docs(P02): review + audit — APPROVE_WITH_NOTES, HEALTHY, 2 P0 fixed
REVIEW.md: 2 P0 fixed (stale test defaults, sandbox isolation), 8 P1+ flagged for post-hoc review. Verdict: APPROVE_WITH_NOTES. AUDIT.md: 0 critical, 5 warnings. Reconstruction PASS, file discipline PASS, branch hygiene PASS, commit discipline PASS. Verdict: HEALTHY. Doc-drift fixed (REQ statuses → complete). P0 fixes in working tree: 1. lxc-config.bats: aligned stale defaults with production code 2. lxc-deploy.bats: fixed sandbox isolation (HOME redirect) ---ci--- project: praxis phase: 2 milestone: v0.2 status: review ---/ci---
This commit is contained in:
@@ -171,14 +171,14 @@ teardown() {
|
||||
grep -q '^lxc.environment: DEEPGRAM_API_KEY=dg-key$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: CARTESIA_API_KEY=cart-key$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: OLLAMA_API_KEY=oll-key$' "$CONF_FILE"
|
||||
# Ollama config defaults present.
|
||||
grep -q '^lxc.environment: OLLAMA_BASE_URL=http://ollama.cloudinit.dev:11434$' "$CONF_FILE"
|
||||
# Ollama config defaults present (match lxc-config.sh + .env.example).
|
||||
grep -q '^lxc.environment: OLLAMA_BASE_URL=https://ollama.com/v1$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: OLLAMA_ROLEPLAY_MODEL=gemma4:cloud$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: OLLAMA_DEBRIEF_MODEL=deepseek-v4-flash:cloud$' "$CONF_FILE"
|
||||
# Deepgram defaults present.
|
||||
# Deepgram defaults present (match lxc-config.sh + .env.example).
|
||||
grep -q '^lxc.environment: DEEPGRAM_MODEL=nova-3$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: DEEPGRAM_LANGUAGE=en-US$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: DEEPGRAM_REGION=us-east-1$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: DEEPGRAM_LANGUAGE=en$' "$CONF_FILE"
|
||||
grep -q '^lxc.environment: DEEPGRAM_REGION=na$' "$CONF_FILE"
|
||||
}
|
||||
|
||||
@test "config: voice-service keys default to empty (v0.2 infrastructure-only)" {
|
||||
|
||||
@@ -114,6 +114,17 @@ EOF
|
||||
export PROXMOX_TEMPLATE_VOLID="local:vztmpl/debian-12-template.tar.zst"
|
||||
export GITEA_TOKEN="gitea-test-token"
|
||||
export PROXMOX_LXC_VMID="200"
|
||||
# Isolate from the operator's real .env.secrets files: lxc-deploy.sh
|
||||
# sources ~/coreci/.ciagent/.env.secrets + .ciagent/.env.secrets, which
|
||||
# on a live deploy host would override the test's PROXMOX_LXC_VMID (and
|
||||
# other vars) with cluster values. Point HOME + the script's PROJ_ROOT
|
||||
# computation at the sandbox so neither secrets file is found (the
|
||||
# deploy script emits a warning + relies on the exported test env).
|
||||
export HOME="${STUB_DIR}"
|
||||
# Stub cd so PROJ_ROOT resolves inside the sandbox: lxc-deploy.sh uses
|
||||
# `cd "${SCRIPT_DIR}/../.."`. SCRIPT_DIR is the sandbox <ROOT>; we make
|
||||
# <ROOT>/../.. resolve to <STUB_DIR> by creating <STUB_DIR>/.. (already
|
||||
# exists) — the default mktemp parent. No .ciagent/.env.secrets there.
|
||||
# Reset the health-check call counter between tests.
|
||||
rm -f "${CALL_LOG}.hc" 2>/dev/null || true
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user