Skip to content

Test optimized mode and constants in CI - #47

Merged
BenWestgate merged 1 commit into
reviewability-v1from
codex/40-optimized-ci
Sep 28, 2026
Merged

BenWestgate merged 1 commit into
reviewability-v1from
codex/40-optimized-ci

Conversation

@BenWestgate

Copy link
Copy Markdown
Owner

Fixes #40.

Add two assurance steps to the existing Ubuntu/Python 3.13 matrix leg:

  • run the complete test suite under python -O;
  • independently re-derive the frozen BCH correction constants.

Restricting these checks to one representative matrix leg avoids multiplying a full optimized test run across every OS and Python version. No dormant fuzz harness is enabled.

Local validation:

  • python tools/verify_correction_constants.py
  • workflow YAML parsed successfully
  • git diff --check

Run the full suite under Python optimization and re-derive the frozen correction constants in one Ubuntu/Python 3.13 matrix leg. Avoid multiplying the expensive optimized run across every platform.\n\nSecurity: CI now detects behavior that depends on runtime assertions and drift in frozen BCH parameters.\n\nValidated the constant verifier locally and parsed the workflow YAML.\n\nFixes #40
@BenWestgate BenWestgate added area: ci Continuous integration and workflow configuration. area: correction Correction engine and correction UX. enhancement New feature or request gate: adversarial review Resolve, merge, or explicitly defer before the next full adversarial review. labels Sep 24, 2026

@BenWestgate BenWestgate left a comment

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI-generated review (Claude), posted at the maintainer's request.

ACK 0aff580

  • Both new steps ran green on the ubuntu/3.13 leg.
  • Nit: the repeated if: could be a matrix include flag, but two lines is fine.

Copy link
Copy Markdown
Owner Author

Release-gate sequencing: merge #50 before final review/merge of this PR. Both change .github/workflows/python-package.yml; #50 is the minimal security hardening that establishes permissions: contents: read. After #50 lands, refresh #47 once and preserve that explicit permission block alongside the optimized-suite and correction-constant steps. This is a conflict-ordering dependency, not a defect in #47's assurance checks.

@BenWestgate
BenWestgate merged commit f31f3dc into reviewability-v1 Sep 28, 2026
12 checks passed
@BenWestgate
BenWestgate deleted the codex/40-optimized-ci branch September 28, 2026 02:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: ci Continuous integration and workflow configuration. area: correction Correction engine and correction UX. enhancement New feature or request gate: adversarial review Resolve, merge, or explicitly defer before the next full adversarial review.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant