docs(deltawire): record supervisory control gaps #9
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: DeltaWire supervisory control | |
| on: | |
| push: | |
| branches: [codex/deltawire-supervisory-control] | |
| paths: | |
| - "labs/20-deltawire/**" | |
| - ".github/workflows/deltawire-supervision.yml" | |
| pull_request: | |
| paths: | |
| - "labs/20-deltawire/**" | |
| - ".github/workflows/deltawire-supervision.yml" | |
| permissions: | |
| contents: read | |
| jobs: | |
| validate-supervisor: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| with: | |
| fetch-depth: 0 | |
| - uses: actions/setup-go@v7 | |
| with: | |
| go-version-file: labs/20-deltawire/go.mod | |
| - uses: actions/setup-python@v6 | |
| with: | |
| python-version: "3.12" | |
| - name: Validate synthesized supervisor and deterministic framework corpus | |
| run: bash labs/20-deltawire/scripts/validate-supervision.sh | |
| - name: Validate complete DeltaWire lab | |
| run: bash labs/20-deltawire/scripts/validate.sh | |
| - name: Confirm no live provider boundary | |
| run: | | |
| forbidden_harbor='harbor[[:space:]]+'"run" | |
| forbidden_uvx='uvx.*har'"bor" | |
| forbidden_campaign='campaign.*--'"live" | |
| ! grep -E "$forbidden_harbor|$forbidden_uvx|$forbidden_campaign" .github/workflows/deltawire-supervision.yml | |
| git diff --check |