From d6a9725d6c2ccfc2f4da179bd5a30f32903ea8e9 Mon Sep 17 00:00:00 2001
From: Ario Barin Ostovary <arioostov@gmail.com>
Date: Tue, 25 Aug 2026 13:50:40 -0400
Subject: [PATCH] check compass mcp freshness

---
 .github/workflows/check.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index a3e9905f..943552eb 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -41,3 +41,27 @@ jobs:
       - name: Run portable tests
         shell: powershell
         run: ./scripts/test-all.ps1
+
+  compass-mcp-freshness:
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Require production MCP at pushed revision
+        env:
+          EXPECTED_REVISION: ${{ github.sha }}
+        shell: bash
+        run: |
+          python - <<'PY'
+          import json
+          import os
+          import urllib.request
+
+          expected = os.environ["EXPECTED_REVISION"]
+          with urllib.request.urlopen("https://compass.ariobarin.com/healthz?fresh=1", timeout=20) as response:
+              health = json.load(response)
+          actual = health.get("source_revision")
+          if actual != expected:
+              raise SystemExit(f"production Compass MCP is stale: {actual} != {expected}")
+          print(f"production Compass MCP is current: {actual}")
+          PY