2 Commits

Include renames

Author	SHA1	Message	Date
Garry Tanandcapy-ai[bot]	b3e94a3f8d	v1.91.279.0 eval:select exemptions and ETHOS.md registration (#3499), below-floor review rulings (#3504, #3485), Windows curation, GSTA-121 follow-ups (#3515) ... * Eval selection exemptions, review-floor rulings and the GSTA-121 follow-ups Release metadata (NOTICE.md, LICENSE, licenses/**) no longer restores the full paid gate and ETHOS.md is registered under the two prompts that read it (#3499). docs/review-policy.md records the six finding classes #3485 and #3504 ruled below the floor and the review army's lead judgment applies the table; the floor itself is unchanged. The Windows curation moves test/pregate-remote-stamp-only.test.ts to KNOWN_WINDOWS_INCOMPATIBLE (#3485). From GSTA-121: Blast radius in docs/skills.md and the merge-ask template, the 11-digit run-id exemption from pii.phone.e164 after a run word, relative string literals as import-graph edges, and a ubi-runner pack that never tars the live .git. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes Red Team pass 1 (all below the floor): an 11-digit span with a leading 1 after a run word is a US or Chinese national number, not a run id, and reports again; ubi-runner pack removes its temporary repository when it fails and replays branch.* with remote.* so a branch's upstream resolves on the VM; the conservative-refusal example in docs/review-policy.md reads in the refusing direction; the touchfiles header names why ETHOS.md sits only under the two prompts that quote it. Step 6's selection found captain/templates/merge-ask.md as the one unknown dependency of this PR and registered captain/templates/** in FREE_ONLY_PR_FILES (#3499). Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (pass 2) The cmd_pack EXIT trap bakes the temp path in: a set -e failure unwinds the function before the trap runs and a local $tmp is unset there, so the old form leaked the snapshot. The leak test creates TMPDIR where the pack reads it and asserts the failure is the missing index. CHANGELOG examples no longer spell a full national number. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: adversarial review fixes The pack snapshot carries the index's staged blobs as a pack of their own, so a VM write-tree (gstack-wtree) can read a staged file the way the old .git tar allowed; git init runs with --template= and gc.auto=0 and a valueless remote/branch key replays as true. scripts/harness-version.json re-pins scripts/test-pr-profile.ts after the captain/templates/** entry. The run-id exemption reads the same way in the scanner and gstack-post: an 11-digit span after a run word is a run id (the leading-1 exclusion from the Red Team pass contradicted gstack-post's tested contract and the ruling that a run id is not a phone number), with the residual named in the comment, the docs and the CHANGELOG. The #3499 pins move to their own test so the boundary test stays under its default budget. Docs audit: TESTING_INTERNALS names RELEASE_METADATA_FILES and captain/templates/**, docs/captain.md names Blast radius. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (pass 4) The pack's staged-blob list comes from the copied index, holds only blobs staged against HEAD (not every tracked blob), skips gitlinks whose commit the superproject lacks, and dies with its own message when pack-objects fails. The live-checkout test covers a gitlink entry and a valueless remote key replayed as true. CHANGELOG names the staged-blob carry. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (pass 5) The pack's blob list is the copied index's blobs that HEAD's tree lacks, so an intent-to-add entry's empty blob and the stages of an unmerged entry travel too (the HEAD-only diff list dropped both); gitlinks still skip. The live-checkout test adds an intent-to-add entry, which the VM fsck assertion covers. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> --------- Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>	2026-10-27 17:20:55 +00:00
Garry Tanandcapy-ai[bot]	568cd5aa56	v1.91.254.0 pregate: starter policy, benign-finding allowlist, environment vs diff failures, per-run scratch (#3480) ... * pregate: starter policy, benign-finding allowlist, environment failures, per-run scratch A repository with no .gstack/pregate.json now gets a warn (PREGATE_NO_POLICY) with a starter policy printed, instead of PREGATE_NO_LANE on every touched file; gstack-pregate init remains the explicit write. The policy gains an allowlist for benign secrets/pii findings (env.value and secret never allowlistable). Checks that cannot run because of the machine report PREGATE_ENVIRONMENT (incomplete, with kind and evidence) apart from diff failures. Every run writes its scratch under the state root, per run id. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * pregate: rename run-scratch module (strays rule) and map starter.ts to its test Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * pregate literals: match a module as a path fragment, require the constant name for a one-character value Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes guards: an exited guard is the machine's only on exit 127, never from its output; secrets: clear an interrupted run's added-line copies before scanning; environment: one fix table per kind, one ANSI strip, hoisted not-found vocabulary; starter returns its lines; allowlistDigest reuses sha256; stale headers and the PREGATE_INCOMPLETE fix clause updated; tests for the mixed verify branch, disk precedence, allowlist boundaries, a positionless finding, head-policy strictness, run-id edges and the unwritable state root. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * pregate: count a module's full file name without a directory as a consumer consumersOf anchored both the stem and the full basename on a path separator, so run('install.sh') or bash install.sh without a directory stopped counting for a multi-character old value. Only the bare stem needs the separator; the full file name is specific on its own. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * pregate: a diff cannot clear itself as an environment failure; a taken --run id gets its own directory Adversarial review of the environment classifier and the scratch layout: - exit 127 and 'command not found' are missing-binary only when the command's own binary is off PATH (runner, guard and remote gate alike); a script the diff controls that exits 127 is the diff's failure - a local lane with no test summary is classified from its output only when the runner was not seen starting a test file; a remote gate only from its first 40 lines, before any test output could stream - environment.proof records launch (certain) or output (inferred); an output-inferred cause never says 'the diff is not at fault', its line says '(inferred from output)', and verify names such checks - a runner killed by a signal is PREGATE_INCOMPLETE, not missing-binary - a --run id whose directory exists takes <id>-2 .. -9 instead of sharing (and truncating) a live run's logs - engine.* findings are never allowlistable; a pattern entry the scanner gave no position for is reported as not tested instead of silently inert - docs: synopsis --run, no-policy lanes wording, verify's code list, guard exit 127 carve-out, PREGATE_SECRETS allowlist pointer, scratch Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs(pregate): PREGATE_INCOMPLETE names a signal-killed runner; CHANGELOG lists every doc edit Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> --------- Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>	2026-10-26 20:17:41 +00:00