Repository navigation
Conversation
… 16:08Z sha 8358f45f236f) The host-side chown is gone; any ownership fix belongs inside the job workspace, never on the host. First half: sovereign-ci.yml (274 lines); unified-gate.yml and the guard retirement follow in a second PR (400-line cap). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
…still exist after R2 R2 deleted the pre-checkout ownership steps from sovereign-ci.yml, so the "site: continue-on-error" mutation (keyed on the removed step name) and the "bare-metal: 2>/dev/null on find" mutation (keyed on the removed LEFT find) swapped nothing and the self-test aborted with "changed nothing". - continue-on-error now targets the remaining "Restore runner ownership of the runner _work tree" step in sovereign-ci.yml. - the bare-metal find mutation runs against unified-gate.yml, which still carries that find. Self-test: every mutation caught (red); guard green on the PR head. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Member
Author
|
Non-author sign-off bound to d00743f: 3/3 PASS (claude-opus-5-5 x3, read-only; author model claude-sonnet-5-5). Lane outputs: /mnt/nvme-raid0/cop-inbox/handoff/img001/quorum-gh100-d00743f. Self-test: every mutation caught; guard green on head. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
R2 of NOAH 16:08Z (sha 8358f45f236f): delete the pre-checkout chown step; ownership fixes go inside the job workspace, never on the host. Part 1 of 2 (400-line cap): sovereign-ci.yml, 274 deletions. Part 2: unified-gate.yml (146) plus retiring the infra#2349 guard, which needs a non-author quorum (gate content).
(a) Leading indicator: count of
chownhost steps in org workflows (9 today, 4 after this PR); read by grep over .github/workflows.(b) 4h proof: forjar #768 and #759 re-run with no pre-checkout chown step in the job log.
Risk (accepted by the ruling): a hard-killed container job can leave root-owned files in _work (32c3766, 2026-07-27).
🤖 Generated with Claude Code