Fail closed on truth authority and tighten portfolio attention#184
Conversation
saagpatel
force-pushed
the
codex/integration-truth-authority
branch
from
bbd4103 to
e07af4d
Compare
saagpatel
force-pushed
the
codex/integration-oddworks
branch
from
013aee2 to
1df58e8
Compare
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: e3dd4710ae
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| if risk_entry.get("security_risk"): | ||
| return "decision-needed" |
There was a problem hiding this comment.
For active/recent commercial or infrastructure repos whose operating-path evidence sets path_override == "investigate" (for example weak context or missing path confidence), this narrowed guard only treats security risk as decision-needed, so the following maintain/finish branch can label the repo active-product or active-infra. That contradicts the generated path rationale telling operators to treat the repo as investigate and causes downstream consumers of attention_state to lose the unresolved path decision.
Useful? React with 👍 / 👎.
| worktree_dirty = _git( | ||
| worktree_path, "status", "--porcelain", "--untracked-files=all" | ||
| ) |
There was a problem hiding this comment.
When a repository has a stale linked-worktree record, git worktree list --porcelain includes that worktree and git -C <missing> status exits 128; this call then trips the outer exception handler and returns state: "unknown" for the entire primary repo. In that scenario the canonical truth snapshot loses otherwise valid local head/dirty/ahead evidence just because one linked worktree is prunable, so record that worktree as unavailable or skip it instead of failing the whole observation.
Useful? React with 👍 / 👎.
1 participant
Stack 7/7. Adds clean producer receipts, repository/worktree observation, deterministic false-detection exclusions, and settled attention classification. Depends on stack 6. Local verification: Ruff pass, 132 focused tests pass, seam linter pass, canonical truth regenerated for 181 projects.