fix(prod): reconcile master hotpatch drift into monorepo - #3
Open
alpha1122x wants to merge 12 commits into
Open
Conversation
Prod hotpatch refuses multi-GPU hosts that reject gpu_count=1 splits and exposes LiumClient.for_prism_training for the capacity scheduler path.
Bring prod hotpatch modules for master-owned training admission (LiumCapacityScheduler) and orphan pod cleanup, plus settings wiring helpers.
Prod hotpatch settings surface for fail-closed constation orchestration and optional master-owned Lium training admission (default off).
…ules Hotpatched allowlist_repository gains get_active_pin and identity payload mapping. Also restore image-resident custody/orchestrator/pod_binding/ attestation_keys/bundle_seal/routes pieces required by the prod main wiring but missing from this branch tip.
…ration Prod hotpatch adds ConstationPinSource stamping on Prism dispatch and optional LiumCapacityAdmission.tick during run_once.
…aster Prod hotpatch builds custody runtime, pre-forward hook, pin source, and try_build_lium_capacity_scheduler when constructing the orchestration driver.
Prod entrypoint hotpatch (and fix/master-embed-ac-env-file) restore the operator extension point dropped by env -i isolation so attestation and review switches from embed.env actually reach embedded challenges. Host-only Prism policy defaults are intentionally not copied.
…ateway-free analyzer Prod hotpatches: REPO_ROOT finds docker/review when installed in site-packages; host analyzer skips missing Base LLM gateway parking and completes AST+similarity under gateway-free attested product mode.
Prod hotpatch modules: safe pod boot env/install planning, and the OpenRouter dual-gate plagiarism adjudicator (wired when queue lands).
Prod hotpatch: PrismSettings plagiarism_llm_* / openrouter fields, and CheckpointIntakeService last_status observability with fail-closed publish.
Prod hotpatch no longer parks missing Base LLM gateway as llm_standby. Update the two contracts to expect first-pass allow and no requeue loop.
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
base-master-prodinto the monorepo so the next image rebuild does not silently lose live truth.Source of truth
86.38.238.235(read-only)docker inspectonbase-master-prod-base-master-validator-1(37 unique sources; dual mounts counted once)feat/ac-attestation-provenance-multiaccount@6d9c7565Hotpatch classification table
Supporting image-resident constation modules
Landed from container (not bind-mounted) because hotpatched main imports them and they were missing on this branch tip:
custody_keys,attestation_keys,orchestrator,pod_binding,bundle_seal, prodroutes+__init__.Dead weight (on disk, not mounted)
ac_api_routes,ac_execution_pool,ac_progress*, supersededac_selfdeploy_*,measurements.py,app_proxy, root entrypoint,prism_cpu_reexec/*(except mounted entrypoint),prism_{db,models,repository,routes}, overriddenprism_plagiarism_llm/config.py,service/settings/weights*, secrets/flags/baks.Bucket D unresolved
Do not invent merges for:
ac_eval_wire,ac_selfdeploy_bundle/{cli,eval,review,shapes},ac_authorization,ac_sdk_config,ac_canonical_compose,ac_benchmarks,ac_review_runtime,prism_plagiarism_llm/queue.Test plan
packages/challenges/agent-challengeGate result
failed≤57 ✓ errors≤6 ✓ skipped=9 ✓ · passed 3262 (this base tip collects 3334 tests; 57+3262+9+6=3334)
Commits
HEAD:
6b807c2eae9974535eb0f1090d8c29046e185356Notes