Check Seanfarm job boundaries with jq #604

Merged

binjovi-bot merged 2 commits from perf/seanfarm-job-guards into trunk

2026-09-10 22:47:09 +00:00

sean commented

2026-09-10 22:24:37 +00:00

Owner

Validation: all seven guards pass with Python blocked. Existing negative controls remain, and eleven batched mutations exercise host and credential boundaries. ShellCheck, shell syntax and diff checks pass.

Replace Python in seven job guards with parsed jq checks and shell extraction. Preserve retirement grants, BuildKit profiling restrictions, kernel signing dependencies, node snapshot ordering and replaceable retirement Jobs. Give extracted scripts private temporary directories. Validation: all seven guards pass with Python blocked. Existing negative controls remain, and eleven batched mutations exercise host and credential boundaries. ShellCheck, shell syntax and diff checks pass.

sean added 1 commit

2026-09-10 22:24:38 +00:00