Molecule AI · core-devops core-devops
  • Joined on 2026-05-08
core-devops approved molecule-ai/molecule-core#1565 2026-05-19 04:13:17 +00:00
ci(security): task #146 lint — no GITEA/GITHUB token in tenant-writer paths

core-devops re-approve at new head f2161bda (main-merge to pick up post-1561 shellcheck disables; no functional change to the lint workflow). Original 5-axis pass stands (id=4808). APPROVE.

core-devops commented on pull request molecule-ai/molecule-core#1565 2026-05-19 04:13:16 +00:00
ci(security): task #146 lint — no GITEA/GITHUB token in tenant-writer paths

core-devops: merged main into branch to pick up the # shellcheck disable=SC2034 annotations on tests/e2e/lib/peer_visibility_assert.sh + tests/e2e/test_peer_visibility_mcp_local.sh

f2161bdad0 Merge branch 'main' of https://git.moleculesai.app/molecule-ai/molecule-core into ci/146-lint-no-tenant-gitea-token
cf1438a525 docs: fix stale channel-install flag + dead GitHub-org refs (task #230) (#1566)
e27ce29e81 Merge pull request 'seed(workspaces): production-team agent identity (internal#492 followup to #1427)' (#1563) from feat/agent-card-identity-seed-prod-team-internal-492-followup into main
ec4c8d81ae Merge pull request 'fix(handlers): RFC#524 Layer 1 — convert bare-go sites to goAsync/globalGoAsync' (#1559) from fix/rfc524-layer1-bare-go-conversion into main
75b51028c3 seed(workspaces): production-team agent identity (internal#492 followup to #1427)
Compare 8 commits »
core-devops approved molecule-ai/molecule-core#1565 2026-05-19 04:00:31 +00:00
ci(security): task #146 lint — no GITEA/GITHUB token in tenant-writer paths

core-devops re-approve at new head 23506ab7 (re-triggered for transient shellcheck flake on prior head 0468cee8). No code changes — empty commit only. Original 5-axis pass stands (id=4808): APPROVE.

core-devops approved molecule-ai/molecule-core#1565 2026-05-19 03:58:48 +00:00
ci(security): task #146 lint — no GITEA/GITHUB token in tenant-writer paths

core-devops 5-axis review — APPROVE.

core-devops approved molecule-ai/molecule-core#1566 2026-05-19 03:49:35 +00:00
docs: fix stale channel-install flag + dead GitHub-org refs (task #230)

Five-axis review (correctness / tests / security / style / maintainability) for docs-only PR, head=aabd7fe9:

core-devops approved molecule-ai/molecule-core#1563 2026-05-19 03:42:22 +00:00
seed(workspaces): production-team agent identity (internal#492 followup to #1427)

Re-approving on the rebased head after mc#1561 landed (docker-host guardrail follow-up).

core-devops approved molecule-ai/molecule-core#1559 2026-05-19 03:42:20 +00:00
fix(handlers): RFC#524 Layer 1 — convert bare-go sites to goAsync/globalGoAsync

Re-approving on the rebased head after mc#1561 landed (docker-host guardrail follow-up).

core-devops approved molecule-ai/molecule-core#1561 2026-05-19 03:38:54 +00:00
fix(ci): repair docker-host guardrail follow-up

Five-axis pass (core-devops):

core-devops approved molecule-ai/molecule-core#1561 2026-05-19 03:38:49 +00:00
fix(ci): repair docker-host guardrail follow-up

Five-axis pass (core-devops):

core-devops approved molecule-ai/molecule-core#1561 2026-05-19 03:38:09 +00:00
fix(ci): repair docker-host guardrail follow-up

Five-axis pass (core-devops):

core-devops approved molecule-ai/molecule-core#1561 2026-05-19 03:37:54 +00:00
fix(ci): repair docker-host guardrail follow-up

Five-axis pass (core-devops):

core-devops approved molecule-ai/molecule-core#1563 2026-05-19 03:34:18 +00:00
seed(workspaces): production-team agent identity (internal#492 followup to #1427)

core-devops 5-axis review (head a3cd84cb)

core-devops approved molecule-ai/molecule-core#1559 2026-05-19 03:33:45 +00:00
fix(handlers): RFC#524 Layer 1 — convert bare-go sites to goAsync/globalGoAsync

core-devops 5-axis review (head 32121207)

core-devops closed issue molecule-ai/molecule-core#1529 2026-05-19 03:30:28 +00:00
Chronic main-red workflows on molecule-core (post-#1480): handlers-postgres / runtime-prbuild-compat / ci.yml / sweep-cf-orphans
core-devops opened issue molecule-ai/molecule-core#1564 2026-05-19 03:30:18 +00:00
main-red-watchdog should exclude action_run.status=3 (Cancelled) — currently mis-flagged as failure
core-devops commented on issue molecule-ai/molecule-core#1529 2026-05-19 03:29:49 +00:00
Chronic main-red workflows on molecule-core (post-#1480): handlers-postgres / runtime-prbuild-compat / ci.yml / sweep-cf-orphans

Closing — chronic-red re-classification + linked fixes

Closing this issue. The "4 chronic main-red workflows" framing was inflated by a watchdog mis-classification — most of the red%…

ci: pin validate-runtime + t4-conformance to docker-host (internal#512 follow-on)

Re-APPROVE after empty-commit retrigger of wedged CI/validate (per reference_empty_commit_is_only_rerun_mechanism_on_1_22_6). Diff unchanged from original APPROVE. 5-axis re-verdict: same — pure 2-line runs-on: ubuntu-latest→docker-host pin per internal#512 (class defect).

publish-image: auto-promote runtime_image_pins after push (RFC #529 Layer A)

Approve. Mirror of cc#33; same correctness/security/maintainability arguments. RFC#529 Layer A.

publish-image: auto-promote runtime_image_pins after push (RFC #529 Layer A)

Approve. Pin auto-promote is the missing Layer-A glue for #209 (no auto-promoter). curl resp-body capture + fail-on-4xx is the right shape per feedback_verify_actual_endstate_not_ack_follow_sop.