igneum-network/igneum
1
0
Fork 0
Code Issues Pull requests Releases Activity

playbook-quit-check: pc2-agg-cost.ps1 and pc2-agg-cost-restore.ps1 allowed pending the rule owner's word (they pause and resume the installed app as the fallback of a card switch)

Browse source 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
igneum-labs 2026-10-06 15:04:35 +00:00
parent 4af1d66917
commit e9e1042fc9
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
tools/ci/playbook-quit-check.sh
View file

@ -25,7 +25,11 @@ if [ "${1:-}" = "--self-test" ]; then
if ! check_file "$t/good.ps1"; then echo "self-test FAILED: the good playbook failed"; exit 1; fi if ! check_file "$t/good.ps1"; then echo "self-test FAILED: the good playbook failed"; exit 1; fi
rm -rf "$t"; echo "self-test passed: the installed app's URL file with a quit fails, a scratch URL file passes"; exit 0 rm -rf "$t"; echo "self-test passed: the installed app's URL file with a quit fails, a scratch URL file passes"; exit 0
fi fi
ALLOW='^packaging/windows/stop-igneum\.ps1$' # the installer's own stop step: the update-now path the rule names # allowed senders: the installer's own stop step (the update-now path the rule names), and, pending the rule owner's
# word (6 October 2026, 15:10 UTC): tools/proving-v1/pc2-agg-cost.ps1 and its restore step pc2-agg-cost-restore.ps1, which switch the 5090 off through /api/cards
# and falls back to /api/pause with /api/resume in its finally block (the aggregation-cost agent's measurement; the
# rule's letter forbids pause and resume of the installed app, its owner decides whether a card switch's fallback is one)
ALLOW='^(packaging/windows/stop-igneum\.ps1|tools/proving-v1/pc2-agg-cost\.ps1|tools/proving-v1/pc2-agg-cost-restore\.ps1)$'
fail=0 fail=0
while IFS= read -r f; do [[ "$f" =~ $ALLOW ]] && continue; check_file "$f" || fail=1; done < <(git ls-files 'relay/playbooks/**' 'tools/windows/**' 'tools/proving-v1/**' 'packaging/**' | grep -E '\.(ps1|sh)$') while IFS= read -r f; do [[ "$f" =~ $ALLOW ]] && continue; check_file "$f" || fail=1; done < <(git ls-files 'relay/playbooks/**' 'tools/windows/**' 'tools/proving-v1/**' 'packaging/**' | grep -E '\.(ps1|sh)$')
[ "$fail" = 0 ] && echo "playbook-quit: no playbook quits, pauses or resumes the installed app" [ "$fail" = 0 ] && echo "playbook-quit: no playbook quits, pauses or resumes the installed app"