Repository navigation
Automate verified public consumer synchronization across both markets #7
Description
Deliver private public-only immutable consumer bundles and hourly scheduled/manual public-market synchronization PRs, including skills/references/roles and exact CLI pins. Use ordinary reviews and exact-head static validation with GITHUB_TOKEN; no auto-merge. Track actual feed publication and two-market workflow execution separately from code merge. Environmental Data and EPD have verified producer contracts. Other current sources (org-wiki, editor, JiMU, LCA) need compatible actual producer discovery/export; preserve pins and report blocked sources until resolved. Combined Actions create/approve permission requires explicit decision if actual PR creation is denied. Related producer: HiQ-AI/cortex#2696; Environmental Data: HiQ-AI/environmental-data#1.
Activity
KirbyInGitHub commentedon Nov 4, 2026
Producer implementation is in HiQ-AI/cortex#2736 at ed4a3a85b. Independent review fixes now bind EPD instructions to the actual published archive, restrict release triggers to matching successful trusted runs, recover pushed branches after PR-creation denial without empty commits, and separate unconnected sources from actual feed failures. Real source export/package and local transaction/recovery tests passed. CDN publication and public scheduled/manual PR execution are not yet deployed. Four legacy wrapper supply sources remain explicit dependencies; EPD independent skill-only updates also require a compatible guidance contract. No permissions or auto-merge settings changed.
KirbyInGitHub commentedon Nov 4, 2026
Producer merged at 8e969ee590125052c83a5f4ba3a780d65870bce4. Real public CDN feed pointers now exist for environmental-data/published and plugins/incremental-prerelease, with immutable bundles. Environmental Data readback verified source identity, 20 plugins, 185 files and full digest 6e5e1fed671533fe7cbd2745b029b6ddba820e8e8e6a129a2e3206ed10baf118. Public Environmental Data hourly/manual workflow and exact-head validation integration is under review in HiQ-AI/environmental-data#9. Bot PR creation and unchanged rerun remain deployment gates; no permission setting changed.
KirbyInGitHub commentedon Nov 4, 2026
Real Environmental Data sync run https://github.com/HiQ-AI/environmental-data/actions/runs/41875995785 downloaded/staged the published feed and pushed its consumer-update branch, but GitHub rejected the real PR creation: GitHub Actions is not permitted to create or approve pull requests (createPullRequest). Combined repository permission remains unchanged pending an explicit decision; no PAT bypass. Second-market deployment is in #9, review revision 87b5217. Published EPD feed readback also verifies bundle identity/digest and release-owned files. This remains partial deployment, not automatic PR acceptance.