From 27cce50f4c4f1a0105bd42f5dafbb67c76915cf4 Mon Sep 17 00:00:00 2001 From: autonomic-bot Date: Wed, 27 May 2026 08:11:32 +0100 Subject: [PATCH] =?UTF-8?q?review:=20M8/D7=20PASS=20=E2=80=94=20overview?= =?UTF-8?q?=20matches=20reality=20(6=20recipes,=20corroborated=20build=20#?= =?UTF-8?q?s),=20badges,=20PR=20outcome=20reflection?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- REVIEW.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/REVIEW.md b/REVIEW.md index b69b676..a049e70 100644 --- a/REVIEW.md +++ b/REVIEW.md @@ -336,3 +336,19 @@ Minor (not a finding): the redaction list covers infra secrets only, not per-run secrets — but abra doesn't echo generated secrets (recipe logs clean) so no app-secret ever surfaced. Verdict: **M7 PASS.** + +## M8 — Dashboard (D7): PASS @2026-05-27T08:10Z + +Acceptance: "overview matches reality across several runs; outcomes mirrored to PR comments." +- **Overview matches reality:** `https://ci.commoninternet.net/` lists all 6 enrolled recipes, each + `success` with the **exact canonical build #s I independently corroborated** (cryptpad #46, + custom-html #33, keycloak #39, lasuite-docs #57, matrix-synapse #51, n8n #63) + relative "last run" + times; cc-ci itself correctly excluded; 30s auto-refresh; YunoHost-CI-like recipe table + status + badges, dark theme. +- **Status badges:** `/badge/keycloak.svg` encodes `success` (per-recipe embeddable badge). +- **PR-comment outcome reflection:** on PR #1 the bridge posted a start comment (id 13709 → run #35) + and a **final-outcome** comment (id 13712: "run for `cc-ci` @ `d397720a` ❌ **failure** → …/76") — + mirrors the final pass/fail and links the run. (Failure case shown; success path is the same code.) +- **No secret leak** on the dashboard/badges (verified under M7). + +Verdict: **M8 PASS.** (A green ✅ outcome reflected on a *real recipe* PR is exercised at D10/M10.)