Skip to content

Harden AGENTS.md guidance provenance - #586

Open
chubes4 wants to merge 3 commits into
mainfrom
fix/585-guidance-provenance
Open

Harden AGENTS.md guidance provenance#586
chubes4 wants to merge 3 commits into
mainfrom
fix/585-guidance-provenance

Conversation

@chubes4

@chubes4 chubes4 commented Sep 9, 2026

Copy link
Copy Markdown
Member

Fixes #585

Summary

  • record deterministic producer provenance for clean, dirty, and packaged guidance sources
  • distinguish authoritative disabled/unavailable composition from stale generated guidance
  • make upgrade.sh --agents-md-only restore prior user state and fail when recomposition fails or remains stale
  • add integration coverage that executes the real upgrade flow and verifies byte-for-byte restoration

Verification

  • bash tests/agents-md-guidance.sh
  • bash tests/agents-md-composition-integration.sh
  • bash tests/verify.sh
  • bash tests/workspace-installation.sh
  • bash -n on changed shell files
  • git diff --check

The complete shell sweep also ran; four pre-existing host-dependent assertions in tests/service-migration.sh remain unrelated to this change.

AI Assistance

OpenAI GPT-5.6 Terra via OpenCode implemented and iteratively corrected the change. OpenAI GPT-5.6 Sol via OpenCode orchestrated independent reviews, verification, and PR finalization.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Expose installed guidance provenance and stale-runtime remediation

1 participant