Repository navigation
v0.43.0 tail: REQ-MUTANTDEBT-001 verified, the deposit refuses a malformed tool entry (#267), #256/#272/#273 planned - #281
Merged
Merged
Conversation
…systest (#267) An edit in #266 fused two entries; the deposit would have dropped the varve-producer payload and the systest's live-pin check (which read two fields) passed. tools/tarball-entry.sh now decides an entry's shape (field count, plain names, a whole version, a platform token in any template). build-deposit-spec.sh checks every entry before fetching anything, and the live-pin check uses the same function. New negative control: fuse two live entries; the validator and the assembler must refuse it, the assembler before any gh call. Its first run caught a loose version check (`v0.35.0spar` passed), now strict. deposit-layer.sh passes locally, all three negative controls included. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019TNtfRjLNhEz82G2ggeeNu
REQ-ROLLBACK-002 (v0.44.0): a digest-pinned layer its line still supports installs on a shared machine (gale's CI, #256). REQ-OWNYAML-001 and REQ-SHIMFALLBACK-001: backlog, each needing a maintainer decision recorded in its description. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019TNtfRjLNhEz82G2ggeeNu
REQ-ROLLBACK-002 (v0.44.0): digest-as-consent. REQ-SHIMFALLBACK-001 (v0.44.0): refuse, but list the options. REQ-OWNYAML-001 (v0.45.0): all of varve's own inputs through rivet-yaml, with a TOML transition. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019TNtfRjLNhEz82G2ggeeNu
Run 39736152885 at e7019ad completed all four shards inside the cap, each at its planned count (314/300/299/32): 945 mutants, 111 missed, read MEASURED by the report job on the pool. VER-MUTANTDEBT-001 and the v0.43.0 review record say so; the v0.43.0 changelog moves it to the verified list and adds the ureq cap and the #267 entry-shape check. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019TNtfRjLNhEz82G2ggeeNu
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The last PR before the v0.43.0 tag.
REQ-MUTANTDEBT-001 → verified
Scheduled run 39736152885, on main at e7019ad, is the first scheduled run of the merged workflow:
VER-MUTANTDEBT-001 and the review record VER-REVIEW-V0-43-0 are updated.
rivet verifyaccepted it on its evidence, and the v0.43.0 changelog now lists it as verified.#267: one validator for a
TARBALL_TOOLSentrytools/tarball-entry.shdecides an entry's shape: field count, plain names, a whole version, and a platform token in any template.build-deposit-spec.shchecks every entry before fetching anything, and the system test's live-pin check uses the same function.ghcall. Its first run caught a loose version check (v0.35.0sparpassed), which is now strict.tools/systest/deposit-layer.shpasses, with all three of its negative controls.Planned (rivet only)
All three decisions are the maintainer's, recorded on the artifacts and on the issues.
Local gates
1491 workspace tests, fmt, clippy,
rivet validate, trace-gate, claim-check, review-check (v0.43.0 fully covered), the tool tests,cargo deny, no-key-on-disk, and the deposit system test.Closes #267.
🤖 Generated with Claude Code
https://claude.ai/code/session_019TNtfRjLNhEz82G2ggeeNu