Skip to content

ci(actions): isolate pull request concurrency - #550

Merged
seonghobae merged 221 commits into
mainfrom
codex/actions-concurrency-audit
Sep 7, 2026
Merged

ci(actions): isolate pull request concurrency#550
seonghobae merged 221 commits into
mainfrom
codex/actions-concurrency-audit

Conversation

@seonghobae

@seonghobae seonghobae commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Scope

Own Noema repository-level workflow concurrency and the handoff between hourly commercial readiness and product development. PR supersession cancellation is separated from push/manual run identity; central runner/control-plane authority, contextual-orchestrator routing, quarantine/security and outbound authority remain foreign-owned.

Current exact authority — 2026-09-07 KST

Protected Noema advanced normally through #548 to GitHub-verified main@e6de53a1c2902cddc09e77a58efb82420cd8f5db. Protected central .github/main remains GitHub-verified 78a4937c684a54ca8e415822c913742f41c6efc4.

The predecessor #550 exact 210fd23f001d4b7ff124480fbbed0c26640b3d12 was current-main converged against protected #536, but #548 then advanced protected ancestry. Its prior exact-head CI/reviewer success and non-terminal Security/image state are historical only.

#550 is now ordinary/non-force semantically converged again. Current exact f2ec2dc6709814070cc3e3d6932ce280aee966db is a two-parent commit with first parent current protected main@e6de53a... and second parent predecessor #550 210fd23.... The tree starts from current protected main and overlays only the 16-path workflow-concurrency delta. Fresh compare is ahead-only with behind_by=0, merge-base exactly current protected main, and effective diff exactly those 16 paths.

This convergence preserves #548 reviewer/source-provenance truth because #548 does not own these 16 paths. It also preserves #536 reviewer-ci.yml noema-core package/install/test/smoke wiring while changing only the concurrency group/cancellation expression in that workflow. No central runner/provider/model/security/outbound authority moved into this lane.

Fresh exact-head verification

Fresh workflows for f2ec2dc6... are:

  • ci 34118284754: queued;
  • reviewer-ci 34118284768: queued;
  • required Security Scan 34118284779: queued;
  • patch-validator-image 34118284782: pending.

Fresh review-thread authority is clean; returned historical findings are resolved. Keep Draft until this unchanged exact head receives terminal-success four-gate evidence and protected/central identities are re-read immediately before normal integration.

#550 remains the workflow-concurrency foundation for overlapping #540. Only after #550 normally integrates may #540 be ordinary/non-force converged while preserving these current workflow semantics together with #540's pinned workerd/esbuild and lock/license delta. No predecessor GREEN transfers.

Summary by CodeRabbit

  • 새 기능

    • 공급자 중립적인 공통 에이전트 패키지를 추가했습니다.
    • 리뷰 결과에 우선순위, 근거 유형, 영향, 재현 명령 및 인라인 수정 제안을 포함할 수 있습니다.
    • 실패한 검증 항목과 코드 위치의 연결이 확인될 때만 리뷰를 통과시킵니다.
    • 상용 준비 상태에 따라 제품 개발 작업을 자동 실행합니다.
  • 개선 사항

    • 열린 PR이 있어도 제품 개발 작업을 진행하되, 변경 파일 충돌과 기준 브랜치 변경을 엄격히 검증합니다.
    • PR 실행만 중복 취소 대상으로 관리해 일반 실행의 안정성을 높였습니다.
  • 문서

    • 에이전트 패키지, 운영 절차 및 리뷰 계약 문서를 업데이트했습니다.

seonghobae and others added 30 commits September 2, 2026 11:11
Adds ADR-0012 recording the architecture decision for unifying Noema
into one shared runtime: three candidates were evaluated
(shared-package, shared-service, contract-only), and shared-package won
on evidence — the only real, current, same-language duplicate is the
pydantic-ai Agent-construction wiring independently built in this
repository's reviewer/agent.py and naruon's noema_agent.py, not the
broader claims the shared-service/contract-only candidates rested on.

Implements the ADR's first concrete PR: extracts the
AsyncOpenAI -> OpenAIChatModel -> OpenAIProvider -> Agent(...) wiring
from reviewer/noema_reviewer into a new packages/noema-core subpackage,
plus a shared NOEMA_PERSONA identity fragment. reviewer/ is the sole
consumer (self-consumption only); no behavior change — the existing
478-test, 100% coverage/docstring reviewer suite passes unmodified, and
noema-core carries its own equivalent 100%/100% suite. Not yet
published to an index; both CI (central-review.yml) and local pytest
reach it via PYTHONPATH, the same mechanism already used for
noema_reviewer itself.

naruon's adoption, the identity/verdict-schema contract grafted from
the contract-only candidate, and publishing noema-core to an index are
scoped as explicit next steps in the ADR, not bundled into this PR.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@seonghobae seonghobae added the type: maintenance Maintenance, build, dependency, or operational upkeep label Sep 6, 2026 — with ChatGPT Codex Connector
…ed-agent-wiring

feat(reviewer): extract shared noema-core package (ADR-0014)
Preserve current protected main and the #548 failed-check/source-binding delta by ordinary non-force merge after #536 integration.
…heck-source-rca

fix(reviewer): bind failed checks to actionable source evidence
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintenance priority: medium Normal-priority or P2 work status: draft Draft pull request type: maintenance Maintenance, build, dependency, or operational upkeep

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant