Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

[RET-A3][P0] Extract shared dependencies and preserve shared security regressions before pruning LOCAL

Chiusa
  • Qualcosa non va?
#386 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

Una pull request collegata è già stata integrata.

  • #410 di @iceboundrock — integrata

Valutazione

Difficoltà
5/5
Tempo stimato
Più di una settimana
Idoneità per principianti
28/100
Tipo di issue
Refactoring
Chiarezza
Abbastanza chiara
Stato di attività
Attiva
Stack tecnologico
github, python
Ambito
backend, security, testing

Direzione di ricerca

Start by reviewing RET-A1 and the LOCAL-related branches and tests in the current main branch, then map each listed invariant to its existing implementation and coverage. Add REMOTE-focused conformance tests for the replacement behavior before removing LOCAL tests, including cases that reject forbidden fallback and missing verified evidence. Done means the preservation table covers every shared invariant and the tests require no real network calls; this work is blocked by RET-A1.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

enhancement

Parent EPIC: #383 (https://github.com/iceboundrock/AutoForge/issues/383). Planning baseline: main 01c5b7e (2026-10-28); recheck current main before implementation.

Safety: Planning only at creation; no implementation, external effects, merges, or release. Preserve Controller authority, strict state/protocol parsing, independent read-back, immutable PR HEAD/base binding, reconciliation, explicit operator approval, fail-closed sandbox and credential boundary. No real GitHub mutations/models in automated tests.

Workstream: RET-A3. Dependencies: RET-A1.

Scope

Audit all LOCAL-related branches before deletion; identify generic mechanisms hidden in local_* implementation and retain their needed behavior as independent, REMOTE-oriented tests.

  • Prove sandbox.mode required/preferred/disabled semantics: specifically preferred fails closed for issue-driven runs; preserve sandbox config pin, config placement guard, filesystem/credential/process boundaries.
  • Preserve controller-owned candidate validation and certificate semantics bound to REMOTE commit/tree/PR, including no results accepted without verified evidence.
  • Keep durable effect journal, in-doubt operation read-back, no duplicate GitHub effects, failed launch accounting, safe checkpoints, run logs, resource bounds, and exact head verification.
  • Preserve shared provider adapters, error correction, interruption, operator action and reviewer behavior; identify live Pi smoke test currently constructed around LOCAL and define safe replacement without requiring paid/live calls in CI.
  • Add focused protection/conformance tests before removing associated LOCAL tests.

Acceptance

  • Code-and-test preservation table shows replacement coverage for each shared invariant.
  • REMOTE independent tests fail on deliberate forbidden fallback/missing evidence, not only on positive cases.
  • No behavioral/security broadening or real network tests.

Blocked by: RET-A1. Blocks: RET-A5; coordinate RET-A4.

Lingua principale
Python
Stelle
0
Fork
0
Merge medio
5h 16m
PR unite (30g)
100

Preparare l'ambiente

Questo progetto non fornisce container di sviluppo, Dockerfile né guida per i contributori, quindi l'ambiente è a tuo carico: parti dal suo README e consulta la nostra guida al primo contributo per i passaggi generali.

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di iceboundrock/AutoForge

Tutte le issue di iceboundrock/AutoForge

Issue simili

Altre issue su Python

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.