Skip to content

ci(kernel-proofs): pin the runner and require Agda 2.6.3 - #280

Merged
hyperpolymath merged 3 commits into
mainfrom
claude/new-session-ywdrth-kernel-agda-pin
Oct 27, 2026
Merged

hyperpolymath merged 3 commits into
mainfrom
claude/new-session-ywdrth-kernel-agda-pin

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

The Contract Gate's "Grade kernel proofs (Idris2 0.8.0 + Agda)" job now fails on every PR, for a reason no PR introduced.

On 2026-10-19, ubuntu-latest moved to Ubuntu 26.04. The job installs Agda from apt, so it now gets Agda 2.8.0 (the log shows Image: ubuntu-26.04 and Agda version 2.8.0). Agda 2.8.0 prints error locations as CostIsOccupancy.agda:11.38-42, where 2.6.3 printed :11,38. occupancy-types' own scripts/check-agda.sh accepts only [0-9]+,[0-9]+, so it reports a correct rejection as ERROR: unexpected failure while checking CostIsOccupancy. Main last ran this job on 2026-10-17, before the move, and it passed.

It first showed up on #279 (run 40415000878).

Changes

  • .github/workflows/contract-gate.yml: the kernel-proofs job runs on ubuntu-24.04, whose agda-bin is 2.6.3. The other two jobs are toolchain-free and stay on ubuntu-latest.
  • tools/check-kernel-proofs.sh: refuses any Agda other than 2.6.3, unless ALLOW_ANY_AGDA=1 is set. It already refuses any Idris2 other than 0.8.0. With this check, the next image change fails with a clear message instead of an opaque reject failure.
  • CHANGELOG.adoc entry.

Not in this PR: occupancy-types' location regex could accept both formats. That would be an upstream change in occupancy-types and a re-pin here. The version check makes this repo correct either way.

RSR Quality Checklist

Required

  • Tests pass (see Testing)
  • No banned language patterns
  • No banned functions
  • SPDX license headers present on all new/modified source files
  • No secrets, credentials, or .env files included

As Applicable

  • CHANGELOG updated

Testing

Run locally on Ubuntu 24.04.5 with agda-bin 2.6.3-1build1:

  • With Agda 2.6.3, tools/check-kernel-proofs.sh prints OK: kernel proofs — build, 11 rejection(s), table, and 4 negative control row(s).
  • With a stub agda reporting Agda version 2.8.0 first on PATH, it prints FAIL: Agda 2.6.3 required … and exits 1.

Generated by Claude Code

ubuntu-latest moved to Ubuntu 26.04 on 2026-10-19. The kernel-proofs job
installs Agda from apt, so it got Agda 2.8.0, which prints error
locations as file:11.38 where 2.6.3 printed file:11,38. occupancy-types'
own reject check only accepts the old form, so it reported CostIsOccupancy
as an unexpected failure even though Agda refused it correctly. Every PR
now fails the job; main last ran it on 2026-10-17, before the move.

The job runs on ubuntu-24.04, whose agda-bin is 2.6.3, and
check-kernel-proofs.sh refuses any other Agda (ALLOW_ANY_AGDA=1 to
override), as it already refuses any Idris2 but 0.8.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y6FD63UrriRBHqmhhEca9t
@coderabbitai

coderabbitai Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 10 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 924e91d9-4741-49be-b2f5-b0b407c1e4df
Commits

Reviewing files that changed from the base of the PR and between 415f49a and af65bba.

Files selected for processing: 3
  • .github/workflows/contract-gate.yml
  • CHANGELOG.adoc
  • tools/check-kernel-proofs.sh
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

SonarCloud (shell rule: prefer [[ over [) on the line added in 1b98e5d.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y6FD63UrriRBHqmhhEca9t
@hyperpolymath
hyperpolymath marked this pull request as ready for review October 26, 2026 23:06
@coderabbitai

coderabbitai Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Add Carrot credits or activate Agent usage billing to use Autofix

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T23:08:44.300784Z 1e4944a Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1e4944afef

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread tools/check-kernel-proofs.sh Outdated
The glob *"version 2.6.3"* also accepted 2.6.3.1 or 2.6.30. The check
now requires the line to be exactly "Agda version 2.6.3".

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y6FD63UrriRBHqmhhEca9t
@sonarqubecloud

Copy link
Copy Markdown

Copy link
Copy Markdown
Owner Author

The required scan / gitleaks check is red here, but not because of this PR. Secret Scanner calls the standards reusable at da2c748, and GitHub rejects that reusable's lock with "invalid lockfile pin" (for actions/checkout@3d3c42e…). It has failed this way on main since #278 (415f49a).

The fix is the estate re-pin of the standards reusables to 75bd599, which the owner runs, so this PR doesn't widen to cover it.


Generated by Claude Code

@hyperpolymath
hyperpolymath merged commit 24042cc into main Oct 27, 2026
23 checks passed
@hyperpolymath
hyperpolymath deleted the claude/new-session-ywdrth-kernel-agda-pin branch October 27, 2026 00:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants