Repository navigation
release: adopt main 44a0cd6 onto runtime-production (candidate runtime SHA) - #368
Merged
Merged
Conversation
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
…sh-runtime-target-lifecycle Bumps [QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-target-lifecycle](https://github.com/quantstrategylab/quantruntimesettings) from bbacba04baccbca91e4ba59c4dcaf460847e29f7 to 685c0394ae097b36f33fe7cdeb24471c9b6ece06. - [Release notes](https://github.com/quantstrategylab/quantruntimesettings/releases) - [Commits](QuantStrategyLab/QuantRuntimeSettings@bbacba0...685c039) --- updated-dependencies: - dependency-name: QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-target-lifecycle dependency-version: 685c0394ae097b36f33fe7cdeb24471c9b6ece06 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…sh-runtime-execution-evidence Bumps [QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-execution-evidence](https://github.com/quantstrategylab/quantruntimesettings) from bbacba04baccbca91e4ba59c4dcaf460847e29f7 to 685c0394ae097b36f33fe7cdeb24471c9b6ece06. - [Release notes](https://github.com/quantstrategylab/quantruntimesettings/releases) - [Commits](QuantStrategyLab/QuantRuntimeSettings@bbacba0...685c039) --- updated-dependencies: - dependency-name: QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-execution-evidence dependency-version: 685c0394ae097b36f33fe7cdeb24471c9b6ece06 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.7.0 to 2.8.0. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.7.0...2.8.0) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.8.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Codex <noreply@openai.com>
…324) Co-authored-by: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
…acts-setup-uv-20261002 fix: install uv in isolated account facts job
Co-Authored-By: Codex <noreply@openai.com>
…-identity-20261002 fix: use workflow identity instead of dynamic run title
Co-Authored-By: Codex <noreply@openai.com>
…entity-20261002 fix: qualify read-only identity and serialized reports
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
* fix: preserve valid Unicode wallet asset codes Co-Authored-By: Codex <noreply@openai.com> * Classify private-safe account-facts publishing failures Co-Authored-By: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>
* fix: preserve valid Unicode wallet asset codes Co-Authored-By: Codex <noreply@openai.com> * Classify private-safe account-facts publishing failures Co-Authored-By: Codex <noreply@openai.com> * Diagnose account facts receiver from the existing runner with one readonly request Co-Authored-By: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
* feat: read native USDT wallet valuation for account facts Co-Authored-By: Codex <noreply@openai.com> * test: isolate locked SDK wallet request verification Co-Authored-By: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
…product-type-20261004 Include Binance native API product type in existing account facts
Co-Authored-By: Codex <noreply@openai.com>
…ype-readback-20261004 fix: report only validated Binance product type category
…eceipt-candidate-20261004-4c87d29a feat: add inactive interval source receipt candidate
…reader-prerequisite-20261004-e9fc124c feat: add inactive retained interval reader prerequisite
…sh-runtime-execution-evidence Bumps [QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-execution-evidence](https://github.com/quantstrategylab/quantruntimesettings) from 685c0394ae097b36f33fe7cdeb24471c9b6ece06 to f2597e8bfb25881242b13145cb5f42d06ba3476c. - [Release notes](https://github.com/quantstrategylab/quantruntimesettings/releases) - [Commits](QuantStrategyLab/QuantRuntimeSettings@685c039...f2597e8) --- updated-dependencies: - dependency-name: QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-execution-evidence dependency-version: f2597e8bfb25881242b13145cb5f42d06ba3476c dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.8 to 3.1.9. - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.1.8...3.1.9) --- updated-dependencies: - dependency-name: werkzeug dependency-version: 3.1.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…sh-runtime-target-lifecycle Bumps [QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-target-lifecycle](https://github.com/quantstrategylab/quantruntimesettings) from 685c0394ae097b36f33fe7cdeb24471c9b6ece06 to f2597e8bfb25881242b13145cb5f42d06ba3476c. - [Release notes](https://github.com/quantstrategylab/quantruntimesettings/releases) - [Commits](QuantStrategyLab/QuantRuntimeSettings@685c039...f2597e8) --- updated-dependencies: - dependency-name: QuantStrategyLab/QuantRuntimeSettings/actions/publish-runtime-target-lifecycle dependency-version: f2597e8bfb25881242b13145cb5f42d06ba3476c dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [multidict](https://github.com/aio-libs/multidict) from 6.7.1 to 6.9.1. - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](aio-libs/multidict@v6.7.1...v6.9.1) --- updated-dependencies: - dependency-name: multidict dependency-version: 6.9.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
