Repository navigation
docs: promote install pin to v6.16.0 - #3411
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Independent exact-head review of Verdict: BLOCKED. The 20-file pin diff is a pure promotion, and the publication evidence checked below holds. Landing is blocked because the Homebrew formula still pins v6.15.0, so DiffThe changed path set matches
Zero lines fell outside that set.
Pins on this head: Binding and publicationThe PR body's release-pin marker agrees with tag Local tag object An anonymous GHCR token, then Producer run https://github.com/Rul1an/assay/actions/runs/39992568114 is
All 15 workspace crates with PyPI
F1, open
Hosted job https://github.com/Rul1an/assay/actions/runs/39997094573/job/120568725604 failed in The formula lives in CI at this headObserved on
Non-claimsNo cargo build or test, no docker pull, no multipass, no attestation re-verification, and no archive digest recomputation. The skipped LSM job is not enforcement proof. The release-surface script did not drive an assay binary. This verdict does not waive the hosted checks. |
{
"schema": "assay.review-record.v0",
"repo": "Rul1an/assay",
"pr": 3411,
"head_sha": "19ceb750f9f9f0d95758a4b694bbff8c94b978e8",
"base_sha": "50b7da2037e4c4fdd077d46758fcd13a20f59cbc",
"review_completed": true,
"verdict": "BLOCKED",
"findings": [
{
"id": "F1",
"summary": "Rul1an/homebrew-tap main Formula/assay.rb still pins v6.15.0 on all four platforms, and no tap PR is open. docs/reference/release.md:300-308 requires that bump before or alongside the PR that advances .github/assay-release-tag. bash scripts/ci/check-assay-release-pin.sh --published exits 1 (homebrew formula pins v6.15.0 for aarch64-apple-darwin but latest published release is v6.16.0). The CI aggregate failed on that line: https://github.com/Rul1an/assay/actions/runs/39997094573/job/120568725604",
"disposition": "open"
}
],
"no_findings": false,
"builder": {
"agent": "codex",
"instance": "release-6.16.0",
"role": "coordinating builder; branch namespace, not author of generated bytes"
},
"producer": {
"github_login": "app/assay-dependabot-lane",
"role": "App-generated install-pin commit"
},
"reviewer": {
"agent": "cursor-grok",
"instance": "review-3411-19ceb750",
"github_login": "Rul1an",
"github_login_role": "relay publisher only"
},
"publisher": {
"github_login": "Rul1an",
"role": "relay publisher, not actual reviewer"
},
"independence": {
"did_not_build": true,
"did_not_author_governing_spec": true,
"did_not_author_implementation_plan": true,
"identity_authenticated": false,
"independence_authenticated": false
},
"scope": {
"worktree": "/Users/roelschuurkes/wt-rev-3411",
"paths": [
".github/assay-release-run-id",
".github/assay-release-tag",
"README.md",
"SECURITY.md",
"docs/AIcontext/user-flows.md",
"docs/generated/agent-golden-path.json",
"docs/getting-started/ci-integration.md",
"docs/getting-started/index.md",
"docs/getting-started/installation.md",
"docs/getting-started/quickstart.md",
"docs/guides/agent-golden-path.md",
"docs/guides/editor-mcp-recipe.md",
"docs/index.md",
"docs/reference/cli/index.md",
"docs/reference/release.md",
"docs/use-cases/air-gapped.md",
"docs/use-cases/ci-gate.md",
"examples/mcp-quickstart/README.md",
"packaging/agent-plugin/skills/assay-golden-path/references/agent-golden-path.json",
"packaging/claude-plugin/skills/assay-golden-path/references/agent-golden-path.json"
],
"change": "Published release version/run/image pins and generated copies only."
},
"checks": [
"Exact local and live PR head match 19ceb750f9f9f0d95758a4b694bbff8c94b978e8; detached worktree clean; tag v6.16.0 object a2c38390719ba420156f35d11546a56407cf6cc8 peels to base/source 50b7da2037e4c4fdd077d46758fcd13a20f59cbc, equal to origin/main.",
"Same 20 paths as bf2d210b8969e1af516242bb00a1d860a4eb24c0. Every changed line reverses to the base by only 6.15.0 to 6.16.0 (72), run 39557798717 to 39992568114 (3), OCI index sha256:53f3bd37a5d4c0903c87f8178b5a9933e24ca51a213c2c57248ca7dd93d39e79 to sha256:809abd4e1945bd2288dbdb06683efc0fec974905cbfd3fe4db08a4030bcf5cbc (4), and minor alias 6.15 to 6.16 (1). source_version stays 6.16.0. Historical installation sentences were not in the diff.",
"git diff --check exits 0. python3 scripts/docs/generate-agent-golden-path.py --check exits 0. Release and source fields on the three generated copies are release 6.16.0 / v6.16.0 and source 6.16.0 / v6.16.0.",
"PR binding marker agrees on tag v6.16.0, source 50b7da2037e4c4fdd077d46758fcd13a20f59cbc, run 39992568114, release 422124881, and image digest sha256:809abd4e1945bd2288dbdb06683efc0fec974905cbfd3fe4db08a4030bcf5cbc. Anonymous GHCR HEAD of manifests/v6.16.0 returned that digest as an OCI index.",
"Producer run 39992568114 completed success: 29 jobs, 28 success, one skipped Verify LSM Enforcement. Create Release, crates.io, PyPI, GHCR, and both published-image verification jobs succeeded. Skipped LSM is not enforcement proof.",
"releases/latest is v6.16.0, id 422124881, not draft, not prerelease, 26 uploaded assets including the documented CLI archives, sha256 sidecars, checksums.txt, and checksums.txt.sigstore.json. Fifteen publishable workspace crates are on crates.io at 6.16.0 and not yanked. PyPI assay-it 6.16.0 has the three unyanked cp312-abi3 wheels for Linux x86_64 and macOS arm64/x86_64.",
"check-assay-release-pin.sh exits 0 and check-release-surface.sh exits 0. check-assay-release-pin.sh --published exits 1 because the Homebrew formula still pins v6.15.0. The CI aggregate failed on that live command after its pin-contract self-test passed."
