Module provider 

GitHub Actions build-provider orchestration and temporary-ref lifecycle. GitHub Actions build-provider orchestration and isolated temporary-ref publication.

Submission publishes one create-only temporary branch based on the exact requested source revision. The branch changes only the approved workflow and strict request manifest. Git plumbing never switches branches or mutates the caller’s index or working tree.

Structs

CallerGitOutput

Bounded result of one fixed caller-checkout Git read.

CallerGitRepository

One retained, offline-only reader for a caller checkout.

ExecutionWorkflowDoctorRequest

Exact immutable inputs for execution-default workflow verification.

GitInvocation

Fixed Git argument vector plus optional bounded stdin.

GitProcessRunner

Production Git executor rooted at a private bare object database.

GitSnapshotExactRetryPrecomputeRequest

Exact private-DB inputs for no-write planning of one operation-bound child retry.

GitSnapshotExactRetryStageRequest

Exact private-DB inputs for materializing one operation-bound child retry stage.

GitSnapshotImportRequest

Exact immutable inputs for reopening and importing one consented Git snapshot stage.

GitSnapshotKeepaliveRequest

Exact inputs for one local create-only keepalive ref mutation.

GitSnapshotSourceDeleteRequest

Exact inputs for lease-protected deletion of one provider-owned source ref.

GitSnapshotSourcePublicationLeaseRequest

Exact cross-process ownership key for one custom Git snapshot source ref.

GitSnapshotSourcePublishRequest

Exact inputs for one create-only source-ref publication.

GitTemporaryRefPublisher

Git-plumbing implementation that publishes without checkout or branch mutation.

GithubArtifactContext

Exact provider/run identity exposed to an independent artifact verifier.

GithubBuildProvider

Concrete GitHub Actions implementation of the runtime-neutral build-provider contract.

GithubDispatchManifest

Strict immutable request committed to the temporary dispatch ref.

GithubDurableIdentityV1

Live, secret-free provider identity needed to create a durable local job before submission.

GithubGitSnapshotExactRetryAuthorizationV1

Durable child-lineage authority for staging an exact Git snapshot retry.

GithubGitSnapshotExactRetryPlanV1

Deterministic, no-write plan for one exact Git snapshot retry.

GithubGitSnapshotExactRetryStageV1

Complete create-only child stage produced from a verified parent archive blob.

GithubGitSnapshotKeepaliveReleaseAuthorizationV1

Explicit durable-prune authority for releasing one exact local snapshot keepalive.

GithubGitSnapshotRecoveryCandidateV1

Complete path-free recovery candidate discovered without adoption or mutation.

GithubGitSnapshotResumeV1

Versioned, path-free, secret-free resume state for one Git snapshot.

GithubGitSnapshotSubmissionV1

One-shot, path-free authority to create the first durable Git snapshot provider checkpoint.

GithubJobResumeV1

Versioned, secret-free durable state for one GitHub provider job.

GithubMutationAuthorization

Explicit caller authority for externally mutating GitHub state.

GithubPollingPolicy

One bounded policy shared by run discovery and terminal-run polling.

GithubProviderConfig

Fully validated GitHub orchestration policy.

GithubRunIdentityV1

Exact GitHub Actions run and attempt identity safe to persist without credentials.

GithubSignedCleanupEvidenceV1

Secret-free proof that one exact signed GitHub run attempt completed protected cleanup.

GithubVerifiedRunEvidence

Independently verified evidence retained for one exact GitHub run attempt.

GithubWorkflowDispatchReceiptV1

Versioned, secret-free durable state for one GitHub provider job.

GithubWorkflowDispatchResumeV1

Durable no-resend boundary for one exact no-secret workflow dispatch.

NoVerifiedArtifactStore

Artifact store used when verified ingestion is not configured.

PublishedTemporaryRef

Result of one create-only temporary-ref publication.

SystemProviderClock

Production wall clock.

TemporaryRefDeleteRequest

Exact inputs for one lease-protected temporary-ref deletion.

TemporaryRefDoctorRequest

Exact immutable inputs for local trusted-workflow bootstrap verification.

TemporaryRefPublicationLeaseRequest

Deterministic local ownership key held across one publication or crash takeover.

TemporaryRefPublishFailure

Publication error plus exact cleanup ownership when a push may have succeeded.

TemporaryRefPublishRequest

Read-only inputs supplied to one temporary-ref publication.

TemporaryRefPublisherReadiness

Verified publisher readiness for the exact configured remote and trusted ref.

TemporaryRefReconcileRequest

Exact immutable inputs for read-only crash reconciliation of one temporary ref.

WorkflowFingerprint

A validated lowercase SHA-256 digest of the exact generated workflow bytes.

Enums

GitEnvironmentVariable

Exact non-secret environment roles that Git plumbing may override after the sealed policy.

GitExecutionError

Redacted fixed-argv Git execution failure.

GitPublisherConfigError

Invalid local Git publisher configuration.

GitSnapshotRefReconciliation

Read-only result for one exact local or remote Git snapshot ref.

GitSnapshotSourcePublication

Result of a create-only source publication whose process response may be ambiguous.

GithubGitSnapshotPhaseV1

Durable mutation phase for one exact Git snapshot.

GithubJobReconciliation

Provider-level result of reconciling a durable pre-publication intent.

GithubPrincipalIdentityV1

Secret-free authenticated principal identity bound to a durable job record.

GithubProviderConfigError

Invalid security-sensitive GitHub provider configuration.

GithubRunConclusionV1

Terminal GitHub conclusion retained in a durable provider checkpoint.

GithubRunEventV1

Trigger event retained with an exact durable run identity.

GithubRunStatusV1

GitHub run status retained in a durable provider checkpoint.

TemporaryRefPublicationLease

Result of a nonblocking cross-process publication-ownership attempt.

TemporaryRefPublishError

Redacted temporary-ref publication failure.

TemporaryRefReconciliation

Read-only reconciliation result for one deterministic provider ref.

Constants

DISPATCH_MANIFEST_PATH

Strict request file consumed by the generated workflow.

GITHUB_JOB_RESUME_MAX_BYTES

Maximum encoded bytes accepted for one durable GitHub job resume record.

GITHUB_PROVIDER_ID

Stable provider identifier exposed through the remote-build protocol.

GITHUB_PUBLICATION_QUIESCENCE_WINDOW_MS

Minimum quiescence after the first exact absence observation before safe retirement.

GITHUB_SIGNED_CLEANUP_EVIDENCE_SCHEMA_VERSION

Current attempt-scoped signed-cleanup evidence schema.

Traits

GitRunner

Injectable fixed-argv Git executor.

GithubJobCheckpointSink

Injectable durable checkpoint boundary.

ProviderClock

Injectable UTC clock for deterministic protocol events.

TemporaryRefPublisher

Injectable publication boundary used by the provider.

TemporaryRefReconciler

Optional read-only crash-reconciliation boundary for temporary-ref publishers.

VerifiedArtifactStore

Injectable independent artifact ingestion and verification seam.

Functions

validate_github_compile_phase_evidence

Validate credential-free compile evidence against one exact GitHub request and job.