feat: add reusable PromiseProof GitHub Action#2
Merged
Conversation
Add a bundled node20 action at .github/actions/verify that runs the frozen verifier in a workflow with no npm install, no browser, no API key, and no model call in the verdict path. It supports verify, gate, and check modes, validates input combinations strictly, keeps every path inside the workspace, writes report.json and report.md plus step outputs, and fails closed on a broken promise while still leaving the reports. The committed dist/index.js is built with esbuild and checked for freshness and determinism. A direct harness spawns the bundle with temporary env files, and a cross-platform consumer job runs the local action on Windows, Ubuntu, and macOS after removing the repository source and node_modules, proving the action depends on neither. Adds a regenerated passing-gate report fixture for check-mode smoke tests, and documents the action in the README and ADOPTION.md. Base: submission-rc-02 (7d197fe).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this adds
A bundled GitHub Action at
.github/actions/verifythat runs the frozen PromiseProof verifier in any workflow with nonpm install, no browser, no API key, and no model call in the verdict path.verify,gate, andcheck, with strict input-combination validation.report.jsonandreport.md, sets step outputs (status, mode, report paths, evaluator fingerprint, evidence digests), and fails closed onBROKEN_PROMISEwhile still leaving the reports.GITHUB_WORKSPACE, with realpath containment against absolute, traversal, and symlink escapes.dist/index.jsis built with esbuild and checked for freshness and determinism.How it is tested
node_modules, proving the action depends on neither.Preserved
Built from
submission-rc-02(7d197fe). The evaluator, schema, adapter, binding, canonical report semantics, and authentic repair remain byte-identical. No change to the landing page, hosted verifier, walkthrough, or deployment.