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341424996,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-arm64)",
          "run_id": 124341425973,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341425973,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-amd64)",
          "run_id": 124341424922,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341424922,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-arm64)",
          "run_id": 124341463327,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341463327,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-amd64)",
          "run_id": 124341472714,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341472714,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-arm64)",
          "run_id": 124341426360,
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341426360,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        }
      ],
      "delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
      "finding_dispositions_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
      "operation_identity": "sha256:6f7214b7b66181b256b538c40a03800c18957661eba657f31ed49f0c7189811b",
      "review_request": {
        "body_digest": "sha256:b325691628e0b70ab92ec10a4982161a8c2b93e70345c1045b8df34081d33e37",
        "id": 6534469487
      },
      "review_result": {
        "body_digest": "sha256:b176bbb54d1faecb83012f6640506502e60ec63a9a12411568005415afcc2927",
        "id": 6534486682
      }
    },
    "evidence_fingerprint": "sha256:2c7916db1f6b2b15319719a0d815f5ed7cae32984cb89c56d951ed0960a2a179",
    "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
    "operation_identity": "sha256:6f7214b7b66181b256b538c40a03800c18957661eba657f31ed49f0c7189811b",
    "review_request_id": 6534469487,
    "review_result_id": 6534486682,
    "status": "approved-evidence-recorded"
  },
  "candidate_revision_fingerprint": "sha256:b28ff3d8c603638b2f73dbb58442702f68168cc133c655eb4a3f6c25d44c50d5",
  "check_conclusions": [
    {
      "conclusion": "SUCCESS",
      "name": "Bash native evidence checks",
      "run_id": 124344519651,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124344519651,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    },
    {
      "conclusion": "SUCCESS",
      "name": "Gitar",
      "run_id": 124333212684
    },
    {
      "conclusion": "SUCCESS",
      "name": "Gitar",
      "run_id": 124336335760
    },
    {
      "conclusion": "SUCCESS",
      "name": "Linux CI checks",
      "run_id": 124341426035,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124341426035,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (darwin-amd64)",
      "run_id": 124341424996,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124341424996,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (darwin-arm64)",
      "run_id": 124341425973,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124341425973,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (linux-amd64)",
      "run_id": 124341424922,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124341424922,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (linux-arm64)",
      "run_id": 124341463327,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124341463327,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    },
    {
      "conclusion": "SUCCESS",
      "name": "Windows host smoke (windows-amd64)",
      "run_id": 124341472714,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124341472714,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    },
    {
      "conclusion": "SUCCESS",
      "name": "Windows host smoke (windows-arm64)",
      "run_id": 124341426360,
      "workflow": {
        "app_id": 15368,
        "attempt": 2,
        "check_suite_id": 111509016485,
        "event": "pull_request",
        "job_id": 124341426360,
        "name_unique": true,
        "run": {
          "conclusion": "success",
          "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
          "number": 3480,
          "status": "completed"
        },
        "run_id": 41134421011,
        "workflow_id": 302865520
      }
    }
  ],
  "check_observations": [
    {
      "checks": [
        {
          "conclusion": "SUCCESS",
          "name": "Bash native evidence checks",
          "run_id": 124344519651,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124344519651",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124344519651,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124333212684,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/runs/124333212684"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124336335760,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/runs/124336335760"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Linux CI checks",
          "run_id": 124341426035,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124341426035",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341426035,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-amd64)",