],
"evidence": {
"worktree": "/Users/roelschuurkes/wt-rev-3411",
"producer_run": "https://github.com/Rul1an/assay/actions/runs/39992568114",
"release": "https://github.com/Rul1an/assay/releases/tag/v6.16.0",
"ci_job": "https://github.com/Rul1an/assay/actions/runs/39997094573/job/120568725604",
"source_sha": "50b7da2037e4c4fdd077d46758fcd13a20f59cbc",
"image_digest": "sha256:809abd4e1945bd2288dbdb06683efc0fec974905cbfd3fe4db08a4030bcf5cbc"
},
"non_claims": [
"BLOCKED is the Homebrew landing precondition in docs/reference/release.md:300-308. The 20-file substitution itself matched the v6.15.0 promotion shape.",
"No cargo build or test, docker pull, multipass, attestation re-verification, or archive digest recomputation in this review.",
"Declared reviewer identity and independence are not authenticated by the relay publisher login.",
"A successful producer run does not turn skipped LSM validation into passing proof.",
"The release-surface script reported that no assay binary was driven.",
"review-record-check on this head failed earlier with no_current_record and does not re-run on a comment. Pending Analyze (rust) is pending."
]
} |
|
Follow-up on the BLOCKED record for head F1 is disposed outside this PR. Rul1an/homebrew-tap#13 merged as From this checkout, The CI aggregate rerun 39997094573 completed success on this head. Its live The next comment is the READY record for this head. It keeps the same builder, producer, and reviewer identities and sets |
{
"schema": "assay.review-record.v0",
"repo": "Rul1an/assay",
"pr": 3411,
"head_sha": "19ceb750f9f9f0d95758a4b694bbff8c94b978e8",
"base_sha": "50b7da2037e4c4fdd077d46758fcd13a20f59cbc",
"supersedes": 6371330227,
"review_completed": true,
"verdict": "READY",
"findings": [
{
"id": "F1",
"summary": "Rul1an/homebrew-tap main Formula/assay.rb still pins v6.15.0 on all four platforms, and no tap PR is open. docs/reference/release.md:300-308 requires that bump before or alongside the PR that advances .github/assay-release-tag. bash scripts/ci/check-assay-release-pin.sh --published exits 1 (homebrew formula pins v6.15.0 for aarch64-apple-darwin but latest published release is v6.16.0). The CI aggregate failed on that line: https://github.com/Rul1an/assay/actions/runs/39997094573/job/120568725604",
"disposition": "Disposed outside this PR. Rul1an/homebrew-tap#13 merged as 0b38b1ccdebc3277b7b98875997ddb6ed60dd803 and that commit is main. Formula/assay.rb pins v6.16.0 for aarch64-apple-darwin, x86_64-apple-darwin, aarch64-unknown-linux-gnu, and x86_64-unknown-linux-gnu. bash scripts/ci/check-assay-release-pin.sh --published exits 0 and reports homebrew formula v6.16.0 for those four platforms. CI aggregate rerun 39997094573 completed success on this head; its live --published invocation printed the same line (job 120575932754)."
