Dotta b88fadb039 fix(ci): emit one runner route (#12444) ...

## Summary

- emit exactly one `runner` job output from the trusted gate
- write `ubuntu-latest` only inside fail-closed paths
- write the Fleet label only after every identity, PR-state,
merge-equivalence, and rerun-actor check passes

## Canary finding

The live gate reached the trusted success notice, but GitHub retained
the first of two duplicate `runner=` outputs, so policy still requested
`ubuntu-latest`. No EC2 instance launched. Routing was disabled
immediately.

## Validation

- `actionlint .github/workflows/pr-trusted.yml .github/workflows/pr.yml`
- `node --test ./scripts/__tests__/e2e-shard.test.mjs`
- internal routing harness passes and now requires exactly one runner
output in all cases
- AWS routing remains disabled during rotation

2026-08-28 11:22:05 -05:00

..

agent-runtime-images.yml

build(deps): bump actions/checkout from 6 to 7 (#8461)

2026-06-23 10:13:39 -07:00

commitperclip-review.yml

fix(build): enforce Node 24 across Paperclip (#11792)

2026-08-21 10:17:52 -07:00

docker.yml

Install the declared Sentry server package into the hosted image (#12330)

2026-08-27 19:10:49 -07:00

e2e.yml

fix(build): enforce Node 24 across Paperclip (#11792)

2026-08-21 10:17:52 -07:00

pr-trusted.yml

fix(ci): emit one runner route (#12444)

2026-08-28 11:22:05 -05:00

pr.yml

ci: pin equivalent merge validation (#12442)

2026-08-28 11:18:55 -05:00

refresh-lockfile.yml

fix(build): enforce Node 24 across Paperclip (#11792)

2026-08-21 10:17:52 -07:00

release-smoke.yml

Follow the current onboarding arc in the release smoke (#12423)

2026-08-28 07:21:08 -07:00

release-verify.yml

feat(runner): define package API and verification boundary (#12129)

2026-08-25 09:31:48 -05:00

release.yml

feat(release): thorough notes skeletons — nest each PR's summary at creation (#12124)

2026-08-24 20:51:33 -07:00

storybook-visual.yml

build(deps): bump actions/setup-node from 6 to 7 (#9884)

2026-07-21 12:04:06 -05:00