Make S1 handoff read-only by default
All checks were successful
CI Smoke / source-contract (push) Successful in 8s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018
This commit is contained in:
codex 2026-08-23 12:41:23 +02:00
parent 24b799ec59
commit 40e295e3bd
16 changed files with 637 additions and 46 deletions

View file

@ -15,6 +15,7 @@ from pathlib import Path
from typing import Any
from baseline_contract import load_spec, profile_hostvars, validate_repo_consumers
from handoff_contract import validate_repository_surface
from inventory_contract import load_inventory
from s1_receipt import validate_receipt
@ -110,6 +111,7 @@ def main() -> int:
inventory = load_inventory(inventory_path)
baseline = load_spec(spec_path)
validate_repo_consumers(ROOT)
validate_repository_surface(ROOT)
hosts = _selected_hosts(inventory, args.host)
for host in hosts:
profile_hostvars(baseline, host["baseline_profile"])