          "run_id": 124341424996,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124341424996",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341424996,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-arm64)",
          "run_id": 124341425973,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124341425973",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341425973,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-amd64)",
          "run_id": 124341424922,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124341424922",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341424922,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-arm64)",
          "run_id": 124341463327,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124341463327",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341463327,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-amd64)",
          "run_id": 124341472714,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124341472714",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341472714,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-arm64)",
          "run_id": 124341426360,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124341426360",
          "workflow": {
            "app_id": 15368,
            "attempt": 2,
            "check_suite_id": 111509016485,
            "event": "pull_request",
            "job_id": 124341426360,
            "name_unique": true,
            "run": {
              "conclusion": "success",
              "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
              "number": 3480,
              "status": "completed"
            },
            "run_id": 41134421011,
            "workflow_id": 302865520
          }
        }
      ],
      "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
      "id": "sha256:73188339046ad0a9f3c368938bd8e0e63a9b4bd2be5a3394f8418533829e1eb5",
      "required_checks": [
        "Bash native evidence checks",
        "Gitar",
        "Linux CI checks",
        "Target smoke (darwin-amd64)",
        "Target smoke (darwin-arm64)",
        "Target smoke (linux-amd64)",
        "Target smoke (linux-arm64)",
        "Windows host smoke (windows-amd64)",
        "Windows host smoke (windows-arm64)"
      ],
      "status": "success"
    },
    {
      "checks": [
        {
          "name": "Bash native evidence checks",
          "reason": "missing",
          "status": "pending"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124333212684,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/runs/124333212684"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124336335760,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/runs/124336335760"
        },
        {
          "name": "Linux CI checks",
          "run_id": 124333208559,
          "run_status": "in_progress",
          "status": "pending",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124333208559"
        },
        {
          "conclusion": "FAILURE",
          "name": "Target smoke (darwin-amd64)",
          "run_id": 124333208864,
          "run_status": "completed",
          "status": "failure",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124333208864"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-arm64)",
          "run_id": 124333208878,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124333208878"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-amd64)",
          "run_id": 124333208844,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124333208844"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-arm64)",
          "run_id": 124333208810,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124333208810"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-amd64)",
          "run_id": 124333208900,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124333208900"
        },
        {
          "name": "Windows host smoke (windows-arm64)",
          "run_id": 124333208895,
          "run_status": "in_progress",
          "status": "pending",
          "url": "https://github.com/omry/reploy/actions/runs/41134421011/job/124333208895"
        }
      ],
      "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
      "id": "sha256:ac3f59c3100d066863d86d9b095e3f334d64c7a80d59240f899075ac4f784c4b",
      "required_checks": [
        "Bash native evidence checks",
        "Gitar",
        "Linux CI checks",
        "Target smoke (darwin-amd64)",
        "Target smoke (darwin-arm64)",
        "Target smoke (linux-amd64)",
        "Target smoke (linux-arm64)",
        "Windows host smoke (windows-amd64)",
        "Windows host smoke (windows-arm64)"
      ],
      "status": "failure"
    }
  ],
  "delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
  "delivery_deferrals": [],
  "findings": [],
  "pr": {
    "base_ref": "pr312",
