[DRAFT] verify-pr fullsend CI deployment (TC-6180)

.fullsend/.gitignore

@@ -0,0 +1,6 @@
+# fullsend-managed local resource cache — regenerated from the pinned URLs in
+# lock.yaml on every run/lock; never committed.
+.fullsend-cache/
+
+# Local-only run scaffolding (env files with live secrets, launchers).
+.local-run/

.fullsend/config.base.yaml

@@ -0,0 +1,26 @@
+# fullsend per-repo configuration
+# https://github.com/fullsend-ai/fullsend
+#
+# This file configures fullsend for per-repo installation mode.
+# See ADR 0033 for details.
+#
+# The "runtime" key selects which agent runtime runs the agents, claude
+# (default when unset) or pi. For one run, the 'fullsend run --runtime'
+# flag wins, then FULLSEND_RUNTIME, then this file. See docs/runtimes.md.
+version: "1"
+kill_switch: false
+# The registered source is the LOCAL composing child harness (base + runner-local
+# host_files); its `base:` pins the repo content by raw URL. See
+# .fullsend/harness/verify-pr.yaml. The base URL's host prefix must remain listed
+# in allowed_remote_resources below (base URLs are not inherited — they are
+# validated against this allowlist).
+agents:
+    - name: verify-pr
+      source: harness/verify-pr.yaml
+    - name: triage-security
+      source: harness/triage-security.yaml
+allowed_remote_resources:
+    # Exactly one prefix: this harness's base URL is self-hosted on
+    # RHEcosystemAppEng and its children resolve relative to that base (no
+    # fullsend-ai remote overlay in the native v0.37.0 pinned-URL model).
+    - https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/

.fullsend/config.yaml

@@ -0,0 +1,20 @@
+# fullsend per-repo configuration (overlay)
+# https://github.com/fullsend-ai/fullsend
+#
+# This file is the per-repo overlay for fullsend configuration.
+# Base settings are provided by config.base.yaml (vendor preset).
+# Values set here override the base layer. Omitted fields inherit
+# from config.base.yaml, then from compiled-in code defaults.
+#
+# See ADR 0069 for the layered configuration model.
+#
+# The verify-pr agent is registered in config.base.yaml (the base layer), so
+# `fullsend dispatch` / `fullsend run` resolve it while the vendor shim — which
+# greps only THIS file for agents — does not dispatch it. CI-gated dispatch
+# lives in .github/workflows/fullsend-verify-pr.yml.
+
+# Repo-specific inference override (hosted Vertex AI via Workload Identity
+# Federation). The base preset supplies everything else.
+inference:
+  project: it-gcp-tpa
+  wif_provider: projects/442181572212/locations/global/workloadIdentityPools/fullsend-inference/providers/gh-rhecosystemappeng-sdlc-plugin

.fullsend/harness/triage-security.yaml

@@ -0,0 +1,12 @@
+# Local composing child for the triage-security harness.
+#
+# The URL-pinned base supplies the tokenless triage contract. This local child
+# supplies the runner-local pre-script output because Fullsend rejects an
+# absolute host-file source inherited from a URL-sourced harness. The child
+# mapping wins for this destination during composition.
+base: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/harness/triage-security.yaml#sha256=110fb33d880caf1add20e73c8017451378966eeef52ef34aa988e41c35fc1b02
+
+host_files:
+  - src: ${FULLSEND_RUN_DIR}/pre/triage-security-input.json
+    dest: /sandbox/workspace/.pre-script/triage-security-input.json
+    optional: true

.fullsend/harness/verify-pr.yaml

@@ -0,0 +1,68 @@
+# Local composing child for the verify-pr harness.
+#
+# fullsend v0.37.0 rejects an absolute host_files.src that is inherited from a
+# URL-sourced harness, so the runner-local credential and pre_script-output
+# mounts cannot live in the URL-pinned base (harness/verify-pr.yaml). This local
+# child pins that base by raw URL (so the pinned bytes are byte-identical across
+# local and CI) and adds those absolute mounts directly. host_files are
+# concatenated base+child, deduplicated by dest with the child winning (ADR-0045;
+# harness-fields.md). Absolute host_files declared directly in this local child
+# are NOT URL-sourced, so they are accepted.
+#
+# ONE child serves BOTH environments — the mounts are env-expanded and the OIDC
+# token is optional:
+#   GOOGLE_APPLICATION_CREDENTIALS  local: service-account key JSON
+#                                   CI:    WIF external_account config
+#   GCP_OIDC_TOKEN_FILE             local: unset → optional mount skipped
+#                                   CI:    runner-refreshed OIDC token file
+# Only the runtime environment differs — fullsend's sanctioned "same harness,
+# different runtime env" model (ADR-0055; running-agents-locally.md).
+#
+# PIN: the base cannot be a cross-boundary local path — fullsend rejects a
+# `base:` that escapes the .fullsend workspace root, and a URL base is required
+# anyway so the base's relative children resolve as pinned raw URLs. The base is
+# pinned to a commit SHA (not a branch) plus the base file's sha256; both local
+# and CI resolve these exact bytes. lock.yaml freezes every child SHA256.
+# The base URL host prefix must stay listed in config.yaml allowed_remote_resources
+# (base URLs are validated against that allowlist, not inherited).
+# Re-pin after any base edit: push harness/verify-pr.yaml, set the SHA to the new
+# commit + the sha256 to `shasum -a 256 harness/verify-pr.yaml`, `fullsend lock`.
+base: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/da053ba1649ef9368436d69a639e121138b97801/harness/verify-pr.yaml#sha256=3c9dc221e2a37e7aa7ff294381b6b5b1580771ba70432c42924fc3a85f078e63
+
+# CEL trigger (ADR 0061) — MUST be declared here, on the composing child, not
+# only on the base. `fullsend dispatch` registers this child (config.base.yaml
+# source: harness/verify-pr.yaml resolves under .fullsend/) and composes the
+# base, but mergeBaseIntoChild (internal/harness/compose.go) carries `role` and
+# other scalars from base->child while intentionally NOT carrying `trigger`. A
+# trigger set only on the base is therefore inert; ListTriggeredHarnesses reads
+# the composed child's Trigger. Kept byte-identical to the base's trigger (which
+# documents intent and covers direct-base consumption). Fires on a PR
+# change_proposal that is opened / synchronized / reopened — the dispatch-path
+# equivalent of the CI poller's `on: pull_request` types in
+# .github/workflows/fullsend-verify-pr.yml.
+trigger: |
+  event.entity.kind == "change_proposal" &&
+  event.transition.kind in ["synchronized", "opened", "reopened"]
+
+host_files:
+  - src: ${GOOGLE_APPLICATION_CREDENTIALS}
+    dest: /tmp/.gcp-credentials.json
+  - src: ${GCP_OIDC_TOKEN_FILE}
+    dest: /sandbox/workspace/.gcp-oidc-token
+    optional: true
+  # pre_script prefetch output — pre-verify-pr.sh writes /tmp/fullsend-pre-output
+  # on the runner; mounted read-only into the sandbox (optional — absent until
+  # the pre_script runs, and skipped on an ADR-0072 skip).
+  - src: /tmp/fullsend-pre-output/verify-pr-input.json
+    dest: /sandbox/workspace/.pre-script/verify-pr-input.json
+    optional: true
+  # Concatenated failed-check logs — pre-verify-pr.sh always writes this file
+  # (empty when no check failed) next to verify-pr-input.json. correctness.md
+  # Check 1b reads it on a FAIL via the bundle's github.check_run_logs_path (dest
+  # below); the large log text stays off the input bundle and off the agent's
+  # context until then. host_files mounts single files only, so per-check logs
+  # are concatenated into this one file. optional: absent until the pre_script
+  # runs, and skipped on an ADR-0072 skip.
+  - src: /tmp/fullsend-pre-output/check-run-logs.txt
+    dest: /sandbox/workspace/.pre-script/check-run-logs.txt
+    optional: true