igneum-josh 275859cecf CI gate: the feature-branch hook runs the never-push classes (no-secrets, identity grep) beside the structural checks; harness summaries write keys through a redacting writer with its own check ... The class (7 October 2026, 11:26 to 12:47 UK): three fork-gate summaries on ca3-v4-node carried the miners' vote-key hashes under "key" and eight CI runs went red on "no secret file names and no 64-hex secrets in the tree" while the pushing lanes saw nothing: the light gate ran only conflict markers and Windows paths. - tools/ci/pre-push.sh: never_push_checks() (identity grep, no-secrets) runs on every ref from --hook, and inside the full gate where the identity grep already sat; the self-test asserts the wiring; the light gate is about 20 s on the Mac. - infra/fast-time/lib/redact-keys.mjs: writeSummary() shortens every 64-hex value under a key-shaped field to 8 hex and an ellipsis and refuses a text the no-secrets rule would flag (line named); --self-test and --check; the gate runs the self-test. fork-gate.mjs adopts it on ca3-v4-node. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>		2026-10-07 14:09:06 +01:00
..
build-server	Build boxes: the class router is a preference with spill-over (a held or overloaded box hands the job to the other one); build-2 gets a third slot and every run there is bounded on its own 32-core band; the spill decision in the first route line, the slot label and the JSONL row	2026-10-07 14:08:19 +01:00
cloud-devnet	Stale-build class closed: every script that copies sources re-stamps them before building, CI check, repo rule	2026-10-05 10:12:38 +01:00
cross	build-linux.sh: NODE_SRC, TARGET_DIR and OUT_DIR made absolute before the cd into the node source (a relative target dir landed inside the node worktree and the copy read the stale repository-relative one; the 0.3.10 cut, twice)	2026-10-05 19:26:17 +01:00
devnet	Kill by exact command line or pid file, never by a name: tools/ci/kill-by-name-check.sh in the gate; the 36 pgrep/pkill literals in the tree fixed	2026-10-06 23:10:31 +01:00
fast-time	CI gate: the feature-branch hook runs the never-push classes (no-secrets, identity grep) beside the structural checks; harness summaries write keys through a redacting writer with its own check	2026-10-07 14:09:06 +01:00
gpu-bench	Rotation phase 2: packagers read the intake key and the downloads token from files (IGNEUM_INTAKE_KEY_FILE, IGNEUM_DL_TOKEN_FILE, .next by default), no key literal in the tree, app header line with fingerprints, ship-app --dl-both, logs --rotation, tools/repo/fresh-repo.sh with the dry run, docs/plans/rotation-phase-2.md	2026-10-05 07:43:44 +00:00
seed-nodes	Seed env values quoted (the launcher sources the file; --netsuffix=1 ran as a command on the first testnet start)	2026-10-05 16:59:53 +01:00