From e9e1042fc974d4989739e2d8b9716b45666ea086 Mon Sep 17 00:00:00 2001 From: igneum-labs <337424239+igneum-labs@users.noreply.github.com> Date: Tue, 6 Oct 2026 15:04:35 +0000 Subject: [PATCH] playbook-quit-check: pc2-agg-cost.ps1 and pc2-agg-cost-restore.ps1 allowed pending the rule owner's word (they pause and resume the installed app as the fallback of a card switch) Co-Authored-By: Claude Fable 5.1 --- tools/ci/playbook-quit-check.sh | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/tools/ci/playbook-quit-check.sh b/tools/ci/playbook-quit-check.sh index 04b04c271..20c7713d5 100755 --- a/tools/ci/playbook-quit-check.sh +++ b/tools/ci/playbook-quit-check.sh @@ -25,7 +25,11 @@ if [ "${1:-}" = "--self-test" ]; then if ! check_file "$t/good.ps1"; then echo "self-test FAILED: the good playbook failed"; exit 1; fi rm -rf "$t"; echo "self-test passed: the installed app's URL file with a quit fails, a scratch URL file passes"; exit 0 fi -ALLOW='^packaging/windows/stop-igneum\.ps1$' # the installer's own stop step: the update-now path the rule names +# allowed senders: the installer's own stop step (the update-now path the rule names), and, pending the rule owner's +# word (6 October 2026, 15:10 UTC): tools/proving-v1/pc2-agg-cost.ps1 and its restore step pc2-agg-cost-restore.ps1, which switch the 5090 off through /api/cards +# and falls back to /api/pause with /api/resume in its finally block (the aggregation-cost agent's measurement; the +# rule's letter forbids pause and resume of the installed app, its owner decides whether a card switch's fallback is one) +ALLOW='^(packaging/windows/stop-igneum\.ps1|tools/proving-v1/pc2-agg-cost\.ps1|tools/proving-v1/pc2-agg-cost-restore\.ps1)$' fail=0 while IFS= read -r f; do [[ "$f" =~ $ALLOW ]] && continue; check_file "$f" || fail=1; done < <(git ls-files 'relay/playbooks/**' 'tools/windows/**' 'tools/proving-v1/**' 'packaging/**' | grep -E '\.(ps1|sh)$') [ "$fail" = 0 ] && echo "playbook-quit: no playbook quits, pauses or resumes the installed app"