Skip to content

Add pinned-notice and dependency-inventory drift guards - #2829

Merged
joeharris76 merged 6 commits into
developfrom
feat/policy-and-dependency-drift-guards
Oct 12, 2026
Merged

joeharris76 merged 6 commits into
developfrom
feat/policy-and-dependency-drift-guards

Conversation

@joeharris76

Copy link
Copy Markdown
Collaborator

Teach scripts/check_comment_cleanup_scope.py a --check-drift mode that
fails when a file carrying a digest pin is modified without updating
the pin in quality/comment-cleanup-scope.json, and expose it through
make check-comment-scope and make comment-policy-check.

Add a pre-commit hook running parse_deps.py --check so pyproject.toml
changes without a regenerated dependency-audit-raw.md fail before push.

@benchbox-oracle benchbox-oracle Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oracle-review-shadow: failure for 9a25578a3d7727d8c6394bd3fbe8501f1664502a

This result supersedes those for earlier heads; their open review threads still apply.

Tier: medium-high (180 code lines exceed 150; touches 2 areas).

Decision: SHIP WITH FIXES.

Reviewer: sol (codex gpt-6.1-sol, effort medium).

The notice drift guard needs required CI wiring before merge. Reviewed the supplied diff and relevant head files using read-only commands; no tests were run.

Comment thread Makefile Outdated

@benchbox-oracle benchbox-oracle Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oracle-verdict: pending for 27ea9e4d6b09df0aa81176e79724b9f23a4fd915

This result supersedes those for earlier heads; their open review threads still apply.

Tier: medium-high (225 code lines exceed 150; touches 3 areas).

Scope: files changed since head 9a25578a3d7727d8c6394bd3fbe8501f1664502a was reviewed.

Reviewers not available

  • sol: absent (error)
  • luna: absent (error)
  • muse: absent (invalid)
  • sonnet: skipped: same family as the author (claude)
  • agy: disabled (CI authentication and quota output are not yet calibrated, and the workflow has no agy job)

@benchbox-oracle benchbox-oracle Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oracle-verdict: failure for 27ea9e4d6b09df0aa81176e79724b9f23a4fd915

This result supersedes those for earlier heads; their open review threads still apply.

Tier: medium-high (225 code lines exceed 150; touches 3 areas).

Decision: SHIP WITH FIXES.

Reviewer: muse (muse muse-spark-1.3-contributor, effort medium).

Prior drift-guard defect D1 is fixed: the drift check now runs in the required comment-policy CI job and in make. One must-fix gate defect remains: the new CI drift step falls back to executing the candidate revision's checker when the base lacks it, letting untrusted PR code decide the gate instead of failing closed like the adjacent comment-policy step.

Verified fixed: D1. Resolve their review threads.

Scope: files changed since head 9a25578a3d7727d8c6394bd3fbe8501f1664502a was reviewed.

Reviewers not available

  • sol: absent (error)
  • luna: absent (error)

Comment thread .github/workflows/ci.yml Outdated
Teach scripts/check_comment_cleanup_scope.py a --check-drift mode that
fails when a file carrying a digest pin is modified without updating
the pin in quality/comment-cleanup-scope.json, and expose it through
make check-comment-scope and make comment-policy-check.

Add a pre-commit hook running parse_deps.py --check so pyproject.toml
changes without a regenerated dependency-audit-raw.md fail before push.
Addresses oracle review threads on #2829: the pinned-notice drift step now exits 1 when the trusted base checker is absent (no candidate-code fallback) and skips fast when no pinned inputs changed; pinned-notice drift comparison is scoped to LICENSE and COPYRIGHT.md.
Re-ran the prescribed replay at the remediation tree: 112 passed. Updates replay_sha, replay_scope, and recorded counts; prior stamp referenced a feature-branch commit unreachable from develop.
@joeharris76
joeharris76 force-pushed the feat/policy-and-dependency-drift-guards branch from 27ea9e4 to 202bff7 Compare October 12, 2026 03:36
@joeharris76
joeharris76 enabled auto-merge (squash) October 12, 2026 03:36

@benchbox-oracle benchbox-oracle Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oracle-verdict: success for 202bff7bf416df4737fdf5d8e1ec8dd41cf917e9

This result supersedes those for earlier heads; their open review threads still apply.

Tier: medium-high (249 code lines exceed 150; touches 3 areas).

Decision: SHIP.

Reviewer: muse (muse muse-spark-1.3-contributor, effort medium).

The pinned-notice drift gate now fails closed: the CI step extracts and runs only the base-revision checker and exits 1 when it is missing, and the new parity test proves the candidate checker never executes in either the missing or unsupported case. No new must-fix defects found in the four changed files.

Verified fixed: D2. Resolve their review threads.

Scope: files changed since head 27ea9e4d6b09df0aa81176e79724b9f23a4fd915 was reviewed.

auto-merge was automatically disabled October 12, 2026 04:34

Pull request was closed

@joeharris76 joeharris76 reopened this Oct 12, 2026
@joeharris76
joeharris76 enabled auto-merge (squash) October 12, 2026 04:34
@joeharris76
joeharris76 merged commit 65b1443 into develop Oct 12, 2026
130 of 135 checks passed
@joeharris76
joeharris76 deleted the feat/policy-and-dependency-drift-guards branch October 12, 2026 05:05

This branch was successfully deployed

1 active deployment
oracle — 202bff7b Deployed Oct 12, 2026 by joeharris76 via post #329
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant