From 3aaf1f8b1e1e525378f0f2330fd5453a3ac1c252 Mon Sep 17 00:00:00 2001 From: Dotta Date: Mon, 12 Oct 2026 18:32:37 -0500 Subject: [PATCH 1/2] fix(build): retain Pi v24 attestation in Docker context Co-Authored-By: Paperclip --- .dockerignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.dockerignore b/.dockerignore index 2386941de44..8ae5f323da0 100644 --- a/.dockerignore +++ b/.dockerignore @@ -55,6 +55,7 @@ packages/paperclip-runner/test-fixtures/pi-acp/** !packages/paperclip-runner/test-fixtures/pi-acp/profile-v21-identity.json !packages/paperclip-runner/test-fixtures/pi-acp/profile-v22-identity.json !packages/paperclip-runner/test-fixtures/pi-acp/profile-v23-identity.json +!packages/paperclip-runner/test-fixtures/pi-acp/profile-v24-identity.json !packages/paperclip-runner/docs/capability-contract.md # check:runner-workflow-traceability access()es every regression test the # stress-traceability spec names — those are src/**/*.test.ts files, so From 79779c5a968a137a18fa46eedc5512aa74e35ff7 Mon Sep 17 00:00:00 2001 From: Dotta Date: Mon, 12 Oct 2026 18:32:41 -0500 Subject: [PATCH 2/2] docs: retain cloud attestation context failure and correction Co-Authored-By: Paperclip --- doc/plans/2026-10-12-claude-runner-default.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/doc/plans/2026-10-12-claude-runner-default.md b/doc/plans/2026-10-12-claude-runner-default.md index 7768fcef570..49e1afaf8c5 100644 --- a/doc/plans/2026-10-12-claude-runner-default.md +++ b/doc/plans/2026-10-12-claude-runner-default.md @@ -518,3 +518,10 @@ candidate source through the existing provider-free cloud workflow, with tooling and product identities recorded separately. No publication, deployment or paid retry is part of that campaign. The actual foundation code-owner approval and master reconciliation remain external prerequisites for normal merge sequencing. + +The first corrected candidate's cloud Docker-context check independently found +profile 24 excluded by the existing explicit attestation allowlist. The new +fixture now has its own exception alongside immutable prior identities; other +fixtures remain excluded. Cloud job 115053600515 retained the exact ENOENT +failure. No local Docker invocation was used. The next composed heads must pass +this check before candidate package qualification.