Skip to content

Pin corrected trusted grader with OIDC caller permission - #5

Open
gidutz wants to merge 1 commit into
mainfrom
codex/reliable-grader-pin
Open

gidutz wants to merge 1 commit into
mainfrom
codex/reliable-grader-pin

Conversation

@gidutz

@gidutz gidutz commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Pin the learner caller to the corrected trusted grader release and grant id-token: write for direct score reporting. This replaces the proposed pin in #4; that release has reporter retry/generator defects (and the intent release rejects its new caller permissions).

Rollout gate: merge/publish the grader PR first while preserving this exact commit, rehearse a real learner fork, then coordinate these caller pins with TensorLearn exercise records. Existing copied labs retain their release. Do not merge this starter before records are prepared. No customer records changed here.

Passed: full immutable pins and caller permission inspection; intent caller exactly matches the protected grader formatter. Failed: none. Skipped: none. Unrun: live OIDC/negative/recovery rehearsal and exercise re-pinning. Existing learner exercise tests intentionally include unsolved work and are not callback acceptance.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant