Skip to content

fix(ci): prove the indeterminate verdict on unknown-until-apply evidence - #37

Merged
soulbah merged 1 commit into
devfrom
fix/runtime-indeterminate-proof
Oct 11, 2026
Merged

soulbah merged 1 commit into
devfrom
fix/runtime-indeterminate-proof

Conversation

@soulbah

@soulbah soulbah commented Oct 11, 2026

Copy link
Copy Markdown
Contributor

Change

The platform runtime proof checked a Kubernetes deployment Policy against the shared data Playground plan. Since the Playground scenarios were replanned as changes to existing infrastructure (#27), that plan declares no Kubernetes resources, so the check found no target and every native runtime job failed with Policy result status no_decision is not indeterminate.

The indeterminate verdict is now proven on the documented check-architecture plan analyzed without its saved plan. The new subnet's network stays unknown until apply, so the same Policy that passes on the locked project exits 3 as indeterminate. The proof also requires the unknown_until_apply reason, and the unused Kubernetes Policy leaves the synthetic pack.

Validation

  • bun scripts/verify-platform-runtime.ts passes end to end on macos-arm64 with the 0.2.1 candidate binary and with the published 0.2.0 binary: indeterminate 1 evaluation (exit 3), passed 3, violated 3.
  • Both binaries return no_decision for the removed Policy on the current shared data plan, so the failure came from the fixture, not from the binary.
  • bun test scripts/verify-platform-runtime.test.ts (29 pass), bun run typecheck, biome check.

The platform runtime proof checked a Kubernetes deployment Policy against
the shared data Playground plan. That scenario no longer declares
Kubernetes resources, so the check found no target and returned no
decision on every platform.

Analyze the documented check-architecture plan without its saved plan
instead: the new subnet's network stays unknown until apply, so the Policy
that passes on the locked project is indeterminate and exits 3. The proof
now also requires the unknown_until_apply reason and no longer depends on
what the Playground scenarios declare.
@rootform-contribution-delivery

rootform-contribution-delivery Bot commented Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Contribution progress

Source: 5c3be21ac398a64e3bb247918664aaf0c1e4e306

Selected validations: docs, cli, dialects, policies, examples, distribution, tooling, generated. Repository safety always runs.

Stage Status
Public validations Passed (checks)
Documentation preview Passed (open preview)
Development integration Passed
Staging sites Passed
Release Included in v0.2.1

Applicable consumers are synchronized on their development branches and the staging sites. Releases are published from main; the Release row follows them.

@soulbah
soulbah merged commit 8f2a6d4 into dev Oct 11, 2026
11 checks passed
@soulbah
soulbah deleted the fix/runtime-indeterminate-proof branch October 11, 2026 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant