Skip to content

Preserve live selection on refused rebuild and bind CLI golden scene - #230

Merged
adrianwebb merged 10 commits into
stagingfrom
codex/refusal-safe-development-rebuild
Sep 26, 2026
Merged

adrianwebb merged 10 commits into
stagingfrom
codex/refusal-safe-development-rebuild

Conversation

@adrianwebb

@adrianwebb adrianwebb commented Sep 26, 2026 •

Copy link
Copy Markdown
Contributor

Outcome

Preserve the live development selection when protected-manager restart/rebuild refuses an active Kata claim. Bind the regression and eight existing golden CLI boundaries into the owner scene.

Work authority

Contributor mode (select one):

  • Human-authored
  • Agent-assisted under human authority
  • Agent-authored under human authority

Plan

Reproduce manager refusal, move selection retirement after protected stop, bind an exact scene test, and integrate current staging without discarding existing allocation/lifecycle assertions. Complete locally; Actions pending.

Changes and commits

562d18b adds refusal guard and owner guarantee/scene bindings. 8e9414f integrates current staging lifecycle repairs. df2f369 preserves allocation/host-envelope tests in focused owned files and retains protected-manager guest import custody.

Verification

Actual public CLI red→green: refused restart AND rebuild return failure without switching live to released; normal lifecycle recovery still passes.
Five focused tests passed; file-length and architecture checks passed; build:dist passed.
CLI component scene cli-component-regression-20260926-j passed all nine bound checks. Component evidence is not full SDK golden acceptance.
36 canonical-client/development tests plus five split-focused tests passed. Strict TypeScript checking passes. CI initially reproduced an obsolete exact SDK pin lacking --input; the workflow now consumes accepted SDK artifact affa0623b8af92cde577f3b8ab685c1b61f2c8cb. No contract assertions were weakened. Automated PR checks remain authoritative.

Risk and rollback

No schema migration, release, or tags. Protected-manager refusal remains mandatory. Revert this PR to return previous CLI behavior; do not interrupt active Kata claims. Autostashed pre-integration working changes remain recoverable locally until reconciliation is verified.

Completion summary

Refusal defect reproduced and fixed; current SDK workday is separate and still running. No SDK full pass claimed. Merge only after required checks.

Submission checklist

  • The change is bounded to the stated work item and target repository.
  • Exact base and head refs are recorded and the branch is ready for review.
  • Verification and compatibility evidence are recorded above.
  • No plaintext secrets, credentials, machine state, or unrelated residue are included.
  • Plan, status, commits, and completion summary form a complete durable record.
  • Rollback or recovery steps are documented and executable.

Final CI integration repair: obsolete thin-package assertion forbidding all guarantees is replaced by stricter metadata-only checks (three canonical YAML declarations, exact owner test bindings, no executable guarantee runtime). Eight package contract tests pass. No legacy implementation path restored.

@adrianwebb
adrianwebb merged commit 84ca95c into staging Sep 26, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant