didericis/bot-bottle
1
0
Fork 0
Code Issues 33 Pull Requests 9 Actions Packages Releases Wiki Activity

PRD: Packaged infrastructure artifacts #537

Merged
didericis merged 16 commits from feat/pinned-infra-artifacts into main 2026-07-27 17:00:54 -04:00
Conversation 0 Commits 16 Files Changed 48
+2616 -60
didericis-codex commented 2026-07-27 11:08:05 -04:00
Collaborator
Copy Link
Copy Source

Closes #536.

PRD 0083: Packaged infrastructure artifacts

Summary

Publish immutable, commit-addressed release bundles containing the verified wheel plus digest-pinned orchestrator, gateway, Claude, Codex, and Pi images and checksum-pinned Firecracker artifacts. Docker, Apple Container, and Firecracker acquire those assigned identities instead of rebuilding fixed infrastructure at startup.

Add an arbitrary-ref publish-artifacts workflow for deployment testing, exact-commit installer selection with an unqualified-snapshot warning, and tag-driven staging/production qualification. RC and stable releases run the complete pre-release suite first, reuse the same immutable commit bundle, verify a clean install, publish qualified tag pointers, and monotonically advance their channel.

Schema

The packaged schema-1 manifest contains source commit, five OCI digest references, and two Firecracker artifact versions/checksums. Durable commit bundles live under bot-bottle-builds/<sha>; qualified tags and mutable channels point to those immutable bundles.

Merge rules

  • Production startup never invokes a fixed-infrastructure builder.
  • Built-in agent images are built, smoke-tested, published, and consumed by digest on every backend.
  • Only the verified wheel is published, after all named artifacts exist.
  • Tag releases pass the full backend qualification flow before release/channel publication.
  • Unit, lint, type, package, and required CI gates pass.
Closes #536. [PRD 0083: Packaged infrastructure artifacts](https://gitea.dideric.is/didericis/bot-bottle/src/commit/a750a242d105beb7e647b8697d5f8d47684de5ff/docs/prds/0083-packaged-infra-artifacts.md) ## Summary Publish immutable, commit-addressed release bundles containing the verified wheel plus digest-pinned orchestrator, gateway, Claude, Codex, and Pi images and checksum-pinned Firecracker artifacts. Docker, Apple Container, and Firecracker acquire those assigned identities instead of rebuilding fixed infrastructure at startup. Add an arbitrary-ref `publish-artifacts` workflow for deployment testing, exact-commit installer selection with an unqualified-snapshot warning, and tag-driven staging/production qualification. RC and stable releases run the complete pre-release suite first, reuse the same immutable commit bundle, verify a clean install, publish qualified tag pointers, and monotonically advance their channel. ## Schema The packaged schema-1 manifest contains source commit, five OCI digest references, and two Firecracker artifact versions/checksums. Durable commit bundles live under `bot-bottle-builds/<sha>`; qualified tags and mutable channels point to those immutable bundles. ## Merge rules - Production startup never invokes a fixed-infrastructure builder. - Built-in agent images are built, smoke-tested, published, and consumed by digest on every backend. - Only the verified wheel is published, after all named artifacts exist. - Tag releases pass the full backend qualification flow before release/channel publication. - Unit, lint, type, package, and required CI gates pass.
didericis-codex added 1 commit 2026-07-27 11:08:07 -04:00
docs(prd): define packaged infrastructure artifacts
prd-number-check / require-numbered-prds (pull_request) Failing after 8s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 8s
Details
63595f123a
didericis-codex marked the pull request as work in progress 2026-07-27 11:08:28 -04:00
didericis added 2 commits 2026-07-27 11:14:46 -04:00
feat(infra): pull artifacts pinned by package release 1a9056c648
docs(prd): activate packaged infrastructure artifacts
prd-number-check / require-numbered-prds (pull_request) Successful in 11s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 17s
Details
lint / lint (push) Successful in 3m41s
Details
test / unit (pull_request) Successful in 1m8s
Details
test / image-input-builds (pull_request) Successful in 1m4s
Details
test / integration-docker (pull_request) Successful in 1m12s
Details
test / coverage (pull_request) Failing after 13s
Details
a27b1a5fe9
didericis added 1 commit 2026-07-27 11:30:11 -04:00
test(infra): cover malformed release manifests
test / image-input-builds (pull_request) Successful in 48s
Details
lint / lint (push) Successful in 1m3s
Details
test / unit (pull_request) Successful in 58s
Details
test / integration-docker (pull_request) Successful in 1m2s
Details
test / coverage (pull_request) Successful in 20s
Details
prd-number-check / require-numbered-prds (pull_request) Successful in 17s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 10s
Details
d8c5532168
didericis-codex marked the pull request as ready for review 2026-07-27 11:46:09 -04:00
didericis added 1 commit 2026-07-27 12:22:04 -04:00
fix(release): publish only verified wheel
prd-number-check / require-numbered-prds (pull_request) Successful in 15s
Details
test / image-input-builds (pull_request) Successful in 42s
Details
test / unit (pull_request) Successful in 56s
Details
test / integration-docker (pull_request) Successful in 1m1s
Details
test / coverage (pull_request) Successful in 15s
Details
tracker-policy-pr / check-pr (pull_request) Failing after 12m49s
Details
a2113b7f43
didericis added 1 commit 2026-07-27 12:35:02 -04:00
docs(prd): define complete release flow
prd-number-check / require-numbered-prds (pull_request) Successful in 10s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 18s
Details
test / coverage (pull_request) Successful in 50s
Details
test / image-input-builds (pull_request) Successful in 46s
Details
test / integration-docker (pull_request) Successful in 1m6s
Details
test / unit (pull_request) Successful in 58s
Details
93190d5e0c
didericis-codex marked the pull request as work in progress 2026-07-27 12:35:10 -04:00
didericis added 1 commit 2026-07-27 13:01:02 -04:00
feat(release): define commit-addressed bundle index
prd-number-check / require-numbered-prds (pull_request) Successful in 8s
Details
lint / lint (push) Successful in 59s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 12s
Details
test / integration-docker (pull_request) Waiting to run
Details
test / coverage (pull_request) Blocked by required conditions
Details
test / image-input-builds (pull_request) Has started running
Details
test / unit (pull_request) Has started running
Details
46b7e06b37
didericis added 1 commit 2026-07-27 13:03:03 -04:00
feat(release): pin first-party agent images
lint / lint (push) Successful in 1m15s
Details
test / image-input-builds (pull_request) Successful in 1m12s
Details
test / integration-docker (pull_request) Failing after 2m47s
Details
tracker-policy-pr / check-pr (pull_request) Failing after 11m49s
Details
test / unit (pull_request) Failing after 12m1s
Details
prd-number-check / require-numbered-prds (pull_request) Failing after 12m6s
Details
test / coverage (pull_request) Has been skipped
Details
9f65ab016d
didericis added 1 commit 2026-07-27 13:09:21 -04:00
feat(release): publish immutable commit bundles
prd-number-check / require-numbered-prds (pull_request) Successful in 10s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 20s
Details
lint / lint (push) Successful in 1m1s
Details
test / unit (pull_request) Successful in 56s
Details
test / integration-docker (pull_request) Successful in 1m0s
Details
test / coverage (pull_request) Failing after 23s
Details
test / image-input-builds (pull_request) Successful in 2m31s
Details
249eaff53d
didericis added 1 commit 2026-07-27 13:10:27 -04:00
feat(installer): select immutable release bundles
prd-number-check / require-numbered-prds (pull_request) Successful in 11s
Details
lint / lint (push) Successful in 1m2s
Details
test / unit (pull_request) Successful in 58s
Details
test / integration-docker (pull_request) Successful in 1m3s
Details
test / image-input-builds (pull_request) Successful in 1m0s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 12s
Details
test / coverage (pull_request) Failing after 20s
Details
efa1c8ee4b
didericis added 1 commit 2026-07-27 13:12:05 -04:00
feat(release): publish qualified channel pointers
prd-number-check / require-numbered-prds (pull_request) Successful in 12s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 12s
Details
lint / lint (push) Failing after 1m2s
Details
test / integration-docker (pull_request) Waiting to run
Details
test / image-input-builds (pull_request) Has started running
Details
test / coverage (pull_request) Blocked by required conditions
Details
test / unit (pull_request) Has started running
Details
7abcb2c7df
didericis added 2 commits 2026-07-27 13:14:23 -04:00
feat(firecracker): pull pinned agent images 43a92945a3
feat(release): automate artifact and tag flows
tracker-policy-pr / check-pr (pull_request) Successful in 12s
Details
test / image-input-builds (pull_request) Successful in 59s
Details
test / unit (pull_request) Successful in 1m1s
Details
test / integration-docker (pull_request) Successful in 59s
Details
test / coverage (pull_request) Failing after 19s
Details
prd-number-check / require-numbered-prds (pull_request) Failing after 10m50s
Details
lint / lint (push) Failing after 10m52s
Details
89d2ba7e82
didericis added 1 commit 2026-07-27 13:18:46 -04:00
docs(prd): finalize complete release flow
prd-number-check / require-numbered-prds (pull_request) Successful in 17s
Details
lint / lint (push) Successful in 1m4s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 17s
Details
test / image-input-builds (pull_request) Successful in 1m9s
Details
test / integration-docker (pull_request) Failing after 2m58s
Details
test / unit (pull_request) Failing after 11m2s
Details
test / coverage (pull_request) Has been skipped
Details
4544899c79
didericis added 1 commit 2026-07-27 13:25:06 -04:00
ci: rerun release flow checks
prd-number-check / require-numbered-prds (pull_request) Successful in 9s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 15s
Details
test / image-input-builds (pull_request) Successful in 41s
Details
test / unit (pull_request) Successful in 59s
Details
test / integration-docker (pull_request) Successful in 1m2s
Details
test / coverage (pull_request) Failing after 20s
Details
a750a242d1
didericis added 1 commit 2026-07-27 13:29:12 -04:00
test(release): cover publication failure paths
prd-number-check / require-numbered-prds (pull_request) Successful in 8s
Details
lint / lint (push) Successful in 58s
Details
test / image-input-builds (pull_request) Successful in 42s
Details
test / integration-docker (pull_request) Successful in 1m5s
Details
test / unit (pull_request) Successful in 2m50s
Details
test / coverage (pull_request) Successful in 42s
Details
tracker-policy-pr / check-pr (pull_request) Successful in 5s
Details
47cb50db4b
didericis-codex marked the pull request as ready for review 2026-07-27 13:36:31 -04:00
didericis merged commit 6f997bf118 into main 2026-07-27 17:00:54 -04:00
didericis deleted branch feat/pinned-infra-artifacts 2026-07-27 17:00:58 -04:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
Status/Needs Triage
Awaiting initial classification
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
didericis-claude (didericis (claude)) didericis-codex (didericis (codex)) didericis-gemma (gemma) didericis
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: didericis/bot-bottle#537
Delete Branch "feat/pinned-infra-artifacts"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?