06 - Agent execution and CI governance
Backlog normalization in progress: this milestone contains old platformctl/governance hardening plus W9 cleanup/Vistula dogfood. Use #535/#536/#537 to make the percent real.
No due date
100% Completed
fix(platformctl): require break-glass ack
All checks were successful
canary-required / collect-diff (pull_request) Successful in 4s
platformctl plan / auto-apply scope (pull_request) Successful in 17s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 15s
python-ci / Python 3.11 (pull_request) Successful in 35s
python-ci / Python 3.12 (pull_request) Successful in 36s
python-ci / Python 3.13 (pull_request) Successful in 36s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s
canary-required / canary (pull_request) Successful in 12s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 17s
patchwarden-pr-sanity / sanity (pull_request) Successful in 3m29s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s
agent/codex
class/security-sensitive
risk/process
tier/full
fix(platformctl): bind apply actor identity
All checks were successful
canary-required / collect-diff (pull_request) Successful in 4s
platformctl plan / auto-apply scope (pull_request) Successful in 17s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 16s
python-ci / Python 3.11 (pull_request) Successful in 35s
python-ci / Python 3.12 (pull_request) Successful in 36s
python-ci / Python 3.13 (pull_request) Successful in 37s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s
canary-required / canary (pull_request) Successful in 12s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 16s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / sanity (pull_request) Successful in 3m48s
agent/codex
class/security-sensitive
risk/process
tier/full
test(platformctl): parse apply workflow contract structurally
All checks were successful
canary-required / collect-diff (pull_request) Successful in 4s
platformctl plan / auto-apply scope (pull_request) Successful in 17s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 16s
python-ci / Python 3.11 (pull_request) Successful in 36s
python-ci / Python 3.12 (pull_request) Successful in 36s
python-ci / Python 3.13 (pull_request) Successful in 36s
canary-required / canary (pull_request) Successful in 11s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 17s
patchwarden-pr-sanity / sanity (pull_request) Successful in 3m37s
agent/codex
class/security-sensitive
risk/process
tier/full
fix(platformctl): validate health container inputs
All checks were successful
canary-required / collect-diff (pull_request) Successful in 4s
platformctl plan / auto-apply scope (pull_request) Successful in 16s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 15s
python-ci / Python 3.11 (pull_request) Successful in 35s
python-ci / Python 3.12 (pull_request) Successful in 36s
python-ci / Python 3.13 (pull_request) Successful in 36s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s
canary-required / canary (pull_request) Successful in 12s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 17s
patchwarden-pr-sanity / sanity (pull_request) Successful in 6m11s
agent/codex
class/security-sensitive
risk/process
tier/full
fix(platformctl): harden apply status artifacts
All checks were successful
canary-required / collect-diff (pull_request) Successful in 3s
platformctl plan / auto-apply scope (pull_request) Successful in 17s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 15s
python-ci / Python 3.11 (pull_request) Successful in 35s
python-ci / Python 3.12 (pull_request) Successful in 36s
python-ci / Python 3.13 (pull_request) Successful in 35s
canary-required / canary (pull_request) Successful in 12s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 16s
patchwarden-pr-sanity / sanity (pull_request) Successful in 1m5s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s
agent/codex
class/security-sensitive
risk/process
tier/full
test(l4): clean active prompt cross-link debt
All checks were successful
canary-required / collect-diff (pull_request) Successful in 3s
python-ci / Python 3.11 (pull_request) Successful in 36s
python-ci / Python 3.12 (pull_request) Successful in 36s
python-ci / Python 3.13 (pull_request) Successful in 36s
canary-required / canary (pull_request) Successful in 12s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 16s
patchwarden-pr-sanity / sanity (pull_request) Successful in 4m11s
agent/codex
risk/process
tier/lite
fix(platformctl): verify apply PR base branch
All checks were successful
canary-required / collect-diff (pull_request) Successful in 3s
platformctl plan / auto-apply scope (pull_request) Successful in 17s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 15s
python-ci / Python 3.11 (pull_request) Successful in 36s
python-ci / Python 3.12 (pull_request) Successful in 37s
python-ci / Python 3.13 (pull_request) Successful in 36s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s
canary-required / canary (pull_request) Successful in 12s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 16s
patchwarden-pr-sanity / sanity (pull_request) Successful in 4m34s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s
class/security-sensitive
feat(platformctl): emit apply no-op events
Some checks failed
base-is-main / guard (pull_request) Successful in 1s
canary-required / collect-diff (pull_request) Successful in 4s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s
platformctl plan / auto-apply scope (pull_request) Successful in 17s
python-ci / Python 3.11 (pull_request) Successful in 35s
python-ci / Python 3.12 (pull_request) Successful in 36s
python-ci / Python 3.13 (pull_request) Successful in 36s
patchwarden-pr-sanity / sanity (pull_request) Failing after 4m44s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 15s
canary-required / canary (pull_request) Successful in 12s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 16s
fix(platformctl): emit approval failure reasons
All checks were successful
canary-required / collect-diff (pull_request) Successful in 6s
platformctl plan / auto-apply scope (pull_request) Successful in 24s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 23s
python-ci / Python 3.11 (pull_request) Successful in 45s
python-ci / Python 3.12 (pull_request) Successful in 49s
python-ci / Python 3.13 (pull_request) Successful in 49s
base-is-main / guard (pull_request) Successful in 2s
canary-required / canary (pull_request) Successful in 17s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 26s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 7s
patchwarden-pr-sanity / sanity (pull_request) Successful in 4m58s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 8s
class/security-sensitive
docs(platformctl): document phase 05 apply gate
All checks were successful
canary-required / collect-diff (pull_request) Successful in 7s
infra-docs-drift / docs-drift (pull_request) Successful in 7s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 26s
python-ci / Python 3.11 (pull_request) Successful in 45s
python-ci / Python 3.12 (pull_request) Successful in 51s
python-ci / Python 3.13 (pull_request) Successful in 47s
workflow-lint / lint (pull_request) Successful in 7s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 6s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 6s
canary-required / canary (pull_request) Successful in 16s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 27s
patchwarden-pr-sanity / sanity (pull_request) Successful in 2m53s
class/security-sensitive
docs(platformctl): document health prerequisites
All checks were successful
canary-required / collect-diff (pull_request) Successful in 6s
infra-docs-drift / docs-drift (pull_request) Successful in 7s
python-ci / Python 3.11 (pull_request) Successful in 46s
python-ci / Python 3.12 (pull_request) Successful in 47s
python-ci / Python 3.13 (pull_request) Successful in 47s
workflow-lint / lint (pull_request) Successful in 7s
base-is-main / guard (pull_request) Successful in 1s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 6s
canary-required / canary (pull_request) Has been skipped
patchwarden-client-dry-run / dry-run (pull_request) Successful in 1m6s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 6s
patchwarden-pr-sanity / sanity (pull_request) Successful in 2m44s
class/security-sensitive
fix(platformctl): whitelist smoke subprocess environment
All checks were successful
canary-required / collect-diff (pull_request) Successful in 6s
platformctl plan / auto-apply scope (pull_request) Successful in 27s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 26s
python-ci / Python 3.11 (pull_request) Successful in 50s
python-ci / Python 3.12 (pull_request) Successful in 48s
python-ci / Python 3.13 (pull_request) Successful in 50s
base-is-main / guard (pull_request) Successful in 2s
canary-required / canary (pull_request) Successful in 15s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 28s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 6s
patchwarden-pr-sanity / sanity (pull_request) Successful in 4m43s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 7s
class/security-sensitive
fix(ci): guard apply workflow exit code output
All checks were successful
canary-required / collect-diff (pull_request) Successful in 6s
platformctl plan / auto-apply scope (pull_request) Successful in 28s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 29s
python-ci / Python 3.11 (pull_request) Successful in 51s
python-ci / Python 3.12 (pull_request) Successful in 54s
python-ci / Python 3.13 (pull_request) Successful in 54s
base-is-main / guard (pull_request) Successful in 2s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 6s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 7s
canary-required / canary (pull_request) Successful in 17s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 27s
patchwarden-pr-sanity / sanity (pull_request) Successful in 7m13s
class/security-sensitive
fix(platformctl): restrict apply status artifact permissions
All checks were successful
canary-required / collect-diff (pull_request) Successful in 9s
platformctl plan / auto-apply scope (pull_request) Successful in 1m16s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 3m18s
python-ci / Python 3.11 (pull_request) Successful in 40s
python-ci / Python 3.12 (pull_request) Successful in 47s
python-ci / Python 3.13 (pull_request) Successful in 49s
base-is-main / guard (pull_request) Successful in 1s
canary-required / canary (pull_request) Successful in 18s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 26s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 7s
patchwarden-pr-sanity / sanity (pull_request) Successful in 2m51s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 8s
class/security-sensitive
fix(ci): align Patchwarden comment actor token
Some checks failed
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s
platformctl plan / auto-apply scope (pull_request) Successful in 23s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 21s
python-ci / Python 3.11 (pull_request) Successful in 42s
canary-required / collect-diff (pull_request) Successful in 4s
infra-docs-drift / docs-drift (pull_request) Successful in 5s
python-ci / Python 3.13 (pull_request) Successful in 42s
python-ci / Python 3.12 (pull_request) Successful in 44s
workflow-lint / lint (pull_request) Successful in 5s
base-is-main / guard (pull_request) Successful in 1s
canary-required / canary (pull_request) Has been skipped
patchwarden-client-dry-run / dry-run (pull_request) Successful in 21s
patchwarden-pr-sanity / sanity (pull_request) Failing after 1m43s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
agent/codex
class/security-sensitive
kind/chore
risk/process
size/small
tier/full
feat(vistula): add RICE priority comments
Some checks failed
base-is-main / guard (pull_request) Successful in 1s
canary-required / collect-diff (pull_request) Successful in 5s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
platformctl plan / auto-apply scope (pull_request) Successful in 25s
python-ci / Python 3.11 (pull_request) Successful in 46s
python-ci / Python 3.12 (pull_request) Successful in 46s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 26s
patchwarden-pr-sanity / sanity (pull_request) Failing after 45s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 23s
python-ci / Python 3.13 (pull_request) Successful in 47s
canary-required / canary (pull_request) Has been skipped
docs(vistula): add project capsule
Some checks failed
pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 22s
python-ci / Python 3.12 (pull_request) Successful in 46s
canary-required / canary (pull_request) Successful in 15s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 23s
base-is-main / guard (pull_request) Successful in 2s
canary-required / collect-diff (pull_request) Successful in 5s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
platformctl plan / auto-apply scope (pull_request) Successful in 26s
python-ci / Python 3.11 (pull_request) Successful in 42s
python-ci / Python 3.13 (pull_request) Successful in 45s
patchwarden-pr-sanity / sanity (pull_request) Failing after 1m54s