Repository navigation
feat: add inactive bounded KV pilot launcher - #276
Merged
Merged
Conversation
Refs #248. Publish reviewed software-only tree 302ada9 from local commit 6cfbc5ea1782c4d697db74b71fdf408abc4497fa. Implementation and independent review: Codex, gpt-6-astra, xhigh. This API-created publication wrapper preserves tested file bytes; local commit identity and hosted qualification are distinct. No provider calls, secret binding or efficacy acceptance.
Publish reviewed local 5e4a78084c85425e6015e804387e526b7c14b311 tree unchanged. Read raw authoritative RECORD; retain actual anchored source/editable package trees and independent installed copies. Fail closed on missing, ambiguous or unsafe nodes. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh] Prior hosted qualification remains bound to its original tree. New exact-head qualification required.
Retain first successful task-read request index so later redundant reads do not reject valid edits, checks or benchmarks. Preserve rejection of a first read and action in the same response; add both positive and negative regressions. Local reviewed commit f9f76365ead9bcdb339488974f4862414b28679e; exact same tree. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh]. Addresses native review discussion_r4426397229; fresh exact-head qualification remains required.
Stack ten launcher-only files on reviewed adapter. Locator disabled and workflow credential bindings absent. No execution or paid readiness is claimed. Exact local combined tree from 7d7f3d8cdf3f35b5b456d41f0648c81d10e478e3. Implementation and independent review configured Codex / gpt-6-astra / xhigh.
Only accept completed status and an actual integer zero exit code. Fail closed on positive exits, malformed codes and conflicting states even with completed worker JSON. Preserve consumed-request accounting and add adversarial controls. Reviewed local commit ccf307ca44f93093ce6ca2db22346885d31aabd6; published tree identical. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh]. Addresses discussion_r4426926161. Prior hosted receipts remain bound to prior trees; new current-head qualification required.
Keep latest adapter head as ancestor and preserve exactly ten launcher-only files. Same tree as local 57e0b88491502a1cccdd25be9bb4de6d5b329950; 320 affected tests passed. Locator disabled, no credentials or runtime activation. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh].
Atomically persist only status, returncode and elapsed_seconds after the executor returns, before timeout/marker/JSON branches. Preserve existing oracle, metric, record and verdict semantics; no argv, environment or error text retained. Reviewed local commit 6bf845295850b4e0d671594cc690a0ac5cba4afc; published tree identical. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh]. Preserve prior receipts and require fresh exact-tree qualification.
Preserve existing literal substring checks for request and response while representing the key in the same canonical JSON encoding. Cover allowed quote/backslash shapes using real transport plus mocked HTTP; preserve ordinary-key protection, fixed errors and unknown-usage handling. No observed real-service disclosure, credential access or worker secondary scanner. Local reviewed commit f53f0c007311ed73858c806004cda94ab122b6a2, identical tree. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh].
Merge latest reviewed adapter dependency. Add fixed data-only projection of semantic execution outcomes, raw task JSON, timing/quality records and public preflight/freeze evidence. Preserve interrupted/missing/redacted states without rerunning candidates or exporting arbitrary logs. Exact tree from clean local 1c2f89cfb47efcc9b88868f35c29efdfae616ff6; 3169 aggregate tests and 480 affected tests passed. Locator disabled; no secret binding or activation. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh].
Preserve the independently reviewed and tested launcher tree while incorporating the merged adapter ancestry. No source bytes, authorization locator, credentials or execution behavior changed. Agent-assisted-by: Codex / gpt-6-astra [effort=xhigh] Signed-off-by: Codex <codex@openai.com>
Dong1017
marked this pull request as ready for review
October 31, 2026 01:13
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
This was referenced Oct 31, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bounded inactive delivery
Refs #248; builds on merged #275. This PR delivers only the ten-file inactive launcher, not a paid run or an efficacy result.
always()projection reads existing artifacts only; it never reruns the candidate or model.Inactive by design: the locator is disabled and credential bindings are absent. This delivery made no provider request, live ledger mutation or dispatch. PR #275 remains the sole prospective charge identity; this PR creates no additional spending allowance. Execution still needs reviewed operational configuration, refreshed freeze/accounting, exact qualification and separately authorized activation. Broader #248 acceptance remains open.
Verified content, tests and evidence limits
Published head
68fa4f405c6b010c0626a4e4c9d000906673e739and clean local tested commit1c2f89cfb47efcc9b88868f35c29efdfae616ff6share tree059d3023fa5f02513f2bb0dcbb7f1a50229f5c48. Against main19c3df8311f55ab9efbcd6fa60e29a4bbce95dd1(the #275 squash merge), GitHub compare confirms exactly ten launcher files, +2,808/-0. A normal two-parent merge incorporated that main ancestry without changing the tested tree; generic model/harness fixes belong to #275.01e2d6f35b67cb32c2cf3bcaec1664984f1ef037has the same tree above. Draft lint and knowledge-declaration policy also passed.Retention was checked against all 77 frozen semantic expected outputs (including large integers) and 34 final benchmark/quality outputs. Allowed task JSON and numeric evidence stay within fixed file/size bounds. Invalid arbitrary text is not exported as a log; bounded observation metadata records byte count/hash, failure reason and truncation or unavailability instead. Missing/malformed/interrupted evidence never becomes PASS; death before an executor returns leaves its outcome unknown. This is not a claim to retain every raw byte or survive complete host/artifact loss.
The new task/actor artifacts are retained locally with exact run/head/tree metadata. Outer/nested archive hashes, fixed member inventories and unchanged qualifier dependencies were checked; prior independent raw audits are reused only for the unchanged source/protocol. This is not a fresh raw semantic/timing recomputation of run 41154288295.
Public projection excludes arbitrary logs, environment contents, provider responses and credentials. The frozen source binds the sandbox profile; hosted/current runtime inventory hashes are retained separately, with independent current-host checks rather than incidental inventory equality. Task-fixture anchors remain explicit; campaign/charge identities come from the future verified plan. No raw ZIP is published by this PR.
Authorship
Actual configured implementation and independent review: Codex / gpt-6-astra / xhigh. Publication preserves the tested tree through an API-created wrapper; commit identity, independent review, CI and operational acceptance remain distinct.