Skip to content

test(action): prove pull request reporting - #9

Closed
soulbah wants to merge 5 commits into
feat/002-pull-request-reportingfrom
test/002-pr-reporting-demo
Closed

soulbah wants to merge 5 commits into
feat/002-pull-request-reportingfrom
test/002-pr-reporting-demo

Conversation

@soulbah

@soulbah soulbah commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Spec and outcome

  • Spec or repository-only rationale: specs/002-pull-request-reporting/spec.md, REQ-009.
  • Accepted outcome: run branch Action on a real same-repository pull request and capture changed then unchanged comment, Summary, annotation, and artifact evidence.
  • Explicit non-goals: merge this proof branch, publish a release, use real Terraform, or retain demo fixture in dev.

Done when and evidence

  • Done when command or protocol: initial changed run creates one report; follow-up unchanged run updates that same marker-owned comment.
  • Evidence path or exact output: this pull request, its Actions runs, comment, Job Summaries, annotations, and artifacts.
  • Full gate: bun run verify passed locally with 151 tests, actionlint, deterministic bundle, and both secret scans.

Risk and privacy

  • Security/privacy impact: synthetic Terraform only; workflow grants pull-requests: write, uses normal pull_request, and passes existing secrets without exposing values.
  • Offline and determinism impact: exact Rootform release and vendored minimal official dialect subset; CLI stays offline after install.
  • Dependency or toolchain change: none.
  • Rollback path: close this PR and delete proof branch after evidence capture; nothing merges into product branches.

Review checklist

  • Scope matches accepted spec or repository-only rationale.
  • Success, boundary, failure, and regression paths have evidence proportional to risk.
  • No secret, real Terraform material, private AI material, or generated noise enters Git.
  • Primary reviewer inspected final diff and recorded remaining limits.

Exercise the local Action with an exact published Rootform release and a synthetic same-repository architecture change.

This proof branch is not intended to merge.
@github-actions

github-actions Bot commented Aug 31, 2026 •

Copy link
Copy Markdown

Rootform architecture review

base:ddc7884 → head:0313c1d

Note

Architecture is unchanged and policy checks passed.

Review gate Result
Architecture ✅ No changes
Policies ✅ Passed
Rootform 0.1.0-dev.2
Architecture changes

Rootform diff

No architectural change.

Policy checks

Rootform check

0 policies, 0 evaluations, 0 passed, 0 violated, 0 indeterminate

Evidence

Download complete evidence · Open workflow run

Run provenance
  • Mode: source
  • Current input: test/e2e/pull-request-reporting/current
  • Baseline input: test/e2e/pull-request-reporting/before
  • Base commit: ddc78843e488fff794de42b3f4732884ce1b22cc
  • Head commit: 0313c1d6674c2e3da09f8cf2ba4a8e5e771030d5

@soulbah soulbah mentioned this pull request Aug 31, 2026
4 tasks done
@soulbah

soulbah commented Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Live proof complete. Closing without merge as defined by this proof PR.

@soulbah soulbah closed this Aug 31, 2026
@soulbah
soulbah deleted the test/002-pr-reporting-demo branch August 31, 2026 23:15
soulbah added a commit that referenced this pull request Aug 31, 2026
## Spec and outcome

- Spec or repository-only rationale:
`specs/002-pull-request-reporting/spec.md` (Accepted).
- Accepted outcome: publish CLI-owned architecture diff, policy,
provenance, annotation, comment, and fixed artifact evidence for pull
requests.
- Explicit non-goals: semantic parsing in Action, Git fetching,
`pull_request_target`, custom check runs, PDF output, dialect
installation, or release publication.

## Done when and evidence

- Done when command or protocol: `bun run verify`; real same-repository
changed and unchanged pull-request runs update one marker-owned comment.
- Evidence path or exact output:
`specs/002-pull-request-reporting/evidence/e2e.md`; proof PR #9; changed
run 33447403911; unchanged run 33447592934; comment 5485676893; final
quality run 33448082670.
- Full gate: `bun run verify`

## Risk and privacy

- Security/privacy impact: dedicated optional comment token; fork and
non-PR writes blocked; release and comment credentials masked and
removed from CLI child environments.
- Offline and determinism impact: CLI remains offline after verified
install; only opt-in comment upsert and existing artifact upload use
network. Report order, byte ceilings, and artifact inventory are fixed.
- Dependency or toolchain change: none.
- Rollback path: remove additive inputs, outputs, report modules,
comment client, and diff artifacts; default SPEC-001 behavior remains
isolated.

## Review checklist

- [x] Scope matches accepted spec or repository-only rationale.
- [x] Success, boundary, failure, and regression paths have evidence
proportional to risk.
- [x] No secret, real Terraform material, private AI material, or
generated noise enters Git.
- [x] Primary reviewer inspected final diff and recorded remaining
limits.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant