Skip to content

Add the pull-request CI gate: rust-checks, smoke, interop - #21

Merged
lann merged 1 commit into
mainfrom
tls-ci
Aug 6, 2026
Merged

Add the pull-request CI gate: rust-checks, smoke, interop#21
lann merged 1 commit into
mainfrom
tls-ci

Conversation

@lann

@lann lann commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

The repository had no PR CI — only the scheduled timing lab — so the justfile gates ran on developer machines alone and the branch ruleset had nothing to require, leaving auto-merge inert here (the follow-up flagged when the org rulesets landed).

Three jobs, split by environment weight, each running the recipes the AGENTS.md check table names: rust-checks (just check + just audit), smoke (just smoke + just smoke-tls-virt), interop (just interop). The job bodies live in the justfile; the workflow only provisions the environment — rustup per rust-toolchain.toml, taiki-e/install-action for just/wasmtime/wasm-tools/wac (wac-cli rides the action's cargo-binstall fallback, token-authenticated), setup-go pinned by the interop peer's go.mod, Swatinem cache with main-only saves. just bench and the timing lab stay non-gating by design (statistical; see timing-lab.yml's header).

The Main ruleset now requires these three contexts plus PR flow, so this PR is itself the first exercise of the gate: it merges only by passing the CI it adds.

The repository had no PR CI — only the scheduled timing lab — so the
justfile gates ran on developer machines alone, and the branch ruleset
had no checks to require. Three jobs, split by environment weight, each
running the recipes the AGENTS.md check table names:

- rust-checks: `just check` (fmt, clippy all-features, workspace tests,
  wasm build) plus `just audit` (no table-based AES in the release wasm
  artifact).
- smoke: `just smoke` (the loopback rigs under Wasmtime) and
  `just smoke-tls-virt` (both tls-virt deliveries against openssl over
  real TCP).
- interop: `just interop` (the composed component against OpenSSL and
  Go peers over TCP, and the quinn leg against quic-go over UDP, both
  directions).

The job bodies live in the justfile; the workflow only provisions the
environment (rustup per rust-toolchain.toml, taiki-e/install-action for
just/wasmtime/wasm-tools/wac, setup-go pinned by the interop peer's
go.mod, Swatinem cache with main-only saves). `just bench` and the
timing lab stay non-gating by design.
@lann
lann enabled auto-merge August 6, 2026 03:55
@lann
lann merged commit 5685c40 into main Aug 6, 2026
3 checks passed
@lann
lann deleted the tls-ci branch August 6, 2026 04:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant