From 3cb53ab310d0eed03bf866a91f25877c6149b403 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 21 Aug 2026 10:59:17 +0200 Subject: [PATCH] docs: record green hardening CI [skip ci] --- WORK-RECORDS.md | 2 +- .../GLAS-WP-0005-sandbox-boundary-runtime-hardening.md | 7 ++++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 3dcc50d..0a13cbd 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -42,7 +42,7 @@ | task | GLAS-WP-0005-T01 | done | — | workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md | | task | GLAS-WP-0005-T02 | done | — | workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md | | task | GLAS-WP-0005-T03 | done | — | workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md | -| task | GLAS-WP-0005-T04 | progress | — | workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md | +| task | GLAS-WP-0005-T04 | done | — | workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md | | task | GLAS-WP-0005-T05 | wait | — | workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md | | intake | GLAS-IN-0001 | done | blue | docs/intakes/residuals.md | | intake | GLAS-IN-0002 | todo | red | docs/intakes/residuals.md | diff --git a/workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md b/workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md index 4e964d1..4e2c8cf 100644 --- a/workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md +++ b/workplans/GLAS-WP-0005-sandbox-boundary-runtime-hardening.md @@ -107,7 +107,7 @@ for direct and optional dependencies. ```task id: GLAS-WP-0005-T04 -status: progress +status: done priority: high ``` @@ -115,13 +115,14 @@ Make Forgejo CI check out the repository, install the project and its test dependencies, run the full unit suite, and run `glas-harness profiles`. Retain only routing probes that still provide operational value. -**2026-08-21 progress:** replaced the two echo-only jobs with the estate's +**Completed 2026-08-21:** replaced the two echo-only jobs with the estate's archive-checkout pattern, explicit Python/sand-boxer/project installation, the full test suite, and packaged catalog validation. Run `#45` was superseded and canceled; run `#46` exposed five tests that incorrectly relied on the host's global Git author identity. The same job reproduced this cleanly in the runner's `node:20-bookworm` image, and the test repositories now configure a local, -non-deliverable test identity. A green published rerun remains required. +non-deliverable test identity. Forgejo Actions run `#47` passed on published +commit `994b2da`. ## Task: Re-prove the sandbox boundary and close evidence