Skip to content

fix(appliance): isolate immutable SIF startup - #481

Merged
castrojo merged 2 commits into
projectbluefin:mainfrom
TB516:fix/sif-appliance-semantics
Sep 13, 2026
Merged

castrojo merged 2 commits into
projectbluefin:mainfrom
TB516:fix/sif-appliance-semantics

Conversation

@TB516

@TB516 TB516 commented Sep 12, 2026

Copy link
Copy Markdown
Contributor

Closes #467

The immutable appliance now starts through a dedicated entrypoint that:

  • uses an appliance-owned OMP profile so inherited host MCP configuration cannot break startup
  • disables OMP startup update checks and rejects in-place omp update with artifact-replacement guidance
  • documents and tests the explicit BLUEFIN_REVIEW_INHERIT_OMP_CONFIG=1 host-profile opt-in
  • bumps the appliance revision for the changed shipped artifact

Validation:

  • bash tests/appliance-contract.sh
  • bash tests/image-contract.sh
  • bash tests/omp-review-mode.sh

— hive: backend=codex

Signed-off-by: TB516 <TB516@users.noreply.github.com>
pre-commit shfmt hook rewrote '--help|-h|help)' to '--help | -h | help)'
in CI, failing validate. No behavior change.

Signed-off-by: sec-check[bot] <sec-check[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

P1 — make the immutable SIF appliance update and MCP startup semantics explicit

2 participants