ci: expand build matrix to Linux x86_64 / Linux aarch64 / macOS arm64#2
Open
SMC17 wants to merge 1 commit into
Open
ci: expand build matrix to Linux x86_64 / Linux aarch64 / macOS arm64#2SMC17 wants to merge 1 commit into
SMC17 wants to merge 1 commit into
Conversation
Adds native-runner coverage on three platforms (ubuntu-latest x86_64, ubuntu-24.04-arm aarch64, macos-14 aarch64) plus a cross-compile sanity job that exercises four targets from the x86_64 host. Closes the hardware-class gap on the AGENT_HARNESS evidence ladder: the `hardware-verified` proof level can now reference real arm64 silicon for this substrate library. Type-I lens: matrix labels (`Linux aarch64`, `macOS arm64`) are accurate to the runner architecture GitHub provides; we are not claiming Apple M- series performance characteristics, only that the same Zig 0.16.0 build + test invocations run green on those native runners. Type-II lens: cross-compile sanity job catches platform regressions even if a native runner is offline or queued.
SMC17
added a commit
to SMC17/SMC17
that referenced
this pull request
May 14, 2026
…Zig repos zig-cobs / zig-frame-protocol / zig-graph / zig-h3 / sentinel-sbom each expanded from a single ubuntu-latest job to 3 native runners (Linux x86_64, Linux aarch64, macOS Apple Silicon) plus a 4-target cross-compile sanity job. The `hardware-verified` evidence level is no longer dormant. zig-h3's macOS-from-Linux cross-compile is restricted to Linux targets only — documented as a Zig 0.16.0 LLD-on-mach-o gap, not as a missing test. sentinel-sbom's macOS path also swaps `sha256sum` → `shasum -a 256`. Per-repo PRs: - zig-cobs SMC17/zig-cobs#2 - zig-frame-protocol SMC17/zig-frame-protocol#2 - zig-graph SMC17/zig-graph#2 - zig-h3 SMC17/zig-h3#2 - sentinel-sbom SMC17/sentinel-sbom#2 Honest incident: agent ran `git checkout README.md` while branching zig-cobs and discarded an uncommitted WIP. Reported instead of hidden. Matches the blast-radius-protection-is-substrate-primitive doctrine. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
SMC17
force-pushed
the
ci/cross-platform-matrix
branch
from
a26735d to
b41cb4e
Compare
SMC17
added a commit
to SMC17/SMC17
that referenced
this pull request
May 14, 2026
…Zig repos zig-cobs / zig-frame-protocol / zig-graph / zig-h3 / sentinel-sbom each expanded from a single ubuntu-latest job to 3 native runners (Linux x86_64, Linux aarch64, macOS Apple Silicon) plus a 4-target cross-compile sanity job. The `hardware-verified` evidence level is no longer dormant. zig-h3's macOS-from-Linux cross-compile is restricted to Linux targets only — documented as a Zig 0.16.0 LLD-on-mach-o gap, not as a missing test. sentinel-sbom's macOS path also swaps `sha256sum` → `shasum -a 256`. Per-repo PRs: - zig-cobs SMC17/zig-cobs#2 - zig-frame-protocol SMC17/zig-frame-protocol#2 - zig-graph SMC17/zig-graph#2 - zig-h3 SMC17/zig-h3#2 - sentinel-sbom SMC17/sentinel-sbom#2 Honest incident: agent ran `git checkout README.md` while branching zig-cobs and discarded an uncommitted WIP. Reported instead of hidden. Matches the blast-radius-protection-is-substrate-primitive doctrine.
SMC17
force-pushed
the
ci/cross-platform-matrix
branch
from
b41cb4e to
5d9e0a6
Compare
SMC17
pushed a commit
to SMC17/SMC17
that referenced
this pull request
May 14, 2026
…Zig repos zig-cobs / zig-frame-protocol / zig-graph / zig-h3 / sentinel-sbom each expanded from a single ubuntu-latest job to 3 native runners (Linux x86_64, Linux aarch64, macOS Apple Silicon) plus a 4-target cross-compile sanity job. The `hardware-verified` evidence level is no longer dormant. zig-h3's macOS-from-Linux cross-compile is restricted to Linux targets only — documented as a Zig 0.16.0 LLD-on-mach-o gap, not as a missing test. sentinel-sbom's macOS path also swaps `sha256sum` → `shasum -a 256`. Per-repo PRs: - zig-cobs SMC17/zig-cobs#2 - zig-frame-protocol SMC17/zig-frame-protocol#2 - zig-graph SMC17/zig-graph#2 - zig-h3 SMC17/zig-h3#2 - sentinel-sbom https://github.com/SMC17/sentinel-sbom/pull/2 Honest incident: agent ran `git checkout README.md` while branching zig-cobs and discarded an uncommitted WIP. Reported instead of hidden. Matches the blast-radius-protection-is-substrate-primitive doctrine.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Expands CI from a single
ubuntu-latest(x86_64) job to a three-runner native matrix plus a four-target cross-compile sanity job:ubuntu-latest(x86_64, native) — current defaultubuntu-24.04-arm(aarch64, native) — newmacos-14(Apple Silicon aarch64, native) — newaarch64-linux-gnu,aarch64-macos,x86_64-linux-gnu,x86_64-macos) from the x86_64 hostWhy
Raises the tide on the
hardware-verifiedevidence level defined inAGENT_HARNESS.md. zig-cobs is the bottom of the substrate stack; its portability claims should be checked on real silicon, not just one runner shape.Local verification
zig build teston Linux x86_64 → PASS (22/22 + 117k fuzz)zig build -Dtarget=aarch64-linux-gnuon Linux x86_64 → PASSzig build -Dtarget=aarch64-macoson Linux x86_64 → PASSzig fmt --check src/ build.zig tests/→ PASSCaveats
ubuntu-24.04-armis GitHub's GA-on-public-repo arm64 runner. If the org ever loses access to it, the cross-compile sanity job still validates the same build paths from the x86_64 host.Type-I / Type-II audit
Linux aarch64,macOS arm64) describe the runner architecture only. We are not claiming any benchmark numbers; only thatzig build testruns green on native arm64 Linux + Apple Silicon.Test plan