Skip to content

ci: fleet hybrid-gate reusable workflow (kanon#2522) - #16

Merged
forkwright merged 2 commits into
mainfrom
ci/hybrid-gate-reusable
Jul 21, 2026
Merged

forkwright merged 2 commits into
mainfrom
ci/hybrid-gate-reusable

Conversation

@forkwright

Copy link
Copy Markdown
Owner

Refs kanon#2522

Re-homes the extended hybrid-gate.yml (trailer fast-path + full-gate-build fallback + ai-attribution + docs-only exemption + concurrency) from forkwright/kanon to this public .github repo.

GitHub cannot resolve a workflow_call reusable workflow reference into a repo that is private and owned by a personal (non-organization) account, for callers in other repos. Proven empirically: all four initial adoption PRs (aletheia#6438, koinon#15, heurema#9, sphragis#13), each pointed at forkwright/kanon/.github/workflows/hybrid-gate.yml@main, failed to even schedule the Gate Attestation workflow — no run appeared at all, not even a failed one.

The existing trailer-only gate-attestation.yml reusable already lives in this repo and is called successfully by 8 repos today — proof the public .github host resolves fine for cross-repo workflow_call.

This file is logically kanon-owned (kanon#2522 designs/maintains the hybrid-gate mechanism); .github is the interim public home the private-repo caller limit requires. It moves back to kanon if/when kanon goes public.

Does not touch gate-attestation.yml (the old reusable) — it has 8 live callers and stays as-is.

admin added 2 commits July 21, 2026 14:18
Re-homes the extended hybrid-gate.yml (trailer fast-path + full-gate-build
fallback + ai-attribution + docs-only exemption + concurrency) from
forkwright/kanon to this public .github repo. GitHub cannot resolve a
workflow_call reusable reference into a private repo owned by a personal
account for other-repo callers -- proven by all four initial adoption PRs
(aletheia#6438, koinon#15, heurema#9, sphragis#13) failing to schedule the
workflow at all when pointed at forkwright/kanon. The existing trailer-only
gate-attestation.yml reusable already lives here and is called successfully
by 8 repos, proving the public host resolves.

Logically kanon-owned (kanon#2522 designs/maintains the mechanism); this is
the interim public home the private-repo caller limit requires. Moves back
to kanon if it ever goes public.
AGENTS.md and .github/*.md were always redundant in the docs-only
case pattern -- bash case globs match / too, so the earlier *.md arm
already matches both (shellcheck SC2221/SC2222, caught by this repo's
own actionlint gate on the PR that added this file). Same matching
behavior, dead alternatives removed.
@forkwright
forkwright merged commit dca8a29 into main Jul 21, 2026
1 check passed
@forkwright
forkwright deleted the ci/hybrid-gate-reusable branch July 21, 2026 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant