Skip to content

Prepare pinned native advisor workload recipe and offline checks - #1973

Draft
ViperJuice wants to merge 1 commit into
mainfrom
t3/openshell-advisor-workload
Draft

ViperJuice wants to merge 1 commit into
mainfrom
t3/openshell-advisor-workload

Conversation

@ViperJuice

@ViperJuice ViperJuice commented Nov 9, 2026 •

Copy link
Copy Markdown
Collaborator

The existing review-runner recipe contains the Python worker. Add a separate linux/amd64 source recipe containing pinned Claude Code 2.1.321, Codex 0.167.0, Gemini through agy 1.5.3, and Grok 1.0.77 payloads, with Node and pinned Debian runtime dependencies.

The exporter validates 59 allowlisted files against exact hashes. The recipe creates sandbox UID/GID 10001 in both OCI configuration and the account database, and performs an offline ELF/interpreter/library/realpath check as that user. Documentation records provenance, subscription prerequisites, observed invocation surfaces and the later integration boundary. Remote execution behavior is unchanged.

Validation: 13 offline unit tests passed; Ruff 0.15.5 and diff whitespace checks passed; the real 59-file export completed; seven clean-home CLI help checks passed; 36 host ELF objects had resolvable dependencies and no GLIBC requirement above 2.36. Host checks do not qualify the image.

Draft: full image build deferred under shared-compute limits; no workload OCI digest or publication is claimed. Supported access-only subscription delivery and exact egress still require qualification for all four advisors. No live provider or gateway operation, Gate A dispatch, or remote-driver activation was performed.


Autofix with [code]smith
Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant