mesh-adminandClaude Opus 5.5 847ffd6d12 Never run the replays from the workspace, with or without a judge cache ...

Without a judge cache the replays still ran mesh-lab's checkout in the workspace
with the container runtime's socket, so a self-judging pull request could write
a test into them (hq issue 709, review 12303). They now run from a copy in a
container volume of the check's own, made before anything of the change runs,
with a fresh home and throwaway caches, removed after the check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 14:34:00 +00:00

..

mesh-builder

Never run the replays from the workspace, with or without a judge cache

2026-10-14 14:34:00 +00:00

mesh-controller

Build every judge where no pull request can reach, and never read mesh-lab at a release

2026-10-14 13:30:46 +00:00