Repository navigation
Cut over World regression enforcement to the product-owned gate #166
Description
🤖 Generated by the Agentic Engineer
Delivered outcome
World regression enforcement now uses the cross-product reviewed-base runner and World's fixed local admission action. The existing GitHub Actions identity supplies the executed result; candidate-controlled validator bytes cannot supply the trusted implementation. The old singleton association is retired through its retained, non-deleting managed record.
The final source cleanup is delivered by #763 (5df28658db1fcb1484d5358d0580a3853e653ecc) and World #1557 (c79e5804b6c9f12ae3479f50521592f9563fca32). The separate shared-CI repair #765 is merged and main CI, release, CD, push and quality checks have succeeded.
Completed acceptance
- Retain the maintainer's 2026-10-24 planning decoupling: World #1495 remains open, with its runtime target and safety criteria unchanged.
- Add shared-runner enrollment and the repository-bound executed-result requirement additively, while the established source remains required.
- Deliver reviewed protected merges and signed configuration publication; verify reconciliation and complete native bindings.
- Observe complete, nonzero evaluation from the immutable reviewed base at the exact native candidate/run/attempt.
- Preserve executable validator/workflow, omission/masking, identity, duplicate-name, containment and cleanup refusal controls; prove the real candidate validator cannot replace the reviewed executor.
- Retire only the singleton association after native overlap proof, retaining its non-deleting lifecycle and unrelated rules.
- Repeat real positive and refusal controls after retirement, with the trusted result still required.
- Remove the unused central World source after complete consumer/source closure, and update catalogue documentation and tests.
Fresh complete native readback at 2026-10-25 20:50 UTC confirms the retained old World record is disabled at its observed current generation, has no workflow association or bypass, and the shared runner plus repository-bound executed result remain required. All 49 unrelated policy appearances match the pre-retirement baseline; the other two consumers remain protected.
After retirement, the real positive control passed all 187 trusted scenes. The negative control used a candidate no-op validator, but the reviewed action still executed and rejected the candidate parser error. The full source CI retains scene omission, masking, identity, duplicate-name, containment, deadline and cleanup controls. These are distinct evidence layers; this does not claim that every mutation variant was separately submitted as a native control PR.
World #746 is completed. No additional App, broader credential authority, imperative ruleset change or CI-performance waiver is part of this delivery.
Metadata
Metadata
Assignees
Labels
Type
Fields
Projects
- Status
Activity
[-]Require trusted World at Ruin regression workflow[/-][+]Cut over World regression enforcement to the product-owned gate[/+]devantler commentedon Aug 20, 2026
Maintainer supersession — safe migration back
The original creation objective completed, but the ownership decision is superseded by the boundary merged in devantler-tech/monorepo#2944 at
e0961399e8186435505c43d98d4fa7f58dce0bd1. World at Ruin-specific workflows and policy now belong with World at Ruin unless a second real repository demonstrates the same product-neutral contract.Current state is working and remains untouched during the replacement slice: organization ruleset
21102220stays active with no bypass actors, and its Actions source stays active. This issue is reopened to own only the reviewed cutover after World Epic devantler-tech/actions#745 and additive gate task World devantler-tech/actions#746.Ordered cutover
21102220active so both gates are required. No World workflow or policy logic moves into this repository.evaluateordisabled, according to the live provider contract) and verify the World-owned check remains blocking.Acceptance gates
No ruleset mutation is being made in this issue update.
chore: agent-claim #166 nonce=8ce809c7409e6951ce4851392d23669e
chore: agent-claim #166 nonce=dfdb95aff29b19343692d451925e21dd
devantler commentedon Oct 24, 2026
The cutover remains blocked by World at Ruin #746 and #1495, both independently re-read as open. The runtime prerequisite was already in this issue’s delivery criteria but was missing from its native dependency list. I added that link, preserved the existing #746 dependency, and removed the redundant
blockedlabel in accordance with the portfolio’s issue-tracking contract.Resume after complete representative feedback is proven below 900 seconds, or after an explicit scoped planning-decoupling decision, then complete the retained overlap and refusal controls before retiring the singleton source. This tracking correction does not complete any delivery criterion or authorize an enforcement change.
devantler commentedon Oct 25, 2026
Completed: the final reviewed source cleanup, normal protected merge and all post-merge workflows are verified.
The final source cleanup is delivered by #763 (
5df28658db1fcb1484d5358d0580a3853e653ecc) and World #1557 (c79e5804b6c9f12ae3479f50521592f9563fca32). The separate shared-CI repair #765 is merged and main CI, release, CD, push and quality checks have succeeded.Fresh complete native readback at 2026-10-25 20:50 UTC confirms the retained old World record is disabled at its observed current generation, has no workflow association or bypass, and the shared runner plus repository-bound executed result remain required. All 49 unrelated policy appearances match the pre-retirement baseline; the other two consumers remain protected.
After retirement, the real positive control passed all 187 trusted scenes. The negative control used a candidate no-op validator, but the reviewed action still executed and rejected the candidate parser error. The full source CI retains scene omission, masking, identity, duplicate-name, containment, deadline and cleanup controls. These are distinct evidence layers; this does not claim that every mutation variant was separately submitted as a native control PR.
World #1495 and World #1397 remain independent unfinished performance work; no performance or warm-reuse outcome is inferred from this ownership cleanup.