Claude 52089c0451 bench: GitHub Actions CI — trust-layer checks, no-net gates, runner calibration ...

Closes the CI-reachable slice of the Phase 1 infra gaps:
- trust-layer job: cargo test + clippy -D warnings + fmt
- target-gates-no-net: fetches pinned targets (new targets/fetch.sh),
  regenerates + verifies corpora, runs 'just gates tokei'
  mechanically, and executes the bench workload inside a
  --network=none container (SPEC 3.1/10 no-net requirement)
- runner-calibration (informational): A/A + injection harness measures
  the shared runner's noise floor per run, evidence uploaded as an
  artifact — environments are judged empirically, not assumed
- perf-probe (informational): reports which perf event sources work

docs/infra.md maps each remaining hardware requirement (pinned cores,
governor/SMT control, separate-uid trust layer) to the bench-metal
self-hosted runner setup a human can complete in ~15 min.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EcKPWQ3MQD4NdEHwar96u2

2026-07-07 00:13:21 +00:00

..

lib.rs

bench: GitHub Actions CI — trust-layer checks, no-net gates, runner calibration

2026-07-07 00:13:21 +00:00

main.rs

gates: verdict pipeline — gates + bench + ledger row, pristine-rebuilt baselines

2026-07-06 23:50:05 +00:00

orchestrate.rs

bench: GitHub Actions CI — trust-layer checks, no-net gates, runner calibration

2026-07-07 00:13:21 +00:00

pin.rs

Bootstrap hotpath from engineering spec v0.1

2026-07-06 18:34:51 +00:00

policy.rs

bench: GitHub Actions CI — trust-layer checks, no-net gates, runner calibration

2026-07-07 00:13:21 +00:00

target.rs

gates: verdict pipeline — gates + bench + ledger row, pristine-rebuilt baselines

2026-07-06 23:50:05 +00:00