fix(engine): re-validate screenshot matrix evidence on re-push (#8866) - #9038
Conversation
…ored#8866) Reuse the presence-mode head-SHA/evidence-fingerprint checkpoint in matrix mode so an unchanged matrix table cannot silently PASS after a new commit. Co-authored-by: Cursor <cursoragent@cursor.com>
|
Superagent didn't find any vulnerabilities or security issues in this PR. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #9038 +/- ##
==========================================
- Coverage 93.88% 93.88% -0.01%
==========================================
Files 809 809
Lines 80553 80560 +7
Branches 24436 24441 +5
==========================================
+ Hits 75628 75631 +3
Misses 3560 3560
- Partials 1365 1369 +4
Flags with carried forward coverage won't be shown. Click here to find out more.
|
|
Tip ✅ LoopOver review result - approve/merge recommendedReview updated: 2026-07-26 16:35:07 UTC
Review summary Nits — 5 non-blocking
Decision drivers
Context & advisory signals — never blocks the verdict
Linked issue satisfactionAddressed Review context
Contributor next steps
Signal definitions
🧪 Chat with LoopOverAsk LoopOver a question about this PR directly in a comment — grounded only in the same cached, public-safe facts shown above, never a new claim.
Full command reference: https://loopover.ai/docs/loopover-commands 🧪 Experimental — new and may change. 🟩 Safe / merged · 🟦 Advisory · 🟨 Held for review · 🟥 Blocked / closed 💰 Earn for open-source contributions like this. Gittensor lets GitHub contributors earn for the work they already do — register to start earning →. Checked by LoopOver, a quiet PR intelligence layer for OSS maintainers.
|
PR body
Summary
evidenceFreshnessForHeadhelper and runs it from both presence and matrix branches ofevaluateScreenshotTableGate, so matrix mode persists/reuses the same(headSha, evidenceFingerprint)checkpoint presence mode already used.queue-3regression mirroring the existing presence-mode stale-push test.Scope
type(scope): short summaryConventional Commit format, for examplefix(api): restore profile access checks.CONTRIBUTING.mdand does not reintroduce GitHub Pages, VitePress,site/, orCNAME.Closes #123) — a linked open issue is required for every contributor PR.Validation
git diff --checknpx vitest run test/unit/screenshot-table-gate-engine.test.ts test/unit/screenshot-table-gate.test.ts -t "8866|matrix mode"— passednpx vitest run test/unit/queue-3.test.ts -t "stale-screenshot-table-fix|#8866"— 2 passednpx diff-cover coverage/lcov.info --compare-branch=origin/main --include-untracked— 100% patch linesnpm run actionlintnpm run typechecknpm run test:coveragenpm audit --audit-level=moderateIf any required check was skipped, explain why:
Narrow engine gate staleness fix; full
test:cileft for the opener before push. Targeted engine + queue-3 tests cover the matrix stale/re-affirm/no-headSha paths.Notes for reviewers / gate
site/,CNAME,**/lovable/**, orCHANGELOG.md.