fix(ci): re-pinna siax-templates 9a3a0aa -> 09504e3a (granskad bump)
CI (SIAX Cloud) / integration (push) Skipped
masterplan-lock / check (push) Successful in 3s
CI (SIAX Cloud) / security (push) Successful in 14s
Security Scan (SIAX Cloud) / security (push) Successful in 21s
CI (SIAX Cloud) / quality (push) Successful in 1m10s
masterplan-lock / check (pull_request) Successful in 26s
CI (SIAX Cloud) / security (pull_request) Successful in 38s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 38s
CI (SIAX Cloud) / integration (pull_request) Successful in 57s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m15s

"Release chain (G17, ADR-W16-003)" ar rod pa main med:

  siax-templates main moved (now 09504e3a..., pinned 9a3a0aa...) --
  refusing to run an unreviewed version of the gate.

Grinden gor precis vad den ska: den vagrar kora en ogranskad version.
Det som saknades var granskningen. Deltaet 9a3a0aa..09504e3a ar EN merge —
siax-templates #138 "Upload complete release evidence and validate artifact
receipt" — och de enda berorda filerna under ci/v2 (det enda detta repo
konsumerar) ar reference-hooks/{G17.sh, G17-ADR-W16-003.md,
lib/emit-release-evidence.py, lib/test_emit_release_evidence.py}.

Andringen ar bakatkompatibel by design: ST0RE-uppladdningen ar opt-in via
G17_REQUIRE_ST0RE (default 0). 0pt ar en AUD0-only-konsument och kor darmed
exakt samma vag som forut.

Notera att grundproblemet ar strukturellt: SIAX_TEMPLATES_REF ar "main", sa
varje commit i siax-templates rodfargar varje konsument samtidigt. Denna PR
atgardar symptomet; en pinning mot en immutabel tagg hor hemma i en egen
andring i siax-templates-konsumentkontraktet.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
2026-09-25 13:33:20 +02:00
co-authored by Claude Opus 5
parent 6f9034ff1d
commit ccbf5878bd
+9 -1
View File
@@ -50,8 +50,16 @@ env:
# G17_LICENSE_ALLOW policy in .siax/hooks/G17.sh) and #59 (G20 retry
# logic -- not used by 0pt yet, but the pin picks up main's current tip
# rather than an older commit, matching what a fresh migration reviews).
#
# Re-pin 2026-09-25 (medveten, granskad): 9a3a0aa -> 09504e3a. Deltaet ar
# EN merge, siax-templates #138 "Upload complete release evidence and
# validate artifact receipt". Enda berorda filer under ci/v2 ar
# reference-hooks/{G17.sh, G17-ADR-W16-003.md, lib/emit-release-evidence.py,
# lib/test_emit_release_evidence.py}. Andringen ar bakatkompatibel by
# design: ST0RE-uppladdningen ar OPT-IN via G17_REQUIRE_ST0RE (default 0),
# sa en AUD0-only-konsument som 0pt kor exakt samma vag som forut.
SIAX_TEMPLATES_REF: main
SIAX_TEMPLATES_PINNED_SHA: 9a3a0aa93c28a4538ecdb98658158f19cb23a6f9
SIAX_TEMPLATES_PINNED_SHA: 09504e3a593ee8ce0eaba606df31c349a3d52277
SIAX_TEMPLATES_DIR: /tmp/siax-templates-g17-ref
jobs: