[CANARY] verify approved Depot PR runners

[ndizazzo]

Purpose

Controlled, non-merge activation canary for the time-bounded Depot PR risk exception. The source changes are comments only, but their owned paths deliberately select Quality, Website/UI, Linux, macOS, Windows, all runtime backend rows, Rust tests, and Rust/Kotlin/Swift SDK rows.

Sequence

1. Let this exact head finish once with the PR Depot variables absent (hosted baseline).
2. Set DEPOT_PR_RUNNERS_ENABLED=true, DEPOT_PR_APPROVED_REF=refs/pull/<this>/merge, and DEPOT_PR_APPROVED_SHA=<this exact head>.
3. Rerun the same five workflow runs without changing the head or plan and verify all eligible ordinary executor rows use Depot.
4. Remove the approval variables, rerun the same head again, and verify hosted rollback with identical plan/job shape.
5. Close without merge after metrics are captured.

Known exceptions remain hosted/self-hosted: planning and stable summaries, credential-bearing smoke consumers, and the approved CUDA GPU hardware smoke. This canary knowingly accepts the repository-wide Depot cache risk documented in ci/DEPOT_PR_RISK_EXCEPTION.md.

Summary by CodeRabbit

• Chores
  • Added non-functional build and documentation markers to support automated project checks.
  • No changes to runtime behavior, rendered website content, scripts, or public interfaces.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: f9866c84-edf9-484e-a43c-12dddd107f7b

📥 Commits

Reviewing files that changed from the base of the PR and between 95c832e and 92d2be0.

📒 Files selected for processing (7)

• crates/mesh-llm-host-runtime/README.md
• crates/mesh-llm-ui/README.md
• scripts/build-mac.sh
• scripts/build-windows.ps1
• sdk/kotlin/README.md
• sdk/swift/README.md
• website/src/index.njk

---

📝 Walkthrough

Walkthrough

Added Depot PR runner activation canary comments to two READMEs, two build scripts, two SDK READMEs, and the website template. No runtime, rendered output, or documented behavior changed.

Changes

Depot runner activation canaries

Layer / File(s)	Summary
Add activation canaries crates/mesh-llm-host-runtime/README.md, crates/mesh-llm-ui/README.md, scripts/build-mac.sh, scripts/build-windows.ps1, sdk/kotlin/README.md, sdk/swift/README.md, website/src/index.njk	Added non-functional comments that identify the Depot PR runner activation canary. Build scripts remain unchanged, and the website comment produces no rendered output.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 92d2b

This canary changes comments and documentation-oriented content without introducing an actionable merge-blocking risk; it is merge-ready after normal checks and review.

Possibly related PRs

• Mesh-LLM/mesh-llm#1117: Introduced the Depot runner activation referenced by these canaries.
• Mesh-LLM/mesh-llm#1302: Implements the protected Depot PR runner and CI isolation changes referenced by the canaries.

Suggested labels: experimental

Suggested reviewers: i386

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the canary that verifies approved Depot PR runners, which is the main purpose of the changes.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/depot-pr-live-canary

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ndizazzo]

Canary complete: all five Depot attempt-2 lanes passed at exact SHA 631df71, then all five gate-absent hosted attempt-3 lanes passed with exact job-name graph parity. The three bounded-exception variables were removed before rollback. This comment-only canary is intentionally closed without merge; durable evidence is in #1341.