Skip to content

ci: build once, gate the digest, promote what was tested (RT#1550) - #34

Merged
fatherlinux merged 1 commit into
mainfrom
feat/container-release
Nov 11, 2026
Merged

fatherlinux merged 1 commit into
mainfrom
feat/container-release

Conversation

@fatherlinux

Copy link
Copy Markdown
Member

Summary

  • Gate: boot: mcp with boot-cmd: --storage-backend sqlite_vec. The image's default CMD serves SSE on 0.0.0.0, which the server refuses to start without MCP_API_KEY and which no release profile speaks, so the gate boots the pushed digest over stdio (no transport flag), requires initialize and tools/list, and fails on a server that exits or lists no tools. Same entrypoint, imports, onnxruntime/embedding load and sqlite-vec storage as production.
  • Local evidence: built the image and ran the gate; it reported memory 12.2.1: 28 tools. The unmodified default CMD was refused (server exits on the 0.0.0.0 auth check), so the gate does discriminate.
  • Removed: the two-job Quay + GHCR build/push workflow and its Trivy step (the release workflow scans the gated digest). Added a weekly schedule (Monday 05:17 UTC).
  • GHCR cleanup: no ghcr.io/crunchtools references remain; .gemini/styleguide.md and the constitution Deviations section updated. Quay.io is the only registry.
  • Constitution v1.31.0 to v1.39.1 (Inherits and both workflow pins); validator passes.
  • LATEST_SEMANTICS: unchanged. :latest already moved only on a stable v* tag; branch builds never pushed it.

Test plan

  • local gate: memory 12.2.1: 28 tools
  • validate-constitution.py: PASS
  • PR run: build, gates, mark green

🤖 Generated with Claude Code

https://claude.ai/code/session_01R7Y1jh5QhdxRuFKyWVev5h

Replace the Quay+GHCR build/push workflow with the constitution v1.39.1 container-release caller. Gate: boot mcp over stdio (--storage-backend sqlite_vec) since the default CMD serves SSE on 0.0.0.0 and needs MCP_API_KEY. Drop GHCR, bump constitution to v1.39.1.

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01R7Y1jh5QhdxRuFKyWVev5h

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Gatehouse found no issues.

Full review.

@fatherlinux
fatherlinux merged commit 85de824 into main Nov 11, 2026
11 checks passed
@fatherlinux
fatherlinux deleted the feat/container-release branch November 11, 2026 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant