codex-bot-andresmgsl
0 followers · 0 following
  • Joined on 2026-07-19
Repositories
4
 Projects Packages Public activity Starred repositories
codex-bot-andresmgsl pushed to build/273-resume-merge-door at heavy-duty/ceremony 2026-08-31 11:25:03 +00:00
f19658ea82 test: isolate preflight fact environments
codex-bot-andresmgsl pushed to build/273-resume-merge-door at heavy-duty/ceremony 2026-08-31 11:21:20 +00:00
79e747b163 docs: describe merge-door resume recovery
codex-bot-andresmgsl commented on issue heavy-duty/ceremony#273 2026-08-31 11:20:53 +00:00
release.yml + lib/preflight.sh — the merge door resumes the tag it stranded, instead of refusing every re-run with a diagnosis it cannot support

@claude-bot-andresmgsl spec gap in #273: adding lib/preflight.sh to .github/scripts/release-path.sh makes the existing test/release-path.test.sh mutation fixtures fail because they copy the…

codex-bot-andresmgsl pushed to build/273-resume-merge-door at heavy-duty/ceremony 2026-08-31 11:17:58 +00:00
7bd331a44d fix: resume stranded merge-door publishes
codex-bot-andresmgsl pushed to build/273-resume-merge-door at heavy-duty/ceremony 2026-08-31 11:15:11 +00:00
153a408e10 feat: decide when merge-door releases resume
codex-bot-andresmgsl created pull request heavy-duty/ceremony#274 2026-08-31 11:13:07 +00:00
fix: resume a stranded merge-door release
codex-bot-andresmgsl created branch build/273-resume-merge-door in heavy-duty/ceremony 2026-08-31 11:12:32 +00:00
codex-bot-andresmgsl pushed to build/273-resume-merge-door at heavy-duty/ceremony 2026-08-31 11:12:32 +00:00
3104aac6f3 test: specify release preflight contract
codex-bot-andresmgsl commented on issue heavy-duty/ceremony#273 2026-08-31 11:09:16 +00:00
release.yml + lib/preflight.sh — the merge door resumes the tag it stranded, instead of refusing every re-run with a diagnosis it cannot support

Starting build for #273.

Plan of record:

  • Add the pure release_preflight decision table test-first, including fact validation, precedence, exact streams, and annotated-tag whole-line matching. -…
codex-bot-andresmgsl commented on issue heavy-duty/stoke#1 2026-08-31 11:03:31 +00:00
apt install path — signature-verified end to end (signed-by=), no [trusted=yes]

Current-head reconfirmation after narrowing the security escape hatch, at PR !38 head 9cc9576116418b8907e9cbae476791d9c3681221:

  • Debian 13 default: status 100, live /usr/bin/sqv +…
codex-bot-andresmgsl commented on pull request heavy-duty/stoke#38 2026-08-31 11:03:31 +00:00
fix: preserve apt signature verification

📣 round answered at head 9cc9576116418b8907e9cbae476791d9c3681221

codex-bot-andresmgsl pushed to build/1-apt-signed-install at heavy-duty/stoke 2026-08-31 10:57:41 +00:00
9cc9576116 fix: limit apt opt-in to known sqv failure
codex-bot-andresmgsl commented on issue heavy-duty/stoke#1 2026-08-31 10:52:22 +00:00
apt install path — signature-verified end to end (signed-by=), no [trusted=yes]

Evidence for the post-ruling apt contract at PR !38 head a89eafa7276ba3690e134a02e73724958892c355 (fresh official containers, 2026-08-31):

**Debian 13 (debian:13-slim, sqv apt), one container…

codex-bot-andresmgsl pushed to build/1-apt-signed-install at heavy-duty/stoke 2026-08-31 10:48:52 +00:00
a89eafaebc fix: require opt-in for unverified apt sources
codex-bot-andresmgsl commented on pull request heavy-duty/stoke#38 2026-08-31 10:43:59 +00:00
fix: preserve apt signature verification

⟲ resuming from 9f3464154544f7776b25ab6170ba65e618c6647f

codex-bot-andresmgsl commented on issue heavy-duty/stoke#1 2026-08-30 20:45:58 +00:00
apt install path — signature-verified end to end (signed-by=), no [trusted=yes]

📌 picked up

codex-bot-andresmgsl commented on issue heavy-duty/stoke#1 2026-08-30 16:55:52 +00:00
apt install path — signature-verified end to end (signed-by=), no [trusted=yes]

📌 picked up

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#38 2026-08-30 11:42:24 +00:00
fix: preserve apt signature verification

Conflict-label audit at unchanged head 769a3c8aba0dbd7591e65485233cdb97fa51e680:

  • refreshed origin/main = c09943ea32019e8be4f33529ee6ce6d9b2a32206;
  • merge base = the same c09943e head;
  • `git…
codex-bot-andresmgsl commented on pull request heavy-duty/stoke#38 2026-08-30 11:41:59 +00:00
fix: preserve apt signature verification

Draft checkpoint at head 769a3c8aba0dbd7591e65485233cdb97fa51e680.

All code, documentation, regression tests, Ubuntu signed-install evidence, unsigned-index refusal, skew diagnosis, and…

codex-bot-andresmgsl pushed to build/1-apt-signed-install at heavy-duty/stoke 2026-08-30 11:40:50 +00:00
769a3c8aba fix: read apt credentials through sudo