[verified] Add fail-closed rework provider readback adapter

This commit is contained in:
2026-10-12 01:46:39 +00:00
parent d47df21578
commit 2ad836f332
8 changed files with 1744 additions and 8 deletions
+12
View File
@@ -29,6 +29,18 @@ reject them merely because the conventional Unix-domain path encoding exceeds
foreign/replaced paths, close every client and directory descriptor, and retain
unauthenticated-token rejection behavior.
Rework readback contract: the impl role's canonical `rework_comment.py snapshot`
and `verify-live` commands collect authenticated GET-only provider state through
`rework_readback.py` and `rework_readback_cli.py`. Focused coverage lives in
`harness/tests/impl/test_rework_readback.py` and
`harness/tests/impl/test_rework_readback_transport.py`; run them with the existing
`harness/tests/impl/test_rework_comment.py` regressions. They exercise real
renderer/verifier integration and a local HTTP fixture, not live Gitea access.
Provider/baseline fingerprints, exact identity/endpoints, complete pagination,
create/reuse deltas, metadata causality and failed-receipt preservation are
fail-closed. The workflow contract and canonical runtime artifact paths are in
`harness/agents/impl/skills/gitea-issue-rework/references/readback.md`.
It validates all `test*.py` files recursively under exactly these required
roles: `common`, `spec`, `impl`, and `review`. `harness/tests`, every role, and
every nested test package must have an `__init__.py`; every role and every