Skip to content

Bind conformance database and cache images to immutable digests #14

Description

@rmcdaniel

Problem

The exact-artifact PHP conformance runtime launches mysql:8.0 and redis:7-alpine by mutable tags. Candidate plans and retained suite evidence bind the seven Durable Workflow distributions, but do not bind the database and cache image bytes. Retrying or recovering the same plan can therefore execute different infrastructure under the same evidence identity, weakening reproducibility and failure attribution.

Acceptance criteria

  • Resolve each required database and cache image to an immutable repository digest before experiment execution.
  • Launch runtime dependencies by those exact digests and retain their normalized image identities in experiment and suite evidence.
  • Recovery of an existing plan reuses the same dependency identities and fails closed if they are missing, unresolved, or mismatched.
  • Contract and aggregation validation reject mutable tag-only evidence and dependency drift.
  • Focused coverage proves digest binding, mismatch rejection, and recovery identity continuity.
  • Public source qualification and one clean exact-artifact conformance run pass with the retained dependency identities.

Completion

Close when a public conformance release names the immutable MySQL and Redis digests it executed, and replaying the same plan cannot silently consume different dependency images.

Metadata

Metadata

Assignees

No one assigned

    Labels

    authority:githubGitHub is the authoritative lifecycle record for this workbeta:compatibleMay be completed without changing the frozen beta contractcompletion:evidence-verifiedAcceptance, fixed version, and required operational evidence are publicly verifiedkind:defectA public product behavior is incorrectpriority:P2Normal-priority product workrepo:github-control-planeOwned by the public organization control planestatus:doneDerived from the authoritative closed issue state

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions