Session Handoff [python-contract]: Promotion 2.0.703 Released With the C# Coverage Check, #1800 Next

[ptr727]

Shipped #1134's C# coverage check (gap 3) and declined its ref input with evidence (gap 1) in #1848. Drove promotion #1850 to main, carrying 20 PRs, and released it as 2.0.703. #1134's gap 2 now lives in #1800, which is this track's work.

Next steps, in priority order

Re-read each issue and pull request rather than trusting these summaries.

1. Settle Gate Every Repository's Python on Its Code, Not on Its Config #1800's last open decision, the adoption order, then build it. The maintainer settled two of three decisions on 2026-09-25, recorded on Gate Every Repository's Python on Its Code, Not on Its Config #1800. Python directories are declared by a caller input to validate-task.yml, mirrored in the registry so the audit can catch a missing declaration. Every Python repository owes full gates (lint, format, type check, tests, and coverage), scripts-only ones included. Put the adoption order to the maintainer as a prompt first. Done looks like: detection keyed on **/*.py, the lint and unit-test jobs running in each declared directory, the lint-only profile's unittest suite running under coverage, and the audit comparing the input to the registry. Fold Spec: python.profile.detect does not describe a virtual uv workspace root #1778 in rather than fixing it alone.
2. configure.sh Resolves a Registry Entry by Name Rather Than by owner/repo Identity #1894: move every registry lookup in repo-config/configure.sh from the bare name to the owner/repo identity, and check spec/audit.py for the same shape.
3. Three Test Harnesses Build a Stand-In PATH With an Empty Fallback When PATH Is Unset #1862: three older test harnesses build a stand-in PATH with an empty fallback. Each site needs its own reading, since one empties PATH on purpose.

External blockers

• PlexCleaner's adoption of the hub validator waits on Gate Every Repository's Python on Its Code, Not on Its Config #1800 being promoted. Adopting earlier would silently drop Python lint for its RegressionTests/. Its session will drop ref: and the publish-release.yml:46-47 comment at adoption, and under Gate Every Repository's Python on Its Code, Not on Its Config #1800's full-gates decision that directory will need a test suite with coverage. validate-task.yml: three gaps blocking the last carried-copy repo from adopting it (no ref input, root-relative Python detection, no coverage assertion) #1134 carries the release note for whichever PlexCleaner session picks it up.
• CodeRabbit reviews on request only here, and it rate-limits for hours after a burst. It was limited for most of this round and reviewed Promote the C# Coverage Report Check, Archived-Repository Exemption, and Overnight Fixes to Main #1850 only once its quota reset.

Internal dependencies

• Gate Every Repository's Python on Its Code, Not on Its Config #1800 before Spec: python.profile.detect does not describe a virtual uv workspace root #1778, since Spec: python.profile.detect does not describe a virtual uv workspace root #1778's python.profile.detect gap changes shape once detection keys on code rather than config.
• Gate Every Repository's Python on Its Code, Not on Its Config #1800 before PlexCleaner's adoption, per the blocker above.

State

Re-derive each of these at resume.

• Hub: main is at Promote the C# Coverage Report Check, Archived-Repository Exemption, and Overnight Fixes to Main #1850's merge commit, released as 2.0.703, and this machine's skills were refreshed from it.
• Open PRs: Contain Each Bash Tool Call in a Task- and Memory-Capped Scope #1900 (for A Probe's Self-Recursive Command Shim Ran Unbounded and Unreaped, Taking Down the Host #1890), owned by the other hub session projecttemplate-ae, which merges it into develop and drives the next promotion. Don't push to that promotion without coordinating.
• Worktrees and branches: every branch this round created is merged and deleted, locally and on the remote. The base clone is clean on develop. The detached *-resync worktrees belong to other sessions.
• Other handoff tracks: default (Session Handoff [default]: Audit Report Authorship Settled, Unattended Loop Live-Tested, 2.0.680 Released #1828) and auto-1635 (Session Handoff [auto-1635]: Isolate Operators in the Guard's Shell-Token Fallback (#1635) #1835) are other lanes. This link opens the python-contract track rather than closing Session Handoff [default]: Audit Report Authorship Settled, Unattended Loop Live-Tested, 2.0.680 Released #1828.

The parked decision queue

One issue carries the decision label: #1844 (the #1635 token-fallback fix: authorize a third round or drop it). It belongs to the auto-1635 lane, and this session presents it at close.

What the last round did

• Fail the C# Unit Test Step When No Coverage Report Was Written #1848 fails the C# unit test step when no non-empty Cobertura report was written, clearing ./coverage first. It declines validate-task.yml: three gaps blocking the last carried-copy repo from adopting it (no ref input, root-relative Python detection, no coverage assertion) #1134's ref input, since a bare actions/checkout fetches github.sha and a reusable workflow reads its caller's github context. D1.2 and D1.6 were updated, and a test refuses any ref key in the task.
• Promotion-PR fixes: Say the Archived-Exemption Region Makes No gh Call of Its Own #1854 and Scope the End-to-End Docstring to an Archived Repository Given by Name #1858 (Exempt an Archived Repository From configure.sh's Checks #1846's docstrings), Fall Back to the Default Search Path When PATH Is Unset #1859 and Fall Back to the Default Search Path in the Archived End-to-End Test #1863 (PATH fallback), Drop the Issue Reference From repo-config's Archived-Exemption Note #1893 (dropped a README issue reference Copilot flagged on six rounds), and Describe IL3058 as a Missing IsAotCompatible Mark #1895 (IL3058 wording in dotnet-codestyle).
• Declined with evidence on Promote the C# Coverage Report Check, Archived-Repository Exemption, and Overnight Fixes to Main #1850: a set -u crash in tool_shadow_path (bash assigns a default PATH when none is set), a bare .github/ pin skip in repo_gate.py (actionlint rejects that form), and CS_PATH versus os.defpath on Fall Back to the Default Search Path in the Archived End-to-End Test #1863.
• Merged Promote the C# Coverage Report Check, Archived-Repository Exemption, and Overnight Fixes to Main #1850 and released 2.0.703. It closed validate-task.yml: three gaps blocking the last carried-copy repo from adopting it (no ref input, root-relative Python detection, no coverage assertion) #1134, Fix Three Defects in the Handoff and Burndown Skills Raised on a Downstream Carry #1847, Scope VerifyReferenceAotCompatibility to an AOT Publish in dotnet-codestyle #1857, tool_shadow_path Reports a Shadow It Never Tested For, So a Copy Behind BIN_DIR Reads as a PATH Problem #1644, Six Installer Tests Fail Whenever the Checkout Is Dirty #1641, repo_gate.py Reads ls-files Without Pinning or Decoding Git's Quoting, So a Non-ASCII Name Crashes It or Leaves Coverage #1580, repo_gate.py Decodes ls-files stderr Strictly, So a Non-UTF-8 Root Path Crashes It #1872, scripts/pr_review.py reply --match Cannot Select a Thread Whose Body Uses Typographic Quotes #1299, configure.sh's ruleset_id() Still Reads a Plain jq -r, Blocking check_ruleset() on Windows #1253, Action Pinning Rule Requires a v-Prefixed Comment That Hub Release Tags Cannot Carry #1805, and A Local ./ Reference in a Called Reusable Workflow Does Not Run at the Workflow Commit #1886.
• Filed Three Test Harnesses Build a Stand-In PATH With an Empty Fallback When PATH Is Unset #1862 and configure.sh Resolves a Registry Entry by Name Rather Than by owner/repo Identity #1894, and recorded Gate Every Repository's Python on Its Code, Not on Its Config #1800's two decisions on it.

What not to repeat

• A class sweep grepped by phrasing misses paraphrases. After fixing one wrong claim ("runs before gh is ever invoked"), the sweep grepped three phrasings and missed "exits before its first gh call" in the same file. The miss cost a promotion round and a fix PR (Scope the End-to-End Docstring to an Archived Repository Given by Name #1858). The PATH sweep searched for os.environ['PATH'] only and missed .get('PATH', ''), which cost another (Fall Back to the Default Search Path in the Archived End-to-End Test #1863). Sweep by the subject (every statement touching gh ordering, every read of PATH), not by the wording of the instance.
• Justifying clauses in a docstring drew a finding every round. Say the Archived-Exemption Region Makes No gh Call of Its Own #1854's docstring took four wordings, each reviewed pass catching the reason the previous one gave. State what the harness does and stop.
• Don't take the default track when another session owns its head. new on default would have closed Session Handoff [default]: Audit Report Authorship Settled, Unattended Loop Live-Tested, 2.0.680 Released #1828, another lane's live link.
• A promotion PR's head moves while it's driven. Nine peer PRs landed on develop overnight, so Promote the C# Coverage Report Check, Archived-Repository Exemption, and Overnight Fixes to Main #1850's findings and body drifted. Diff the carried list against git log origin/main..origin/develop before calling it ready. Distinguish ./ From $/ Resolution in the Pin Rule's Prose #1888 was missing until that check.

New learnings

• A bare actions/checkout in a reusable workflow checks out the triggering commit. Recorded in WORKFLOW.md D1.2 and guarded by a test in scripts/tests/test_release_guards.py.
• With PATH unset, bash assigns its compiled-in default (/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:.), so set -u never trips on $PATH in a script run under bash. Recorded in Promote the C# Coverage Report Check, Archived-Repository Exemption, and Overnight Fixes to Main #1850's thread on tool_shadow_path.

[ptr727]

Parked decision queue at close: 1 issue, #1844, put to the maintainer and answered. The third round was authorized, and the answer is recorded on #1844 (closed) and on the auto-1635 lane's link #1835. The queue is now empty.