[codeandsolder]

Apply the same repository-visibility runner policy as ci-workflows #50 to the reusable strict Rust gate.

• Public caller repositories continue on GitHub-hosted ubuntu-24.04.
• Private caller repositories select ['self-hosted','Linux','X64'], allowing any online registered local Acer/Asus runner instead of forcing the Asus label. No caller configuration or private hosted-runner bypass.
• Advance immutable setup/finalize sccache pins (plus the Cargo quarantine action pin) together to the CI-provider merge commit 3a19d861aced60226c05c499fecc6761b66a6f49. That provider selects the existing managed socket/client by local capabilities and does not create extra cache daemons.
• Add a strict-gate invariant that asserts the visibility selection cannot regress to a host-specific label.

Focused tests: uv run --no-project python checks/test_action_pins.py, YAML parsing, and git diff --check pass. Await exact-head CI checks before merge. Existing direct per-repo jobs with hardcoded asus remain separate; this change affects the shared strict-Rust gate, not every private YAML file.

[coderabbitai]

Important

• Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: d569c144-bf48-465c-aa01-53849ce5facd

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn