Repository navigation
fix: Accept the reviewed main frontend release source - #1082
Conversation
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. What shall we delve into next? Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: ceb249d812
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
Codex Review: Didn't find any major issues. Chef's kiss. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Pigbibi
added
the
agent-approved
AI assistance
Codex (host-selected GPT-6 family; exact version unavailable).
What changed
Allow the already-reviewed merged main frontend release in the manual console entry. Pin its exact source, tree and asset map; require frontend-only inputs, keep receiver checks enabled, and reject Secret/profile sync. After the build, verify the same map and clean output instead of applying the legacy frontend overlay. Update the existing release evidence documentation and offline safety tests.
How verified
invalid_frontend_release_modebefore the selector repair, then separately reproduced overlay rejection before its repair; both regressions now pass.Why
The prior authorized FE-only dispatch stopped before deployment because this merged release was absent from the legacy source allowlist. The downstream overlay also expected legacy assets. This change adds one exact reviewed main release without admitting arbitrary SHAs.
Risk
High: protected manual release workflow. Existing job selection, Secret/profile synchronization, external-flow/resume, rollback, permissions, Environment and runtime configuration preservation gates remain intact. Draft only. No deployment dispatch, Secret sync, Environment approval, trading or risk-switch change in this job. Remote CI and exact-head review are pending; runtime adoption remains NOT_PROVEN.
Central publication checker
publication-check/2.0-advisory, build83d9d1130377: 3961 matching lines / 3964 findings across the complete tracked tree (advisory). First 20 masked matches:/.github/CODEOWNERS @<PROJECT_ID>/.github/workflows/ @<PROJECT_ID>/actions/publish-runtime-execution-evidence/ @<PROJECT_ID>/python/scripts/check_credential_maintenance_read.py @<PROJECT_ID>/python/scripts/credential_maintenance_notify.py @<PROJECT_ID>/python/scripts/deployment_bundle_contract.py @<PROJECT_ID>/python/scripts/deterministic_risk_gate.py @<PROJECT_ID>/python/scripts/execution_evidence_projection.py @<PROJECT_ID>/python/scripts/forward_observation_risk_control.py @<PROJECT_ID>/python/scripts/long_horizon_risk_composer.py @<PROJECT_ID>/python/scripts/long_horizon_risk_composer_v2.py @<PROJECT_ID>/python/scripts/long_horizon_risk_observation_ingress.py @<PROJECT_ID>/python/scripts/long_horizon_risk_observation_ingress_v2.py @<PROJECT_ID>/python/scripts/paper_risk_admission_receipt.py @<PROJECT_ID>/schemas/qsl-deployment-bundle.v1.schema.json @<PROJECT_ID>/schemas/qsl-forward-observation-risk-control.v1.schema.json @<PROJECT_ID>/schemas/qsl-reconcile-only-risk-control.v1.schema.json @<PROJECT_ID>/scripts/provision_binance_recovery_credentials.sh @<PROJECT_ID>/scripts/provision_soxl_v7_review_credential.py @<PROJECT_ID>/web/strategy-switch-console/application/console_api/strategy_execution.js @<PROJECT_ID>