ci(signing): trust glaeda runner hook df0e90b4

CM
6d ago
+1-0

glaeda pins these runner hooks (glaeda-disk's CMUX_NEXT_DRAIN_HOOK_SHA256), and scripts/ci/glaeda-signing-hooks.txt does not list them yet. Until it does, owned-Mac signing jobs on minis that run them fail their claim gate, and each run's Blacksmith twin signs.

  • df0e90b42c73838e01855a51636b7ed5c47fd918faf76ab815b5ce78aec54e57: glaeda 548d71ae: runner hook: a borrower whose repack finds its store damaged is reset and borrows again once (#1770)

Check before landing: each sha is the sha256 of scripts/glaeda-cmux-runner-hook at a reviewed glaeda main commit, and that hook still waits out an earlier job's leftover processes and gives signing jobs the exclusive claim. tests/test_ci_signing_owned_mac.py checks that every listed sha is a glaeda pin.

Written by cmuxterm-hq .github/workflows/fleet-reconciler-glaeda-signing-hooks.yml (tools/fleet-reconcilers/glaeda_signing_hooks_sync.py). It updates this branch when glaeda pins another hook, and never merges.


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.


Summary by cubic

Adds the glaeda runner hook df0e90b4 (glaeda 548d71ae) to scripts/ci/glaeda-signing-hooks.txt so owned-Mac signing jobs that run it pass their claim gate instead of failing and letting each run's Blacksmith twin sign.

The hook resets a borrower whose repack finds its store damaged, allowing it to borrow once more.