TrustedLander

The mechanical lander of trusted recurring runs (trove-recurring §TRC-D-8). No model takes part in a landing.

In the namespace octomy::trove::git. Declared in src/libs/libworktree/worktree/TrustedLander.hpp.

Detailed description

It works in a detached worktree of its own under scratchRoot and never touches the operator's checkout, never deletes a branch, never forces a push and never resets a branch of anybody. Each step is a guard, and a refusal ends the landing with the branches as they were:

| # | Step | Refuses when | |—|—|—| | L1 | The kill switch | The project or the HUB paused landing | | L2 | The window, and the quiet minutes | Outside the window. Inside it, it waits for the quiet minutes until the window ends | | L3 | Fetch, and a detached worktree at `origin/<main>` | The fetch fails | | L4 | The run's commits on top: a fast-forward, else a rebase | A conflict: try again | | L5 | The diff against `origin/<main>` | It is empty, it deletes more files than the limit, or it adds a symlink out of the tree or a submodule link | | L6 | Build and test the exact commit | Either fails | | L7 | The probes on the exact commit | The judgement does not pass | | L8 | One commit, with no agent attribution | — | | L9 | Fetch again | Main moved: try again | | L10 | Push, never forced | The push is refused: try again |

L11, the landed measure, is the measure of L7: the pushed commit has the tree that L7 measured.