[aviggiano]

Closes #280.

A runtime-refreshed marker byte-compared against the published copy and threw identically on every retry, stranding the attempt permanently. Now permits a difference confined to an entry's sha256 and only when it matches the file actually published. path, contract, contract_digest, primary, attempt_id, node_id, schema_version, and entry add/drop/reorder all still rejected. The source-proof path keeps its unconditional byte compare — that anti-tampering guarantee is deliberately not widened.

Greptile Summary

The PR allows a previously published verification marker to be replaced when runtime sanitization has changed only artifact digests and those digests match the current local files.

• Compares parsed marker skeletons after blanking only recognized sha256 fields.
• Requires at least one changed digest and verifies every changed digest against its in-tree artifact.
• Retains strict immutable byte comparison for ordinary publication files and source proofs.
• Adds regression tests for successful republication, unmatched digests, and non-digest marker changes.

Confidence Score: 5/5

The PR appears safe to merge, with the marker replacement exception constrained to verified digest refreshes.

The changed path retains immutable publication checks by default and bypasses byte equality only after confirming an otherwise identical marker whose changed digests match regular, non-symlinked files inside the artifact directory.

Important Files Changed

Filename	Overview
packages/modal/src/node-provider.ts	Introduces a narrowly scoped marker-republication exception that preserves non-digest fields and validates changed digests against safe local artifact files.
packages/modal/test/node-provider.test.ts	Adds focused coverage for the successful refresh path and rejection of unmatched digests or changes outside digest fields.

Sequence Diagram

sequenceDiagram
  participant Remote as Remote result
  participant Provider as Modal node provider
  participant Local as Local publication
  participant Gate as Runtime artifact gate
  Gate->>Local: Sanitize artifact and refresh marker digest
  Remote->>Provider: Return original artifact and marker
  Provider->>Provider: Compare marker skeletons
  Provider->>Local: Verify changed digest against current artifact
  Provider->>Local: Replace artifact directory
  Provider->>Local: Republish original marker

Loading

_{Reviews (1): Last reviewed commit: "fix(modal): let a runtime-refreshed veri..." | Re-trigger Greptile}

Context used:

• Knowledge Base — Modal remote benchmark execution