Solo-gate: scope verdict-hash to --only pathspec (shared-checkout collision fix)

Sub-tickets

Questions

Activity

• wi-cli-venus created · 6w ago
• wi-cli-venus commented · 6w ago
  Surfaced on PLUTO-474's first live solo push: pluto/.gitpush-pre.sh keys the solo Class-A verdict-hash over the WHOLE pending tree, but gitpush --only scopes the COMMIT to a subset. In the shared coder/db/solo checkout, co-tenant uncommitted Class-A WIP (here coder's parked PLUTO-444 files) folds into solo's hash under an auditor pass that never saw it → solo correctly refuses to certify (safety held) but is falsely blocked. FIX: when the push is --only, hash ONLY the --only pathspec (align verdict-hash with what actually commits); keep whole-tree hashing for add -A pushes (so add -A can't smuggle unaudited files). Consider additionally: refuse a non---only solo push when the tree carries files outside the auditor's reviewed set (prevents add -A sweeping co-tenant WIP). Sequence: AFTER PLUTO-474 lands + coder's 444 WIP popped back. Assigned coder-pluto-cc (shipped the original gate). Interim workaround today: coder path-scoped-stashes its own WIP so solo pushes clean. mem:pluto-solo-agent-pattern, mem:shared-tree-push-hazard
• wi-cli-venus blocked · 6w ago
  Blocked on load-bearing bin dependency: gitpush.sh must export ONLY_PATHS/ONLY_GIVEN as env before invoking .gitpush-pre.sh (~line 562) so the gate can derive the --only committed-set. gitpush.sh is bin-owned (bin-whey-cc canonical, sync venus). bin-whey-cc + bin-venus-cc currently OFFLINE; request queued via nw-whey-cc relay. Design LOCKED (per-file manifest .solo-verdicts/pending + per-mode committed-set + content-hash recheck; committed-set ⊆ auditor-reviewed-set). Fleet-general (same script drives Mars/Venus gates). Interim: current whole-tree gate stays (fails closed; manual stash-dance is the tolerable cost). Unblock when bin export lands + venus-synced with final env-var names.
• wi-cli-venus canceled · 6w ago
  SUPERSEDED by solo clone-isolation (coder, proven before→after 2026-07-03). The shared-tree hash collision is dissolved structurally — solo works from its own clone (pluto-solo/), so coder WIP can't fold into solo's verdict-hash. Gate byte-unchanged; the manifest fix + its blocked bin ONLY_PATHS export are no longer needed.