* docs: rewrite governance templates into human-readable prose - README.md / README.zh-CN.md: add a natural-language intro paragraph after the title (what the repo is, its role in the QSL system, who it's for), and move the "QSL architecture role" field list out of the opening position into a mid-document "Architecture role" section, right before the operational sections (Runtime boundary, Deploy safely, Quick start, etc). No factual field content changed. - CONTRIBUTING.md / SECURITY.md: remove the templated "中文摘要" meta-description block that just restated the document's own purpose/coverage/reading order. The one piece of real information in it (dry-run/test-environment verification before touching live trading, credentials, Cloud Run, or exchange/broker APIs) is now a normal bullet under CONTRIBUTING.md's Ground Rules instead of a summary blurb; SECURITY.md already covers the same point in its own intro, so nothing needed to move there. No code or behavior changes. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * docs: remove templated summary from CODE_OF_CONDUCT.md Drop the same mechanically-generated "## 中文摘要" meta-description block already removed from CONTRIBUTING.md and SECURITY.md. The one risk note it carried (discussions touching credentials, trading, or live systems should stay measured and evidence-based) wasn't explicitly stated in the body, so it's now folded as a plain sentence into the "Project Scope" section instead of a standalone summary. No other content changed. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Codex <noreply@openai.com>
* Use scoped GitHub App tokens for Binance authority maintenance Co-Authored-By: Codex <noreply@openai.com> * Add read-only authority App authentication check Co-Authored-By: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
…ect-read-20261008 Decouple bound account facts reads from Runtime success
Co-Authored-By: Codex <noreply@openai.com>
…resh-design-20261008 Keep read-only account balances fresh independently of Runtime
…355) Co-authored-by: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
…-observe-20261008 fix: observe original scheduler without runtime reports
Co-Authored-By: Codex <noreply@openai.com>
…-observe-artifact-local fix: decouple scheduler monitoring from trading reports
Co-authored-by: Codex <noreply@openai.com>
…#359) Move cycle-scoped TREND_UNIVERSE mutations onto RunContext/ContextVar so module globals are not rewritten across cycles. Keep unbound fallback for compat. Do not change STRATEGY_RUNTIME activation or submission/owner rules.
…360) PR-2 of B09: activate still writes module STRATEGY_RUNTIME for unbound fallback/compat, and also stores the handle on ExecutionRuntime plus active RunContext. Cycle-path evaluate/metrics/artifact/display reads go through resolve_strategy_runtime. No submission/owner changes.
PR-3: while a RunContext is bound, resolve_strategy_runtime requires ctx.strategy_runtime and never consults module STRATEGY_RUNTIME. Activate during a bound cycle mounts on context only (no module leak); unbound activate still updates the module for compat. Tests poison the module during cycles to prove isolation. B04 submission/owner untouched.
When GitHub reports the watched Runtime workflow as disabled_manually or disabled_inactivity, treat the heartbeat as not_applicable instead of alerting on an empty lookback. Matches run 37911924433 (0 strategy runs while Runtime was disabled).
…isabled-workflow fix(ops): skip Runtime heartbeat when main.yml disabled
…#363) Pin QuantPlatformKit to #657 (155d74a6) and consult pure T2/T3 guards on Binance SUBMISSION_UNKNOWN deny paths. Local raise still always wins (zero behavior change on allow / reconcile-success). FILLED_ACCOUNTING_PENDING untouched (B13-b G3).
…time env (#365) Co-authored-by: Pigbibi <Pigbibi@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Brings runtime-production up to main 44a0cd6 (after #367 reconciled the branches). runtime-production is already an ancestor of main, so the resulting tree equals main exactly.
Purpose: produce one candidate SHA usable for both BINANCE_RUNTIME_WORKFLOW_SHA and BINANCE_RUNTIME_RELEASE_SHA.
Source-only. This merge does NOT change any pin, variable, secret, environment, scheduler or VPS REF, and Runtime (main.yml) stays manually disabled. Authority reissue will be run in plan mode only; apply, pin updates, TG_TOKEN and enabling Runtime are separate owner-approved steps.