CI: a pull request into predev runs ONE runner (build, clippy, changed-crate tests); RELEASE_REF 98c57e8a66

[MattJackson]

Status row 99. Spec: BUSBAR-1.6.0 Part 6, "Verification runs once per input (OWNER-LOCKED 2026-10-06)", added verbatim.

Measured basis (2026-10-06): Latchkey CI cost $131/day and pull_request runs were 59% of it. predev enter_pr was identical to enter, so every predev PR was verified twice on 5 large runners.

promote.yml

• pull_request into predev: no hop-shard matrix and no slsa-build. The required hop job runs on preflight's runner and runs busbar-release hop.sh once, unsharded, with BASE_SHARDS=4. The plan is the ladder's predev enter_pr: build:check, build:clippy, build:dlopen-cdylibs, test:workspace and test:workspace-doc over the affected crates (changed packages plus their reverse dependencies). It runs no gates, no oracle and no conformance, and is judged no worse than the base the merge group landed.
• If the PR touches Cargo.lock, the root Cargo.toml, the toolchain, .cargo/, a path in no crate, or a doc some step reads, every crate is affected. A docs-only change keeps the docs-only skip.
• merge_group and the predev->dev PR are unchanged: 4 shards + slsa, and hop folds them. concurrency and cancel-in-progress are unchanged. The hop and preflight required checks are still produced on every path.
• RELEASE_REF 4a7a7bba2c -> 98c57e8a66 (busbar-release dev, DF-WIRE slice 1: a same-dialect answer is the upstream's bytes again (S-3, S-7 withdrawn) #169). It contains 4a7a7bba2c and 1869c0032e.

Spec: the Part 6 subsection (verbatim). "How work lands" item 3 now names the PR's one-runner plan instead of the gates.

Local checks: actionlint is clean. workflow-rules (and its selftest), package-selectors, service-images, design-bindings (regen-clean, no ledger change), deferral-words, no-deferral, design-docs-allowlist and documented-claims are green. xtask workflow and infra tests pass.

This PR touches .github/, so its own run affects every crate. The first plane-only PR after it lands measures the typical case.

[github-actions]

promote into predev: BOARD @09d3c4380: 3 failing test row(s), 12 DENY row(s)

Failing tests (3)

crate	test	step	first panic
``	nextest xtask::cli::selftest_runs_every_registered_gates_red_proof	test:workspace
transport_dropped_in_serves	a_dropped_in_transport_registers_through_the_one_fold_and_serves	test:dropped-in-tcp-transport	crates/busbar/tests/transport_dropped_in_serves.rs:168:13: busbar exited (ExitStatus(unix_wait_status(512))) before serving; log:
-p busbar --test transport_dropped_in_serves	test target failed	test:dropped-in-tcp-transport

DENY rows (12)

gate	row	detail
construction	one-pick-site	3 production call site(s) of 'pick_among(' (ceiling 2): crates/busbar-kernel-egress/src/walk.rs:298; crates/busbar-llm/src/engine/exhaustion/fallback.rs:120; crates/busbar-llm/src/engine/pipeline.rs:8
kind-isolation	kind-isolation:deps	4 finding(s), 78 shipped edge instance(s) over 28 class(es), 78 declaration(s); 62 '[[dep]]' row(s), 0 question(s): unlisted-dep-edge cleanliness -> plugin-tooling busbar-core-admin -> busbar-plugin-l
kind-isolation	kind-isolation:test-deps	5 finding(s), 36 test edge instance(s) over 19 class(es), 36 declaration(s); 22 '[[dep]]' row(s), 0 question(s): unlisted-dep-edge cleanliness -> legacy busbar-core-admin -> busbar-a2a is a test edge
kind-isolation-ship	kind-isolation:deps	16 finding(s) over 78 shipped edge(s): ship-edge cleanliness -> plugin-tooling busbar-core-admin -> busbar-plugin-loader is 'not-allowed': the architecture grants no cleanliness -> plugin-tooling edge
kind-isolation-ship	kind-isolation:test-deps	13 finding(s) over 36 test edge(s): ship-edge cleanliness -> legacy busbar-core-admin -> busbar-a2a is 'not-allowed': the architecture grants no cleanliness -> legacy edge, and the ship criterion is t
kind-isolation-ship	kind-isolation:faces	4 finding(s) over 31 crate(s): foreign-entry crates/busbar busbar is kind 'root' and implements 'Store' 2 time(s) in shipped source — the entry face of kind 'store'. A trait implementation is a claim
kind-isolation-ship	kind-isolation:testkit	2 finding(s) over 12 crate(s): battery-ignored crates/busbar-plane-decisions busbar-plane-decisions carries a tests/conformance.rs whose every entry is '#[ignore]'d (or which has none). 'cargo test'
kind-isolation-ship	kind-isolation:legacy-drain	5 finding(s): transitional-live qa/kind-isolation.toml 'busbar-a2a -> busbar-core-admin' (legacy drain: the retiring A2A engine's tests drive the admin surface that drained into the cleanliness tier)
kind-isolation-ship	kind-isolation:control-path	74 finding(s) over 3 control surface(s): upstream crates/busbar-core-admin/src/admin_codec/meta.rs:84 busbar-core-admin names 'egress' — a control surface has no upstream to reach, so the vocabulary o
ship-ready	ship-ready:ship-twin	'kind-isolation-ship' is not green: kind-isolation:deps (a dependency the architecture does not grant is still in the graph); kind-isolation:test-deps (a dependency the architecture does not grant is
instance-noun-neutrality	instance-noun-neutrality:voice	tracked known-debt census — 8: crates/busbar-plane-llm/src/codec/gemini/handler.rs×7 [cross-plugin] | crates/busbar-plane-llm/src/codec/gemini/tests/handler_tests.rs×2 [cross-plugin] | crates/busbar
structure-lint	structure-lint:plane-dup:unledgered	24 finding(s): PLANE-DUPLICATE (module): 'config.rs' — a2a:crates/busbar-a2a/src/a2a/config.rs decisions:crates/busbar-plane-decisions/src/config.rs mcp:crates/busbar-mcp/src/mcp/config.rs voice:crate

Judged against base ad5d41049: 0 new red, 0 worse, 8 standing (excused).

tests passed: 24511, failed: 2. Run: https://github.com/GetBusbar/busbar/actions/runs/37561580934 . Artifact verdict-09d3c4380cc6112720233f91457d79c8511bd263 (failures.json, junit.xml, raw.log; 90 days).