Contain unsolicited PR writers and use GPT-6 Astra Fast on harvesters #46

Merged
riley merged 7 commits from fix/forgejo-pr-safety into main 2026-09-07 21:01:44 +00:00
Collaborator

Changes

  • Require explicit opt-in for failed-status remediation and prevent recursive repairs of CodeTether review checks.
  • Add exact PR pause controls and a PostgreSQL single-writer guard across status contexts and heads.
  • Prepare workspaces before model-driven status repairs; refuse stale or conflicting PR heads.
  • Stop publishing full worker narration or claiming pushes solely from task completion.
  • Set harvester and task-routing model to openai-codex/gpt-6-astra-fast:high.

Evidence

  • Focused CI-like PostgreSQL and mocked-local suites: 102 tests passed, followed by 28 pause/admission tests.
  • Live deployment/Argo: safety image is running on API and Temporal workers; PR 5873 is paused and unsolicited status remediation is disabled. Public signed status delivery was ignored without dispatch.
  • Live deployment/Argo: both harvester replicas report the requested model.
  • Evidence: artifacts/forgejo-pr-safety/validation-v2.xml and pause-admission.xml in the implementation workspace.

No Spotless PR branch was rebased, force-pushed, or edited as part of this containment. No mux interactions were used.

## Changes - Require explicit opt-in for failed-status remediation and prevent recursive repairs of CodeTether review checks. - Add exact PR pause controls and a PostgreSQL single-writer guard across status contexts and heads. - Prepare workspaces before model-driven status repairs; refuse stale or conflicting PR heads. - Stop publishing full worker narration or claiming pushes solely from task completion. - Set harvester and task-routing model to `openai-codex/gpt-6-astra-fast:high`. ## Evidence - Focused CI-like PostgreSQL and mocked-local suites: 102 tests passed, followed by 28 pause/admission tests. - Live deployment/Argo: safety image is running on API and Temporal workers; PR 5873 is paused and unsolicited status remediation is disabled. Public signed status delivery was ignored without dispatch. - Live deployment/Argo: both harvester replicas report the requested model. - Evidence: `artifacts/forgejo-pr-safety/validation-v2.xml` and `pause-admission.xml` in the implementation workspace. No Spotless PR branch was rebased, force-pushed, or edited as part of this containment. No mux interactions were used.
CodeTether-Provenance-ID: ctprov_a2ae2dc0731948478f3d9eab4ec17b66
CodeTether-Origin: local_cli
CodeTether-Agent-Name: build
CodeTether-Agent-Identity: ctagent_b72bfe148e294d8ab16d78bd3c71c907
CodeTether-Agent-Slot: default
CodeTether-Session-ID: bc91d6af-4ef7-466d-97e9-e9f3e30821c2
CodeTether-Provenance-ID: ctprov_a2ae2dc0731948478f3d9eab4ec17b66
CodeTether-Origin: local_cli
CodeTether-Agent-Name: build
CodeTether-Agent-Identity: ctagent_b72bfe148e294d8ab16d78bd3c71c907
CodeTether-Agent-Slot: default
CodeTether-Session-ID: bc91d6af-4ef7-466d-97e9-e9f3e30821c2
config: use gpt-6-astra-fast high on harvesters
All checks were successful
Validate CodeTether Pull Request / validate (pull_request) Successful in 14m30s
9aa57ff3fe
CodeTether-Provenance-ID: ctprov_a2ae2dc0731948478f3d9eab4ec17b66
CodeTether-Origin: local_cli
CodeTether-Agent-Name: build
CodeTether-Agent-Identity: ctagent_b72bfe148e294d8ab16d78bd3c71c907
CodeTether-Agent-Slot: default
CodeTether-Session-ID: bc91d6af-4ef7-466d-97e9-e9f3e30821c2
Merge remote-tracking branch 'forgejo/main' into fix/harvester-vault-k8s-auth
Some checks failed
Validate CodeTether Pull Request / validate (pull_request) Failing after 11s
d17d720ed3
CodeTether-Provenance-ID: ctprov_a2ae2dc0731948478f3d9eab4ec17b66

CodeTether-Origin: local_cli
CodeTether-Agent-Name: build
CodeTether-Agent-Identity: ctagent_b72bfe148e294d8ab16d78bd3c71c907
CodeTether-Agent-Slot: default
CodeTether-Session-ID: bc91d6af-4ef7-466d-97e9-e9f3e30821c2
config: deploy Codex-compatible harvester and retain safety settings
All checks were successful
Validate CodeTether Pull Request / validate (pull_request) Successful in 12m53s
04f716c07a
CodeTether-Provenance-ID: ctprov_a2ae2dc0731948478f3d9eab4ec17b66
CodeTether-Origin: local_cli
CodeTether-Agent-Name: build
CodeTether-Agent-Identity: ctagent_b72bfe148e294d8ab16d78bd3c71c907
CodeTether-Agent-Slot: default
CodeTether-Session-ID: bc91d6af-4ef7-466d-97e9-e9f3e30821c2
CodeTether-Provenance-ID: ctprov_a2ae2dc0731948478f3d9eab4ec17b66
CodeTether-Origin: local_cli
CodeTether-Agent-Name: build
CodeTether-Agent-Identity: ctagent_b72bfe148e294d8ab16d78bd3c71c907
CodeTether-Agent-Slot: default
CodeTether-Session-ID: bc91d6af-4ef7-466d-97e9-e9f3e30821c2
config: retain terminal-safe API image in deployment manifest
All checks were successful
Validate CodeTether Pull Request / validate (pull_request) Successful in 8m1s
210239ba4f
CodeTether-Provenance-ID: ctprov_a2ae2dc0731948478f3d9eab4ec17b66
CodeTether-Origin: local_cli
CodeTether-Agent-Name: build
CodeTether-Agent-Identity: ctagent_b72bfe148e294d8ab16d78bd3c71c907
CodeTether-Agent-Slot: default
CodeTether-Session-ID: bc91d6af-4ef7-466d-97e9-e9f3e30821c2
riley merged commit 6e553668b5 into main 2026-09-07 21:01:44 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
riley/codetether!46
No description provided.