Existing forms warn against uploading secrets but stop at prevention. Explain issuer revocation, separate attachment removal, surviving copies, private follow-up and independent monitoring coverage without asking for another diagnostic or credential test.
Change-source: pulse-maintainer
Contract-Neutral: Documentation and guidance coverage only; runtime, API, storage and deployment contracts are unchanged.
The full documentation proof counted all 18 current recipes, including the newly documented standalone action runner removal. Keep the exact inventory assertion and shell parsing rather than retaining the old 17-command expectation.
Contract-Neutral: Test inventory correction for the documented runner-only recipe; no runtime, lifecycle, API or authority behaviour changes.
Change-source: pulse-maintainer
Explain evidence loss, saved-state trust, platform differences and partial removal before administrators act. Keep whole-agent removal separate from the Linux action runner, preserve deliberate path protections, and exercise copied commands with bounded synthetic recorders.
Contract-Neutral: Documentation and synthetic source-bound recipe checks only; no runtime, lifecycle, authority, platform or API behaviour changes.
Change-source: pulse-maintainer
Separate a rejected lookup credential from a missing reporting scope, missing host and ordinary reporting failure. Distinguish the normal silent-token install from bootstrap enrolment, reuse the bounded private log reader and preserve credentials and identity while finding the failing stage.
Contract-Neutral: Documentation-only authentication triage; no runtime, API, authorization or installer behaviour changes.
Change-source: pulse-maintainer
Use an exclusive mode-0600 temporary file before writing the fixed non-credential body marker. Keep copied-command, redaction, redirect, denial and partial-response assertions unchanged; no CodeQL rule or security gate is suppressed.
Contract-Neutral: Documentation-test fixture creation only; no shipped API, authentication, permission or guide contract changes.
Change-source: pulse-maintainer
Preserve the exact reviewed Delivery commits and their source-bound proofs; retain existing test tiers, waits and verdict.
Change-source: pulse-maintainer
The smoke runner invokes shell recipes directly. Preserve the tested admission bytes and set the new recipe's executable bit, then validate the final-source entrypoint through that actual runner rather than relying only on direct Node checks.
Change-source: pulse-maintainer
Contract-Neutral: Test recipe execute permission only; source bytes and readiness and workflow contracts are unchanged.
Replace installer-rerun and unchecked capability advice with bounded private property checks, a narrow existing-ceiling override and deliberate prior-active maintenance. Distinguish configured settings, process startup and ordinary ICMP recovery without weakening sandbox policy.
Contract-Neutral: Existing ICMP administration guidance and copied-command controls only; no availability runtime, privilege, API or frontend behaviour changes.
Change-source: pulse-maintainer
Main E2E 38020587365 exhausted twenty shared-readiness/login failures over 47 minutes, then probation hit the job limit before stable report uploads. Admit the same authenticated inventory and pool/disk history once before either tier, without retries or ignored failures, and upload completed stable failures before observational work. Share the existing readiness predicates and cover every identity/history requirement, actual spec cleanup and the workflow fail-fast command. Preserve phase thresholds, test tiers, pins and the stable verdict. This does not diagnose the hosted runtime failure.
Change-source: pulse-maintainer
Accept Product Intelligence candidate 20261010T034626Z-product-intelligence with both original commits preserved. Retain source-20heiox1 documentation and copied-command proof; no product runtime or new surface changes.
Contract-Neutral: Merge reviewed documentation guidance and regression controls without runtime contract changes.
Change-source: pulse-maintainer
The npm Playwright entrypoint exited inside setup and bypassed its finally block, leaving a partial managed runtime and verification lock behind. Keep the setup failure, skip tests, attempt existing teardown once, and release only the handoff this invocation wrote when its contents still match. Preserve primary failures through teardown errors and do not stop a runtime after lock preparation fails. Add real child-process controls to exhaustive script smoke; test tiers, acquisition deadlines and browser coverage are unchanged.
Change-source: pulse-maintainer
The first exact documentation run found two fixture-selection failures: the Nodes and Config section also contains export/import JSON. Read only the existing Add Node subsection for its single configuration specimen; retain all transport, trust and original-document controls.
Contract-Neutral: Documentation recipe test extraction only; no product runtime, subsystem contract or guide content change.
Change-source: pulse-maintainer
Replace root-password and implicit-TLS examples with a private JSON-file recipe using the existing bounded helper. Distinguish live tests, persisted changes, platform credentials and uncertain results; exercise copied commands with synthetic success, denial, redirect and incomplete responses.
Contract-Neutral: Documentation, mirrored guidance and copied-recipe regression tests only; no runtime API, authentication, TLS or frontend contract changes.
Change-source: pulse-maintainer
Merge exact Delivery tip c592c69b4d, including 82f6257d45. Resolve the overlapping formatter guard by retaining canonical main's stronger GuestMemoryEvidence assertion. Preserve automatic complete suite discovery, existing recipe deadlines and the fail-closed required backend check. Retained source-bk4g0rip covers 93 available suites; historical Git context and hosted timing remain explicit limits.
Contract-Neutral: CI scheduling and assertions only; no application, shipped guidance, dependencies or release policy change.
Change-source: pulse-maintainer
The first complete smoke-shard proof exposed the old inline-Patrol wording assumption after the reviewed query/observer qualifier move. Keep the unknown and unavailable safety assertions and verify the real caller-to-qualifier-to-formatter chain instead. Guidance and runtime source are unchanged.
Contract-Neutral: CI assertion follows the existing reviewed formatter; no guidance, runtime, memory semantics, dependency, release or subsystem contract delta.
Change-source: pulse-maintainer
The reviewed guest-memory consumer repair moved warning strings out of Patrol into unifiedresources. Preserve the documentation assertions and verify Patrol still delegates qualification and display to that shared formatter. This reconciles the combined batch without changing runtime or guidance.
Contract-Neutral: Test-only integration reconciliation; guest memory, documentation, access and collection contracts are unchanged.
Change-source: pulse-maintainer
The current containing main run executes all 93 smoke suites sequentially for 679 seconds. Partition the discovered inventory without maintaining an allowlist or changing recipe deadlines, and keep the existing required build check fail-closed on every shard. Exercise complete coverage, discovery failure, child failure collection and actual workflow commands.
Contract-Neutral: Product CI smoke scheduling and exhaustive gating only; no installer, application, shipped guidance, dependency, release policy, safety deadline or subsystem contract delta.
Change-source: pulse-maintainer
Two complete containing runs spent 717 and 719 seconds in rest-1, with the installer binary near its end. Refresh whole-package costs from uncached passing rest-shard reports and emit heavier binaries first. Preserve both required checks, source-derived exhaustive coverage, race tests, failure propagation and internal/api ordering.
Contract-Neutral: Schedule existing independent CI package binaries only; no runtime, required-check, exhaustive coverage, race-test or dependency-admission contract changes.
Change-source: pulse-maintainer
Separate hypervisor footprint, Linux availability and process RSS in existing troubleshooting, FAQ and threshold help. Keep comparisons on the same guest, kernel, time and units, preserve unknown or retained evidence, and avoid diagnostic probes, restarts, cache drops and blanket suppression.
Contract-Neutral: Documentation and source-bound help regressions only; memory collection, Patrol decisions, alert controls and access contracts are unchanged.
Change-source: pulse-maintainer
The complete documentation proof observed a synthetic reader still in state R after the command pipes closed. Keep the 80-second group kill and 83-second test ceiling unchanged, but observe gone or zombie for at most half a second before declaring completion. Persistent live states, observation errors and malformed records still fail; deterministic transition and bound controls cover the witness.
Contract-Neutral: Documentation verification witness only; copied collector recipes, runtime behaviour and subsystem contracts are unchanged.
Change-source: pulse-maintainer
Preserve the exact Delivery candidate ancestry. Resolve the overlapping canonical fixture correction to the candidate’s reviewed final bytes, retaining all three groups, exact invocation counts, odd and Unicode inventories, selectors and terminal-failure controls. Production runner and frontend source are unchanged.
Contract-Neutral: Test-only merge of the reviewed smoke reconciliation; installer runtime, contracts, deadlines and gates are unchanged.
Change-source: pulse-maintainer
The initial complete documentation proof failed only because Local administrators begins a sentence. Preserve every required privacy boundary while ignoring its letter case; the guide and runtime remain unchanged.
Contract-Neutral: Documentation regression assertion only; no runtime, endpoint, scope or subsystem contract delta.
Change-source: pulse-maintainer
The exact-parent comparison needs a failed safety assertion, not an incidental missing-heading exception. Assert the heading before checking its order; the guide and runtime are unchanged.
Contract-Neutral: Documentation regression assertion only; no runtime, endpoint, scope or subsystem contract delta.
Change-source: pulse-maintainer
PR2761 script smoke checks failed because the existing Python fixture still unpacked two groups after the reviewed runner began returning general-0, general-1 and reset. Assert all three exact commands, deterministic exact-once selection, insufficient-inventory refusal and terminal failure in every group without changing runner behaviour or deadlines.
Contract-Neutral: Fixture correction only; installer runtime and runner contracts are unchanged.
Change-source: pulse-maintainer
Replace the credential-argument probe recommendation with private, bounded reads. Explain least-scope client setup, private configuration and preserved proxy access; distinguish scope-only writes, terminal events and partial verification from recovered workloads. Keep the adapter entry point and shipped guide consistent without changing runtime behaviour.
Contract-Neutral: Existing external-agent documentation and its copied/rendered regression checks only; no endpoint, scope, policy, adapter or runtime contract changes.
Change-source: pulse-maintainer
Preserve the exact reviewed guidance and formatting commits. The existing Cloud guide now bounds export scope, identity, endpoint trust and single-active recovery; retained documentation and rendered-help proof cover unchanged final content.
Change-source: pulse-maintainer
The production runner now emits two general groups and a reset group, but its independently discovered Python smoke suite still unpacks two. Repair the required smoke check, assert the complete invocation count before zipped comparisons and cover terminal failures in every group. Preserve exact-once inventory, Unicode names, selectors, count and deadlines without changing runtime or workflow gates.
Contract-Neutral: Test-only reconciliation of the existing three-group native installer runner; production source, installer contracts, invocation deadlines and required checks are unchanged.
Change-source: pulse-maintainer
Replace nine identical image build pairs with one same-run artifact producer. Admit the producer's manifest, checkout, run, attempt, archive and loaded image identities before starting each isolated stack. Keep fixed registry pins, local seed defaults, every journey gate and existing browser budgets. Provider refusals remain terminal without mirrors, login, pull retries or rebuild fallbacks. Record the contract and narrowly scoped regression proof.
Change-source: pulse-maintainer
The hosted guide promised portable monitoring configuration and reduced an agent move to changing its URL. State the actual export exclusions, replacement and active-cutover risks; preserve source access, existing agent identity and independently verified endpoint trust. Check the shipped guidance and its rendered recovery destinations.
Contract-Neutral: Documentation and documentation tests only; no export/import, agent, hosting, entitlement or route contract changes.
Change-source: pulse-maintainer
The current hosted failure fetched its index promptly but requested 116 MB of OS packages and continued downloading until the ten-minute setup alarm, before any test. Permit thirty minutes for the larger Chromium/WebKit setup only, with the sixty-minute job, transport timeouts, authentication and test gates unchanged. Retain controls against restoring the short setup cap or expanding the suite deadline.
Contract-Neutral: Hosted E2E acquisition budget and its regression controls only; no product runtime, installer, release contract or frontend-source delta.
Change-source: pulse-maintainer
Replace retry, suppression and workload-action probes with inspection of existing evidence. Preserve consistent full-state recovery, independent coverage, private diagnostics and existing access boundaries. Bind the shipped guide and its links to source and rendered-help regression checks.
Contract-Neutral: Upgrade guidance and regression tests only; no runtime, API or lifecycle contract changes.
Change-source: pulse-maintainer
The first exact-source documentation shard stopped on the old lower-case phrase after the guide moved it to the start of a sentence. Keep the same uncertainty requirement and all privacy checks, then complete the failed and unreached validation.
Contract-Neutral: Case-only expected documentation wording in a regression test; no runtime or guide change.
Change-source: pulse-maintainer
The strengthened copied-command test also checks private output files, so use the shared sensitive-response fixture for its success body before qualification.
Contract-Neutral: Test fixture selection only; no runtime or access-control change.
Change-source: pulse-maintainer
Reuse the existing API helper for saved Patrol settings and deliberate Assistant control changes. Preserve methods, payloads and access scopes while keeping private response bodies out of terminal recordings and making lost-write readback explicit.
Contract-Neutral: Documentation and recipe regression tests only; existing AI settings methods, payloads and access controls are unchanged.
Change-source: pulse-maintainer
The docs-only job kept twelve literal suites while thirty existing privacy, authentication, recovery and other guide suites were omitted. Discover the complete documentation inventory in four isolated bounded shards, trigger on every helper change, and preserve the required check as a fail-closed aggregate. Keep all-suite and explicit smoke execution, safety recipes and deadlines unchanged.
Contract-Neutral: Documentation CI admission and smoke-harness coverage only; no product runtime, installer behaviour, shipped guidance, release checks or subsystem contract changes.
Change-source: pulse-maintainer
Reuse the existing credential-file API helper for member and incoming-share reads. Preserve org-bound settings scopes and session-only mutations while retaining private responses and failing incomplete reads without retry.
Contract-Neutral: Documentation safety maintenance using the existing helper; no endpoint, scope, runtime or authorisation contract changes.
Change-source: pulse-maintainer
Preserve exact candidate f0bc8f11eb and its reviewed 8a4f31b5 ancestor. Reconcile the independently repaired documentation-link guard by retaining main implementation and all controls, adding candidate controls and its exact URL boundary matching. Administrative guide and mirror bytes remain exactly as qualified; no runtime frontend source changes.
Change-source: pulse-maintainer
The complete documentation suite rejected the PR template current-policy anchor as a shipped runtime link. Permit only that exact file and anchor, while retaining rejection of runtime links, other templates and changed paths, queries or anchors. Preserve the reviewed RBAC safety candidate and finish its existing qualification on this additive source.
Contract-Neutral: Repository documentation-link classification and regression tests only; no shipped runtime, administrative recipe, authentication, RBAC, API or frontend behaviour changes.
Change-source: pulse-maintainer
Complete composed smoke validation reported 8.352 seconds against the unchanged eight-second synthetic aggregation limit. MagicMock retains 120,000 call records inside that timed region. Use a constant-space counting closure with the real parser, preserving the dataset, parse-count invariant, correctness assertions and time budget. Production telemetry code is unchanged.
Contract-Neutral: Test instrumentation only; no telemetry schema, aggregation, privacy boundary, runtime behaviour or time-limit changes.
Change-source: pulse-maintainer
The complete current smoke suite rejected the contributor template's deliberate current-process link and buffered browser log controls. Limit the link exception to the exact template and fragment, keep runtime links pinned, and check the complete display-only helper chain with adverse controls. No frontend, backend or safety guidance is changed.
Contract-Neutral: Test-only reconciliation of existing contribution and log-display controls; all product, installer and shipped documentation bytes and subsystem contracts are unchanged.
Change-source: pulse-maintainer
Reuse the existing private-response API helper for all role and user operations, preserving exact methods, bodies, privileges and targets. Document independent decisions and uncertain mutation readback; exercise copied commands against synthetic private success, denial, redirect and incomplete responses without exposing credentials or retrying.
Contract-Neutral: Documentation, mirrored guides and copied-recipe regression tests only; no runtime authentication, RBAC, API or frontend behaviour changes.
Change-source: pulse-maintainer
The current runner hides find and sort failures in process substitution. A partial passing list can omit a failing check and return success. Admit the complete pipeline first, preserve explicit subsets and full failure collection, and exercise the actual runner against both producer failures.
Contract-Neutral: Script test harness and connected regression controls only; no product runtime, installer, workflow selection, deadline or subsystem contract changes.
Change-source: pulse-maintainer
pulse-triage[bot]