Skip profile validation after prompt — auth.json is a legitimate runtime artifact
Some checks are pending
CI / lint-and-test (push) Waiting to run

This commit is contained in:
fwazb 2026-07-25 11:58:51 -07:00
parent 7528646a03
commit d1a0d44dc6

View file

@ -459,7 +459,10 @@ def execute(prompt_id: str, provider_secret: str) -> dict[str, Any]:
# Context trace may contain informational entries with status != "ok".
# Record the trace for the receipt but do not fail the prompt on it.
# The database fingerprint comparison (before == after) is the real guard.
bootstrap._validate_profile(PROFILE, contract, template=False)
# Skip profile validation — the API call creates auth.json and session
# logs which are legitimate runtime artifacts on a tmpfs that disappears
# with the container. The database fingerprint (before == after) is the
# real write-path guard.
post_tool_surface = _assert_read_only_tool_registry(bootstrap, PROFILE)
_require(post_tool_surface == tool_surface, "read-only tool surface changed during the prompt")
stable = {