Skip to content

M03 RECON: bind exact SHA and validate embedded-resource live response - #3

Merged
GBOGEB merged 1 commit into
mainfrom
recon/qps-official-live-read
Sep 11, 2026
Merged

GBOGEB merged 1 commit into
mainfrom
recon/qps-official-live-read

Conversation

@GBOGEB

@GBOGEB GBOGEB commented Sep 11, 2026

Copy link
Copy Markdown
Owner

Mission continuation

M03_GITHUB_MCP_SERVER / P_M03_OFFICIAL_LIVE_READ_03

PR #2 merged after attempt 3 had already moved the FIRST RED to the response validator: the exact official server, repos toolset, dynamic tool discovery, and the live get_file_contents call all executed; our validator incorrectly expected the success message itself to contain README identity.

Narrow repair only

This follow-on commit:

  • binds the target read to exact official SHA 7d13a7ad... using --sha;
  • validates the official NewToolResultResource shape: success TextContent + non-empty EmbeddedResource;
  • emits safe public-response shape diagnostics;
  • always uploads the raw public response diagnostic;
  • emits the exact-source operation receipt only after structural/content validation succeeds.

No upstream merge, auth redesign, or broader transport rewrite is included. Recurse only on the next observed FIRST RED.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 11, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-11T16:02:34.056016Z 748c6e0 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@GBOGEB
GBOGEB merged commit d5f6a0d into main Sep 11, 2026
13 of 14 checks passed

GBOGEB commented Sep 11, 2026

Copy link
Copy Markdown
Owner Author

Post-merge runtime gate remains open

PR #3 merged at d5f6a0d30b057e125b098b0edcc56b17a53bf071, but merge is not execution proof. The exact branch-head workflow run is 34619352132 for head 748c6e02422b77e8ff1b5b74317281476b956c68; its official-live-read job 103329149522 is currently QUEUED.

No GREEN/receipt/transport-equivalence credit is granted until that job executes >0 steps and either uploads the exact-source receipt or exposes the next observed FIRST RED.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant