294bbe7b9b
The reachability gap turns by PROMOTION for the first time: 15 -> 14. PR-3b's
earlier turn was by deletion, which is free. This one costs 22.1s on every push,
which is exactly why it is a decision rather than a default.
THE RECOMMENDATION WAS RE-DERIVED, NOT EXECUTED — and it did not survive as
written. PR-4b recommended `teaching` on the strength of G-22:
test_ratification_ceremony.py was red on main, in `teaching`, run by no gate.
That hole was already closed a different way — G-22's fix promoted that single
file into smoke. So `teaching` would have added 9 net-new files, NONE with a
demonstrated escape, and promoting on a justification that has already been
spent is precisely the failure this arc exists to close.
Promoted on a stronger, doctrinal basis instead.
tests/test_epistemic_invariants.py enforces AGENTS.md's "Teaching and mutation
safety" non-negotiables in substance — INV-22/INV-23: an unmarked proposal and
an unmarked reviewed example default to SPECULATIVE, the status enum has exactly
its four positions, a pack-mutation proposal carries no hardening flag. Durable
corpus mutation is the one irreversible thing in this system, and the suite
guarding it ran on no pre-merge gate. That justification does not require an
incident to have happened yet, which makes it the better one.
Measured: 22.1s / 122 tests across 9 net-new files (the tenth was already on the
gate). Both invocation sites updated, GATE_SUITES extended, `teaching` removed
from UNREACHABLE_BASELINE in the same edit, ratchet lowered <= 15 to <= 14 —
the both-directions discipline that has caught this author twice.
A HOLLOW SPOT IN PIN 3 ITSELF, found by sabotage-testing the promotion rather
than trusting it. _suites_invoked_by_gate_tiers() takes the UNION of
scripts/hooks/pre-push and scripts/ci/local-ci.sh, so a suite present in either
satisfies it. Removing `teaching` from local-ci.sh alone PASSED SILENTLY: the
two scripts could drift from each other invisibly while local-ci.sh states in
prose that it runs "the same four steps as scripts/hooks/pre-push". A developer
running one would get coverage the other advertises and does not deliver.
Closed by test_the_two_gate_scripts_invoke_the_same_suites, scoped to the
numbered (n/m) gate steps — a discriminator both files already use — so it reads
the gate tier without parsing shell control flow. The identical sabotage now
fires. Verified in three directions: removed from one script (fires, and did not
before), removed from both (the pre-existing assertion fires), restored (green).
THIS IS NOT THE CI-PARITY PIN N-9 KILLED, and the distinction is recorded at the
assertion site so it cannot be re-litigated a third time. That one asserted
TEST_SUITES["smoke"] == smoke.yml and was reverted in 50fa287d because
AGENTS.md:280 makes GitHub Actions billing-locked dead signals — parity with a
dead signal buys nothing. Both scripts here are LIVE local merge bars.
Gate is now four steps: smoke + warmed_session + deductive + teaching.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Wcw2pnMBwyvmNyQg4uPEt4
92 lines
4.3 KiB
Bash
Executable file
92 lines
4.3 KiB
Bash
Executable file
#!/bin/sh
|
|
# CORE local-first pre-push gate (weekly-audit T13, 2026-07-22).
|
|
#
|
|
# Automates the AGENTS.md §Local-First CI Validation Protocol "Pre-Push Gate":
|
|
# (1) the `smoke` suite — the merge bar itself, and a SUPERSET of the
|
|
# paths smoke.yml names (corrected 2026-07-28, N-9: this line used to
|
|
# read "exact CI-gate parity", which has never been true and is not the
|
|
# goal. AGENTS.md §277/§280 make the workflows secondary observability
|
|
# and GitHub Actions billing-locked dead signals, so this suite is the
|
|
# source and is deliberately broader. The invariant that IS enforced —
|
|
# smoke.yml never names a path this suite lacks — is pinned by
|
|
# tests/test_cli_test_suites.py::test_cli_smoke_suite_covers_ci_smoke_gate),
|
|
# (2) the warmed_session consistency lane pin — catches the T13
|
|
# telemetry-consistency regression class, which `smoke` does NOT cover
|
|
# (the #96 fail-closed resolve + #97 morph override escaped smoke and
|
|
# surfaced only in the warmed_session lane), and
|
|
# (3) the `deductive` suite — added 2026-07-25.
|
|
#
|
|
# On (3): this suite was an ASYNC CI concern while deduction serving was a
|
|
# capability under development. ADR-0256 ratified the flag ON by default, which
|
|
# makes it a regression suite for a LIVE serving path — a push that breaks
|
|
# deduction serving would otherwise clear this gate and sit broken on main for
|
|
# the window between push and CI. The register-axis regression (red on main for
|
|
# the 2026-07-22..24 window, masked by an unrelated flake label) is the direct
|
|
# precedent for that failure mode.
|
|
#
|
|
# It was added WHOLE rather than as a subset because the cost measurement said
|
|
# it could be: 285 tests in ~29s, against smoke's 216 in ~62s. There is no
|
|
# coverage trade recorded here because none was needed.
|
|
#
|
|
# The full ~12k fast-lane stays an ASYNC CI concern by design — this gate is
|
|
# deliberately targeted so it prevents the regression class without gridlocking
|
|
# the push cycle.
|
|
#
|
|
# Install (per clone): scripts/hooks/install.sh (sets core.hooksPath).
|
|
# Emergency bypass: git push --no-verify (defeats the gate — avoid).
|
|
|
|
set -u
|
|
|
|
z40="0000000000000000000000000000000000000000"
|
|
read_any=0
|
|
only_deletes=1
|
|
while read -r _local_ref local_sha _remote_ref _remote_sha; do
|
|
read_any=1
|
|
if [ "${local_sha}" != "${z40}" ] && [ -n "${local_sha}" ]; then
|
|
only_deletes=0
|
|
fi
|
|
done
|
|
|
|
# Fail-closed: run the gate unless we positively identified a deletion-only push.
|
|
if [ "${read_any}" -eq 1 ] && [ "${only_deletes}" -eq 1 ]; then
|
|
echo "[pre-push] deletion-only push — nothing to validate."
|
|
exit 0
|
|
fi
|
|
|
|
echo "[pre-push] CORE local-first gate: smoke + warmed_session lane pin + deductive + teaching"
|
|
|
|
echo "[pre-push] (1/4) smoke suite (core test --suite smoke) ..."
|
|
if ! uv run core test --suite smoke -q; then
|
|
echo "[pre-push] BLOCKED: smoke suite failed. Fix before pushing." >&2
|
|
echo "[pre-push] (emergency bypass, discouraged: git push --no-verify)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[pre-push] (2/4) warmed_session consistency lane ..."
|
|
if ! uv run python -m pytest tests/test_warmed_session_lane.py -q; then
|
|
echo "[pre-push] BLOCKED: warmed_session lane failed (T13 regression class)." >&2
|
|
echo "[pre-push] (emergency bypass, discouraged: git push --no-verify)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[pre-push] (3/4) deductive suite (core test --suite deductive) ..."
|
|
if ! uv run core test --suite deductive -q; then
|
|
echo "[pre-push] BLOCKED: deductive suite failed — deduction serving is a" >&2
|
|
echo "[pre-push] LIVE capability (ADR-0256), not an experiment." >&2
|
|
echo "[pre-push] (emergency bypass, discouraged: git push --no-verify)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[pre-push] (4/4) teaching suite (core test --suite teaching) ..."
|
|
if ! uv run core test --suite teaching -q; then
|
|
echo "[pre-push] BLOCKED: teaching suite failed — durable mutation is governed by" >&2
|
|
echo "[pre-push] AGENTS.md non-negotiables (INV-21..INV-30). An unmarked" >&2
|
|
echo "[pre-push] proposal or reviewed example defaulting to anything but" >&2
|
|
echo "[pre-push] SPECULATIVE is a corpus-truth defect, and corpus mutation" >&2
|
|
echo "[pre-push] is the one thing here that is irreversible." >&2
|
|
echo "[pre-push] (emergency bypass, discouraged: git push --no-verify)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[pre-push] gate PASSED — push proceeding."
|
|
exit 0
|