}
],
"no_findings": false,
"builder": {
"agent": "codex",
"instance": "release-6.16.0",
"role": "coordinating builder; branch namespace, not author of generated bytes"
},
"producer": {
"github_login": "app/assay-dependabot-lane",
"role": "App-generated install-pin commit"
},
"reviewer": {
"agent": "cursor-grok",
"instance": "review-3411-19ceb750",
"github_login": "Rul1an",
"github_login_role": "relay publisher only"
},
"publisher": {
"github_login": "Rul1an",
"role": "relay publisher, not actual reviewer"
},
"independence": {
"did_not_build": true,
"did_not_author_governing_spec": true,
"did_not_author_implementation_plan": true,
"identity_authenticated": false,
"independence_authenticated": false
},
"scope": {
"worktree": "/Users/roelschuurkes/wt-rev-3411",
"paths": [
".github/assay-release-run-id",
".github/assay-release-tag",
"README.md",
"SECURITY.md",
"docs/AIcontext/user-flows.md",
"docs/generated/agent-golden-path.json",
"docs/getting-started/ci-integration.md",
"docs/getting-started/index.md",
"docs/getting-started/installation.md",
"docs/getting-started/quickstart.md",
"docs/guides/agent-golden-path.md",
"docs/guides/editor-mcp-recipe.md",
"docs/index.md",
"docs/reference/cli/index.md",
"docs/reference/release.md",
"docs/use-cases/air-gapped.md",
"docs/use-cases/ci-gate.md",
"examples/mcp-quickstart/README.md",
"packaging/agent-plugin/skills/assay-golden-path/references/agent-golden-path.json",
"packaging/claude-plugin/skills/assay-golden-path/references/agent-golden-path.json"
],
"change": "Published release version/run/image pins and generated copies only."
},
"checks": [
"Follow-up on unchanged head 19ceb750f9f9f0d95758a4b694bbff8c94b978e8. Local rev-parse and the live PR head both name that SHA; the detached worktree is clean; git diff --name-only against base 50b7da2037e4c4fdd077d46758fcd13a20f59cbc is the same 20 paths as comment 6371330227.",
"F1 disposal: homebrew-tap main is merge 0b38b1ccdebc3277b7b98875997ddb6ed60dd803 of pull request 13 (committer date 2026-10-23T18:07:25Z). Formula/assay.rb on that main pins v6.16.0 urls for aarch64-apple-darwin, x86_64-apple-darwin, aarch64-unknown-linux-gnu, and x86_64-unknown-linux-gnu.",
"From /Users/roelschuurkes/wt-rev-3411, bash scripts/ci/check-assay-release-pin.sh --published exits 0 and prints: assay published release pin: v6.16.0 (workspace 6.16.0); homebrew formula: v6.16.0 for aarch64-apple-darwin x86_64-apple-darwin aarch64-unknown-linux-gnu x86_64-unknown-linux-gnu.",
"CI aggregate rerun https://github.com/Rul1an/assay/actions/runs/39997094573 completed success with headSha 19ceb750f9f9f0d95758a4b694bbff8c94b978e8. Job https://github.com/Rul1an/assay/actions/runs/39997094573/job/120575932754 printed the live v6.16.0 formula line at 2026-10-23T18:09:08Z. The earlier failure of that aggregate was job 120568725604.",
"Prior checks recorded on this same SHA in comment 6371330227 still describe this tree: tag v6.16.0 peels to source 50b7da2037e4c4fdd077d46758fcd13a20f59cbc, producer run 39992568114 succeeded, and the 20-path substitution was version, run id, and image digest only. This follow-up did not re-execute those probes."
],
"evidence": {
"worktree": "/Users/roelschuurkes/wt-rev-3411",
"producer_run": "https://github.com/Rul1an/assay/actions/runs/39992568114",
"release": "https://github.com/Rul1an/assay/releases/tag/v6.16.0",
"ci_run": "https://github.com/Rul1an/assay/actions/runs/39997094573",
"ci_job": "https://github.com/Rul1an/assay/actions/runs/39997094573/job/120575932754",
"prior_ci_failure": "https://github.com/Rul1an/assay/actions/runs/39997094573/job/120568725604",
"tap_commit": "https://github.com/Rul1an/homebrew-tap/commit/0b38b1ccdebc3277b7b98875997ddb6ed60dd803",
"tap_formula": "https://github.com/Rul1an/homebrew-tap/blob/0b38b1ccdebc3277b7b98875997ddb6ed60dd803/Formula/assay.rb",
"supersedes": "https://github.com/Rul1an/assay/pull/3411#issuecomment-6371330227",
"source_sha": "50b7da2037e4c4fdd077d46758fcd13a20f59cbc",
"image_digest": "sha256:809abd4e1945bd2288dbdb06683efc0fec974905cbfd3fe4db08a4030bcf5cbc"
},
"non_claims": [
"This follow-up disposes F1. The 20-file substitution on this unchanged head is the one already reviewed in comment 6371330227.",
"No cargo build or test, brew, docker pull, multipass, attestation re-verification, or archive digest recomputation in this follow-up.",
"Declared reviewer identity and independence are not authenticated by the relay publisher login.",
"A successful producer run does not turn skipped LSM validation into passing proof.",
"review-record-check on this head failed earlier with no current READY record. Posting this comment does not itself rerun that workflow."
]
} |
Promote the documented install pin to v6.16.0 from release run 39992568114.
Generated from the release producer artifact; review and required checks remain necessary. The Homebrew tap is managed separately. No automatic merge is enabled.