Skip to content

Wires gate attestation to mix gate.verify - #11

Merged
johnnyt merged 1 commit into
mainfrom
sp-7cu-gate-verify
Aug 22, 2026
Merged

Wires gate attestation to mix gate.verify#11
johnnyt merged 1 commit into
mainfrom
sp-7cu-gate-verify

Conversation

@johnnyt

@johnnyt johnnyt commented Aug 22, 2026

Copy link
Copy Markdown
Member

Why

Unattended commits in this repo previously degraded attestation to the exit code of the gate run: the manifest declared no gate.attest command, so the wurk kit recorded attested: false and the auto commit path refused to advance. sp-7cu adopts the family's one adoptable verifier, mix gate.verify, which attests that a green run was actually the full gate (status ok, scope all, no profile, no run-narrowing skips).

What

  • Adds "attest": ["mix", "gate.verify"] to the gate block in .claude/wurk.json.
  • Updates .claude/wurk/commit.md, replacing the now-resolved "attestation is not wired up yet" section with the wired-up state.

Per the upstream ruling on st-hcgl (option a), the task is used as shipped by the statifier dependency (pinned to its main branch) - this repo carries no local copy of the task or its tests. No gate stage was added and .quality.exs is untouched, so this repo's deliberately smaller gate is unchanged.

Notes

  • The diff touches no gated paths (lib/, test/, config/, mix.exs, mix.lock), so the manifest gate carve-out applies to this branch. mix gate.verify was nonetheless run to verify the wiring: it ran the full gate and attested green (scope all, no profile, 9 stages considered; doctor/gettext/sobelow skipped as project-level gaps).
  • Residual risk stays as the bead records it: an agent could still weaken .quality.exs and attest honestly against the weakened gate. That mitigation is review-side and out of scope here.

Closes sp-7cu

Adds "attest": ["mix", "gate.verify"] to the gate block in
.claude/wurk.json. The task itself ships with the statifier dependency
(pinned to main), so no local copy of the task or its tests is carried
here - per the upstream ruling on st-hcgl, repos adopt the dep-provided
task rather than vendoring it.

With this wired, unattended commits get a real attestation (full gate,
scope all, no profile) instead of degrading to the exit code of the run.
Verified locally: mix gate.verify runs the full gate and attests green.

Also updates .claude/wurk/commit.md, whose "attestation is not wired up
yet" section this change resolves.

No gate stage was added and .quality.exs is untouched; this repo's
deliberately smaller gate is unchanged.

Refs: sp-7cu
@johnnyt
johnnyt merged commit 620c12d into main Aug 22, 2026
1 check passed
@johnnyt
johnnyt deleted the sp-7cu-gate-verify branch August 22, 2026 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant