kevinveenbirkenbachandClaude Opus 5 d6c4646b1e fix(deploy-verify): let required_by waive a role the runtime gates off ...

tasks/stages/03_destructor.yml includes test-e2e-cli only `when: RUNTIME in [dev, act, github]`, so a production host skips it by design. The coverage verifier demanded it anyway and failed every partial deploy there with "required role(s) did not execute". It stayed hidden because a full deploy passes no --id, which leaves allowed_applications empty and the guard unarmed.

required_by takes a `runtimes` list beside the existing compose/swarm blocks, read before the mode narrowing replaces rb. An unknown or empty runtime waives nothing, so the guard keeps its teeth wherever the runtime cannot be established; only a known runtime the list omits drops the requirement. This is 48753de136 one axis further: a role that a deploy correctly skips must not be demanded of it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-24 18:21:49 +02:00

..

categories

…

ci

fix(ci): narrow a row's architectures by what its variant deploys

2026-09-22 16:01:09 +02:00

domains

refactor(domains): give local testing a .test domain, leave .example to docs

2026-09-02 13:10:34 +02:00

roles

fix(deploy-verify): let required_by waive a role the runtime gates off

2026-09-24 18:21:49 +02:00

__init__.py

…

test_graph.py

…

test_tree.py

…