diff --git a/conductor/tracks/renovate-codecov-verification_20260801/evidence.md b/conductor/tracks/renovate-codecov-verification_20260801/evidence.md index a2aba78..81e4045 100644 --- a/conductor/tracks/renovate-codecov-verification_20260801/evidence.md +++ b/conductor/tracks/renovate-codecov-verification_20260801/evidence.md @@ -33,6 +33,10 @@ Verified on 2026-08-01 against `edithatogo/authentext`. that endpoint. - A paginated search of all repository issues and pull requests found no item authored by `renovate[bot]` or another Renovate bot identity. +- The merged `renovate-hosted-monitor.yml` workflow now checks daily and on + demand, publishes a JSON evidence artifact, and emits a warning without + blocking normal CI when the Dashboard/PR proof is absent. Its local unit + coverage is included in the repository's enforced thresholds. - The authenticated GitHub CLI token can administer the repository but cannot install or enumerate user-account GitHub App installations. GitHub returned `403` for the user-installations endpoint because it requires a GitHub-App diff --git a/conductor/tracks/renovate-codecov-verification_20260801/plan.md b/conductor/tracks/renovate-codecov-verification_20260801/plan.md index 96bf22a..14f8e66 100644 --- a/conductor/tracks/renovate-codecov-verification_20260801/plan.md +++ b/conductor/tracks/renovate-codecov-verification_20260801/plan.md @@ -13,6 +13,8 @@ - [x] Verify the pull-request matrix and Codecov upload result. - [x] Record owner-reported Renovate App installation and repository onboarding state. +- [x] Add a scheduled, non-blocking hosted-evidence monitor with deterministic + tests and artifact output. - [ ] Verify Renovate app access and a Dashboard or pull request. - [x] Retain Dependabot because Renovate is not yet proven healthy. - [x] Record external authorization blockers without overstating completion.