    "base_sha": "1d43511526c3b61ed1c086e8411c98f4ab452b69",
    "body_digest": "sha256:89187915cbb8ec23c80550f313e755718b355a856b996ca563872f89bc43f181",
    "body_identity_version": 2,
    "diff_digest": "sha256:a926abeed30f3b1d1b06bcb4c6a3ecc748e62b283fa759b83e056340fb9dafac",
    "head_ref": "pr313",
    "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
    "pr": 313,
    "repository": "omry/reploy",
    "scope_authority": [
      {
        "digest": "sha256:078e63e84d432c2aad03120ca30e40ec4572a8970e6bf6be9d5008608a30f435",
        "path": "docs/MULTI_IDENTITY_D_DESIGN.md"
      },
      {
        "digest": "sha256:f5058bb465d6af9d58b98eb6fde19edd4ed710aff1cc2588173757d37cdbbc58",
        "path": "docs/MULTI_IDENTITY_E_DESIGN.md"
      },
      {
        "digest": "sha256:3ef44a7a0be43648f5df1faad39b16101978662c58c87d6fa8e7409093a58fe9",
        "path": "docs/MULTI_IDENTITY_IMPLEMENTATION_PLAN.md"
      },
      {
        "digest": "sha256:fe188bb8a80f7f235e99b023283749a3a9e3172e4adf70b70b495d80e50e9218",
        "path": "docs/MULTI_IDENTITY_MAIL_RECONCILIATION.md"
      },
      {
        "digest": "sha256:b049714f4a85d0f3fb204615897374377690564627bfcdd03e50c945fb042826",
        "path": "docs/MULTI_IDENTITY_SECURITY_CONTRACT.md"
      }
    ],
    "title_digest": "sha256:9e0cbb4f09761dbb74966e99d33487dad5791da9109b53d55858179bc2083fa0"
  },
  "record_version": 5,
  "review_observations": [],
  "review_requests": [
    {
      "base_established_at": "2026-10-30T21:54:20Z",
      "base_ref": "pr312",
      "base_sha": "1d43511526c3b61ed1c086e8411c98f4ab452b69",
      "body_digest": "sha256:b325691628e0b70ab92ec10a4982161a8c2b93e70345c1045b8df34081d33e37",
      "created_at": "2026-10-30T22:04:04Z",
      "head_sha": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
      "id": 6534469487,
      "kind": "regular-review"
    }
  ],
  "review_results": [
    {
      "base_ref": "pr312",
      "base_sha": "1d43511526c3b61ed1c086e8411c98f4ab452b69",
      "body_digest": "sha256:b176bbb54d1faecb83012f6640506502e60ec63a9a12411568005415afcc2927",
      "commit_id": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
      "id": 6534486682,
      "inline_message_ids": [],
      "request_comment_id": 6534469487,
      "result_kind": "clean",
      "status": "result",
      "submitted_at": "2026-10-30T22:05:09Z",
      "unresolved_thread_ids": []
    }
  ],
  "revision_fingerprint": "sha256:b28ff3d8c603638b2f73dbb58442702f68168cc133c655eb4a3f6c25d44c50d5",
  "rounds": [
    {
      "applied_fix_paths": [],
      "disposition_changes": [],
      "effective_diff_digest": "sha256:a926abeed30f3b1d1b06bcb4c6a3ecc748e62b283fa759b83e056340fb9dafac",
      "finding_ids": [],
      "invariants": [
        "One pure immutable final entry plan binds current locked role/maps/kernel/runtime/mount/stream facts or rejects.",
        "Public mapped activation remains inhibited.",
        "Fresh independent and remote review clean; complete exact-head local validation and every current ci.yml job succeeded."
      ],
      "outcome": "clean",
      "proposed_fix_paths": [],
      "resulting_head": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
      "review_observation_id": null,
      "review_request_id": 6534469487,
      "review_result_id": 6534486682,
      "reviewed_head": "ecdbd19cf61a4618861b15778df5eda8157ec7f1",
      "root_cause": "No source review findings or corrections. Original Darwin AMD64 package timeout retained; one exact-job retry and dependent Bash evidence succeeded on unchanged head. Timing cause not established; no source or timeout change.",
      "round": 1,
      "unresolved_current_slice_findings": 0,
      "unresolved_design_blockers": 0
    }
  ],
  "schema": "awd:swe:pr-cycle-state",
  "version": 2
}

@omry
omry marked this pull request as ready for review October 30, 2026 22:00
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-30T22:05:10.616443Z ecdbd19 Manual request
🔒 Security Review ⚠️ Failed 2026-10-30T22:00:34.163543Z
We couldn’t complete this review. Comment @codex security review to try again.
ecdbd19 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

The account paying for this security review has reached its Codex usage limits. The payer can check the Codex usage dashboard. For personal accounts, using credits requires enabling “Use credits for security reviews” in Code review settings. If you do not manage the paying account, contact this repository's admins.

@omry

omry commented Oct 30, 2026

Copy link
Copy Markdown
Owner Author

@codex review

Exact head: ecdbd19

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. You're on a roll.

Reviewed commit: ecdbd19cf6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@omry omry added the approved PR reviewed and approved label Oct 30, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved PR reviewed and approved

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant