test(ci): forbid docs-only required-gate suppression by seonghobae · Pull Request #543 · ContextualWisdomLab/noema

seonghobae · 2026-09-03T03:05:46Z

Scope

Keep required application CI, reviewer CI and patch-validator image verification active for documentation/root-Markdown changes; this lane is the regression forbidding docs-only required-gate suppression.

Current exact authority — 2026-09-07 KST

Protected Noema is GitHub-verified main@d9b2a956960be72a5370afa50275a405dfbba529; protected central .github/main remains GitHub-verified c9052e607e5f3cc76e73207e7786b21500721b79.

Predecessor #543 e255bf1bece1ebfdd2432c96ee3aa14a7f29a992 was ordinary/non-force restacked with protected main as two-parent commit b14b37ca12b3b6ae1999d250a393997ffff04dec. The restack preserves only this lane's test/ci-exact-head-contract.test.ts delta and inherits protected #526 acquisition changes; the branch ref advanced with force=false.

Fresh exact-head status for unchanged b14b37ca12b3b6ae1999d250a393997ffff04dec has progressed to terminal-success ci 34071938887, reviewer-ci 34071938888, and required Security Scan 34071938889. patch-validator-image 34071938978 remains in progress. Its job 101590775349 is assigned to GitHub-hosted runner 1001730092; exact checkout, stale-head refusal, Trivy/Syft/Grype setup, exact dependency materialization and Buildx are complete, and the exact static image build is still executing. This is build execution, not runner-assignment wait.

The exact head therefore remains non-authorizing. Predecessor GREEN does not transfer, and fresh review-thread authority contains no unresolved finding.

Keep Draft until image verification is also terminal success on this unchanged head and fresh protected/central identities remain unchanged. Any protected-main advance before merge requires another ordinary/non-force convergence and fresh exact-head evidence.

Summary by CodeRabbit

테스트
- 문서 전용 변경에서도 필수 검증 워크플로가 누락되지 않는지 확인하는 검증을 추가했습니다.
- 검증 워크플로 목록에 이미지 패치 검증 워크플로를 포함했습니다.

…image Org-wide CI audit found these workflows lack paths-ignore, triggering full CI on every docs-only push/PR and contributing to org Actions queue backlog. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

coderabbitai · 2026-09-03T03:05:59Z

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 83250cf7-9a89-469f-ac5a-1d27beb1d460

📥 Commits

Reviewing files that changed from the base of the PR and between d9b2a95 and b14b37c.

📒 Files selected for processing (1)

test/ci-exact-head-contract.test.ts

📝 Walkthrough

Walkthrough

필수 검증 워크플로 목록에 patch-validator-image.yml을 추가했습니다. readWorkflow가 문자열 경로를 받도록 변경했습니다. 문서 전용 변경을 제외하는 paths-ignore: 설정을 검사하는 테스트를 추가했습니다.

Changes

CI 검증 계약

Layer / File(s)	Summary
워크플로 목록 및 계약 테스트 `test/ci-exact-head-contract.test.ts`	검증 대상에 `patch-validator-image.yml`을 추가했습니다. `readWorkflow`의 경로 인자 타입을 `string`으로 변경했습니다. 필수 검증 워크플로에 `paths-ignore:` 설정이 없는지 검사합니다.

Estimated code review effort: 1 (낮음) | ~5분

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch chore/paths-ignore-fix

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

seonghobae · 2026-09-04T12:19:31Z

Fresh protected-base repair supersedes the prior exact-head block. Protected main is e1ac9d50f6c646f04be8c137c8acdc7200182fcd. Ordinary two-parent non-force merge 83c319bd661d3173af744dd315f98be4864366b2 preserves the one-test docs-only gate-suppression regression and inherits the protected stateless GitHub installation-token regression. Current exact-head workflows ci 33871921797, reviewer-ci 33871921622, required Security Scan 33871921699, and patch-validator-image 33871921812 are all queued/non-passing. The prior four successful workflows, including the confirmed pre-#546 reviewer false-green, do not transfer. Keep Draft.

…context admission

… integration

This comment was marked as resolved.

Sign in to view

seonghobae added 3 commits September 3, 2026 12:31

test(ci): reject docs-only verification suppression

fa4bb2b

fix(ci): keep application verification mandatory for docs-only changes

def52aa

fix(ci): keep reviewer verification mandatory for docs-only changes

6bc6e59

This comment was marked as resolved.

Sign in to view

fix(ci): keep image verification mandatory for docs-only changes

60b8333

seonghobae changed the title ~~fix(ci): skip docs-only changes for ci, reviewer-ci, patch-validator-image~~ test(ci): forbid docs-only required-gate suppression Sep 3, 2026

seonghobae marked this pull request as draft September 3, 2026 03:34

seonghobae mentioned this pull request Sep 3, 2026

test: canonicalize temp root for secure capability fixtures #539

Merged

Merge protected main into docs-gate regression lane

83c319b

merge: restack #543 on protected reviewer truth

f6c6af5

seonghobae mentioned this pull request Sep 6, 2026

docs: reconcile protected runtime and commercial gap authority #547

Merged

seonghobae added 3 commits September 6, 2026 11:34

merge(context-fabric): restack required-gate regression on protected …

6f09d16

…context admission

merge: converge exact-head gate regression onto protected #533 truth

c9c2d86

merge: converge exact-head gate regression onto protected #552 truth

a6970ca

seonghobae mentioned this pull request Sep 6, 2026

chore(ci): prove and prevent intermittent GitHub Actions runner-assignment stalls #30

Open

19 tasks

merge: restack exact-head gate regression after #527 trust integration

f07679d

seonghobae mentioned this pull request Sep 6, 2026

20억 매각 readiness evidence 확보 #5

Open

16 tasks

merge(main): restack exact-head gate regression after protected trust…

e255bf1

… integration

seonghobae added bug Something isn't working priority: medium Normal-priority or P2 work status: draft Draft pull request type: bug Defect or incorrect behavior labels Sep 6, 2026 — with ChatGPT Codex Connector

merge(restack): rebase #543 onto protected main d9b2a95

b14b37c

seonghobae mentioned this pull request Sep 7, 2026

feat(supply-chain): build, attest, and activate the patch-validator image #66

Open

25 tasks

seonghobae marked this pull request as ready for review September 7, 2026 03:58

seonghobae merged commit 5cd6341 into main Sep 7, 2026
17 of 18 checks passed

seonghobae deleted the chore/paths-ignore-fix branch September 7, 2026 03:58

seonghobae mentioned this pull request Sep 7, 2026

feat(reviewer): extract shared noema-core package (ADR-0014) #536

Merged

seonghobae added a commit that referenced this pull request Sep 7, 2026

merge(main): non-force restack threat-model docs after #543

4c92578

seonghobae mentioned this pull request Sep 7, 2026

docs: fix stale "active PR #80" references in automation-threat-model.md #553

Merged

seonghobae added a commit that referenced this pull request Sep 7, 2026

merge(main): non-force restack workflow concurrency after #543

289fbb0

seonghobae added a commit that referenced this pull request Sep 7, 2026

merge(main): non-force restack durable workflow lane after #543

6cb43c1

This was referenced Sep 7, 2026

feat(workflow): add atomic durable task claim and checkpoint CAS #542

Merged

ci(actions): isolate pull request concurrency #550

Merged

seonghobae added a commit that referenced this pull request Sep 7, 2026

merge(main): converge documentation authority after #543

02b003d

Navigation Menu

Uh oh!

test(ci): forbid docs-only required-gate suppression - #543

test(ci): forbid docs-only required-gate suppression#543
seonghobae merged 13 commits into
mainfrom
chore/paths-ignore-fix

seonghobae commented Sep 3, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Sep 3, 2026 •

edited

Loading

Review failed

Walkthrough

Changes

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

seonghobae commented Sep 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

seonghobae commented Sep 3, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Scope

Current exact authority — 2026-09-07 KST

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review failed

Walkthrough

Changes

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

seonghobae commented Sep 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

seonghobae commented Sep 3, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Sep 3, 2026 •

edited

Loading