Repository navigation
P0 CI: OCR binary disappears between installation and review steps on ARM; preserve parent gate #150
Description
Verified failure, 2026-10-21 — PR #139, immutable HEAD 7e0433672135407a892e099f08a11636afc514f0
On OpenCodeReview dispatcher run 39558511594, the trusted-base runner selector scheduled child run 39558563428 attempt 1 on ubuntu-24.04-arm (job 119084069238).
The downloaded child job log demonstrates:
- Pinned composite action
alibaba/open-code-review@fabbdb296b0d97e2140ada8d54ca7d6d6d1d7ad4v1.12.13 runsnpm install -g @alibaba-group/open-code-review@1.12.13, immediately invokesocr version, and successfully printsopen-code-review v1.12.13 (fabbdb2) linux/arm64at 06:57:04 UTC. - In the composite action's later
Run OpenCodeReviewstep, theocr reviewcommand fails twice with/home/runner/work/_temp/...sh: line 28: ocr: command not foundat 06:57:05 UTC, returning exit 127. No PR source failure or review verdict was obtained. - The parent reports failure. The worker re-ran child run 39558563428 attempt 2 while original dispatcher 39558511594 remains terminal failure. A child retry alone does not prove the originally required PR check passed.
Verified failure boundary: executable ocr is available in the installation step but missing at the subsequent composite-action review step on the ARM runner. The exact underlying cause (PATH/environment persistence, symlink/bin materialization, or external action bug) is UNCONFIRMED; do not attribute it to ARM compatibility or suppress this gate without confirming.
Required bounded remediation (separate CI/toolchain ownership)
- Diagnose
command -v ocr, resolved path/target,npm config get prefix,PATHand filesystem existence without tokens/secrets both after install and immediately before review on ARM and x64. Reproduce under pinned action/CLI versions and exact source SHA. - Fix at the narrowest owned layer: upstream pinned composite-action correction, tested
ocrbinary PATH bootstrap/shim, or compatibility manifest adjustment only with actual cross-runner evidence. Preserve pinned SHA and allowlisted runner fallback gates. - Rerun complete parent OCR workflow and ensure immutable-head PR status reflects actual child review success; no manual fake check/status or review PASS from install success.
- Tests: install-step success then missing binary on next step must fail with diagnosable redacted error; valid end-to-end review; ARM/x64; workflow_dispatch child retry & parent status consistency; no secrets in logs; regression CI on fixed SHA and independent review.
- Coordinate with running KitDev33 Gen19 / AP-ISS-0201 worker; do not alter its claim, worktree, branch or PR fix(runtime): close general library OCR findings (AP-ISS-0201) #139 without ownership. Do not merge PR fix(runtime): close general library OCR findings (AP-ISS-0201) #139 while OCR remains red.
Other exact-head workflows were passing/in progress; this issue is CI infrastructure, independent of AgentProxy application security findings. No source or authority mutation by GoalKeeper during triage.
Activity
khanhkit commentedon Oct 21, 2026
Distinct second verified failure mode — 2026-10-21, PR #139
The OpenCodeReview parent run 39558511594 was retried after the first child
ocr: command not found. On parent attempt 2, child run 39562425072 / job 119096604542 successfully launchedocr review, but all 22 file review subtasks failed because the configured review LLM endpoint returned503 Service Unavailablewith messageAll fusion panel models failed(runner log at 2026-10-21T07:36:26Z). The CLI concludedreview failed: all 22 file review(s) failedand exited 1. This is not the earlier missing binary failure and is not a review success. Parent attempt 3 wasin_progressat ~21:36 ICT; do not assume final outcome.Treat as distinct backend model availability/configuration outage: verify sanitized endpoint availability, model alias, provider health/rate/quota and secret-bearing config without exposing credentials. Retry through the official parent workflow when backend healthy, preserve exact SHA and all blocking review threads; avoid marking 503 as a waived PASS. Keep this issue's original PATH regression acceptance separately. KitDev33 remains owner of PR #139; no source/ref/claim mutation by this comment.
khanhkit commentedon Oct 21, 2026
KitDev33 Gen20 — second independent OCR infrastructure failure (2026-10-21, 21:34 ICT verification)
PR #139 exact head
7e0433672135407a892e099f08a11636afc514f0remains blocked by parent OpenCodeReview run 39558511594. Attempt 2 of that parent spawned new child run 39562425072, job119096604542, which failed for a reason distinct from the original PATH issue. Child log confirmsocritself started and ran, but all 22 groups failed with LLM HTTP 503 Service Unavailable, payload{"message":"All fusion panel models failed"}, finalError: review failed: all 22 file review(s) failed. The parent correctly remained FAILURE. This establishes an independent OCR LLM-provider availability failure, not an AgentProxy source code failure. Do not fake a parent check success from child run 39558563428 attempt 2, which had succeeded earlier.At this checkpoint, a bounded parent attempt 3 was requested via official GitHub Actions
rerun_failed_workflow_run_jobs, still on same source SHA. No review/CI gate has been disabled, no privileged runner config/secrets touched, and no #150-owned file changed by KitDev33. For #150 owner: add bounded/retriable 503 diagnostics (redacted) with capacity/circuit-breaker handling; investigate original binary PATH visibility separately; preserve parent→child truth and required check. PR #139 is not merge-ready until parent OCR becomes terminal SUCCESS and independent review/approval is complete.khanhkit commentedon Oct 21, 2026
Follow-up, 2026-10-21 ~21:50 ICT — parent gate eventually recovered without waiver
GitHub OpenCodeReview PARENT run 39558511594 attempt 3 completed SUCCESS at original source HEAD
7e0433672135407a892e099f08a11636afc514f0, backed by child run 39618179486 SUCCESS. This is a real hosted result, not a synthetic status; required gate remained enabled. The successful reviewer posted four new review findings on PR #139, so that PR is still NOT merge-ready until review remediation and independent audit/Architect approval.Do not close #150 on this alone. The earlier ARM
ocrPATH failure (child 39558563428 attempt 1) and transient LLM503 All fusion panel models failed(child 39562425072 attempt1) remain reproducible/forensic infrastructure defects needing diagnostics and reliability improvements. KitDev33 does not own CI toolchain files and has not mutated them.