coulomb/user-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Install runtime and test dependencies in exact-source journey CI
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Account journey acceptance / journeys (push) Successful in 1m5s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 02:16:02 +02:00
parent 1bb7cacc98
commit ac8b04edc7
9 changed files with 130 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

24
workplans/ADHOC-2026-10-11.md
View file

@ -1,7 +1,7 @@
---
id: USER-WP-ADHOC-2026-10-11
type: workplan
title: "Refresh vulnerable readback candidate runtime base"
title: "Prepare readback runtime base and journey CI gates"
domain: communication
repo: user-engine
status: finished
@ -10,6 +10,7 @@ owner: codex
topic_slug: user-engine
created: "2026-10-11"
updated: "2026-10-11"
state_hub_workstream_id: "1aac634c-f321-5bf6-b178-4544d7854e8e"
---
## Refresh immutable Python patch base and verify exact application preservation
@ -18,13 +19,32 @@ updated: "2026-10-11"
id: USER-WP-ADHOC-2026-10-11-T01
status: done
priority: high
state_hub_task_id: "68979c68-6ab7-5675-9961-ddbb31a4c88d"
```
Replace only the Containerfile base digest with the current official Python 3.12
index; retain exact application bytes and resolved Python dependency versions.
The bounded local candidate removes all 3 CRITICAL and44 of 88 HIGH OS findings.
The bounded local candidate removes all 3 CRITICAL and 44 of 88 HIGH OS findings.
Retain remaining 44 unfixed HIGH findings in the unfiltered fresh scan. Exact
source/image/provenance checks and 20 image / 323 source tests pass. Evidence:
`docs/evidence/2026-10-11-runtime-base-refresh.md`. This source remediation
finishes no deployment: USER-WP-0026-T03 and USER-WP-0028-T02 retain native
consumer acceptance, clean source commit/publication and scoped rollout gates.
## Repair actual missing-dependency journey CI setup
```task
id: USER-WP-ADHOC-2026-10-11-T02
status: done
priority: high
```
Correct native failed task 11448 for exact source 1bb7cacc: install project
runtime dependencies and pinned pytest, run the full pytest suite including
v0.8 regressions, preserve layer and mapped-journey gates. A clean-container
rehearsal passes 317 tests with 20 optional skips and all 66 mapped journey tests
with no skips; external journey acceptance remains incomplete. Evidence:
`docs/evidence/2026-10-11-journey-ci-repair/REVIEW.md`. This task completes
source repair and bounded verification; exact new native CI execution, release
risk disposition and real workload acceptance remain USER-WP-0026-T03 /
USER-WP-0028-T02. No runtime build input, live policy or image is changed.