chore: self-remediate workflow blockers (#67) #68

Merged

adrian.tkacz merged 2 commits from issue-67-loop-self-remediation into develop

2026-10-05 14:15:12 +00:00

kilo commented

2026-10-05 13:40:35 +00:00

Member

Refs #67

Updates the shared loop, implementation, review and remediation guidance to classify engineering/execution blockers separately from owner decisions. It requires bounded diagnosis and changed-condition retries, secret-safe sanitized test/reviewer environments, independent pinned public-source verification, and explicit reviewer infrastructure/finding/uncertainty outcomes. The existing 10-review budget, exact-HEAD approval, validation, security, scope and merge gates remain intact. A one-time owner-authorized worktree exception protects concurrent checkouts; normal workflow remains single-checkout by default.

Acceptance evidence:

Base: e5f30c9cef89e9991c12cae924093cf95d87d75b
Current pushed head: 2eb6e402c346c3eeb8554797468700cf7bd6c2ef
Sanitized make check: passed (978 tests, 50 subtests; format/lint/type/import-boundary/secret/diff gates passed).
Sanitized make package-check: passed (reproducible wheel/sdist, isolated install and CLI smoke checks).
Review ordinal 1 COMMENT: reviewer couldn't read the sibling worktree due external_directory: deny; no source review/findings.
Review ordinal 2 COMMENT: scoped checkout access was added, but global Kilo bash: deny blocked required git -C verification before source review; no findings or approval. Do not merge without independent exact-HEAD APPROVE.
Reviewer filesystem access is scoped to canonical Kernel worktree paths; no credential access or global Kilo permission changes were made.

Workflow/documentation only; no product/runtime behavior, persistent infrastructure or new dependency.

Refs #67 Updates the shared loop, implementation, review and remediation guidance to classify engineering/execution blockers separately from owner decisions. It requires bounded diagnosis and changed-condition retries, secret-safe sanitized test/reviewer environments, independent pinned public-source verification, and explicit reviewer infrastructure/finding/uncertainty outcomes. The existing 10-review budget, exact-HEAD approval, validation, security, scope and merge gates remain intact. A one-time owner-authorized worktree exception protects concurrent checkouts; normal workflow remains single-checkout by default. Acceptance evidence: - Base: `e5f30c9cef89e9991c12cae924093cf95d87d75b` - Current pushed head: `2eb6e402c346c3eeb8554797468700cf7bd6c2ef` - Sanitized `make check`: passed (978 tests, 50 subtests; format/lint/type/import-boundary/secret/diff gates passed). - Sanitized `make package-check`: passed (reproducible wheel/sdist, isolated install and CLI smoke checks). - Review ordinal 1 COMMENT: reviewer couldn't read the sibling worktree due `external_directory: deny`; no source review/findings. - Review ordinal 2 COMMENT: scoped checkout access was added, but global Kilo `bash: deny` blocked required `git -C` verification before source review; no findings or approval. Do not merge without independent exact-HEAD APPROVE. - Reviewer filesystem access is scoped to canonical Kernel worktree paths; no credential access or global Kilo permission changes were made. Workflow/documentation only; no product/runtime behavior, persistent infrastructure or new dependency.

kilo added 1 commit

2026-10-05 13:40:35 +00:00