Skip to content

rl-identity-tiering: drop plugin source hashes (L9.11), release-mode code packs (L9.12) - #267

Merged
michaellchung merged 4 commits into
mainfrom
s24p3-hash
Oct 26, 2026
Merged

michaellchung merged 4 commits into
mainfrom
s24p3-hash

Conversation

@michaellchung

Copy link
Copy Markdown
Contributor

Stacked on #266 (s24-pr5-tb2-support). Finishes the run identity work of openspec change rl-identity-tiering (S24 item 7).

  • L9.11: remove the runtime plugin source hash checks (pipeline_sha256, sample_filters_sha256); the semantic hash and the run code pack identify the code now. Example specs and golden samples updated. Done before the "two production runs" condition in tasks.md; the task entry says so.
  • L9.12: release-mode run code packs (--rl-code-pack release). The island runs only the code baked into a yeto release image (/opt/yeto/src); the launcher uploads nothing, the pack digest is the image digest, and the island checks its code root and the recorded yeto/ source hash before it starts.
  • Release image builder writes the code layer as one GNU tar from the unpacked tree (git archive's pax global header made Modal's umoci refuse the image); two builds give the same layer and image digest. hash-migration.md entry.
  • tasks.md: L9.9, L9.11, L9.12 status.

GPU evidence (Modal 1x H100!, Qwen3-0.6B LoRA, no-sync; about $3, estimated; records in SESSION24/gpu/T-HASH3-review.md):

  • L9.9: t-hash3-dev-20261019a i0 + i1, rc=0. Both island starts verified pack 59ddf4ea; i1 reused the run's pack after the local tree changed and resumed from cut r000002 to round 4.
  • L9.12: t-hash3-rel-20261019b, rc=0. Island verified the release image (commit 7bbfa342) and trained 2 rounds. Not checked on sky clouds; Verda (in-VM docker) refuses release mode.

Tests: full suite on the remote CPU box (yeto-cpu-test) at 78be41d: 6049 passed, 58 skipped, 0 failed.

🤖 Generated with Claude Code

chowhsu and others added 4 commits October 19, 2026 06:49
The reward pipeline and the sample filters re-checked a merged source hash
shipped in yeto_algo_plugins. The run code pack now pins code, so drop the
pipeline_sha256 / sample_filters_sha256 fields and their hard rejects, the
golden CODE-HASH mask, and the stale plugin hashes in the example specs.
A legacy config that still carries the fields is accepted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
--rl-code-pack release takes --rl-image as a yeto release image: its digest
is the run pack digest, nothing is uploaded, and the launcher ships no local
tree (no sky workdir, no Modal add_local_dir). Islands get
--code-pack-mode release and check their tree against the image's release
manifest (source root and source tree hash). Moving a run between images
or between modes needs --rl-code-pack-upgrade with an equal semantic hash.
In-VM docker clouds refuse release mode (the host workdir is mounted).

The build script now records source_tree_sha256 and links
/root/sky_workdir to /opt/yeto/src in the release layer.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Modal's image unpacker (umoci) refused the first release image: the layer
kept the pax global header (typeflag 'g') that git archive writes. Build
the layer from an unpacked tree with GNU format, fixed modes and the
commit time instead. Also document release mode and record L9.11 in
hash-migration.md.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@michaellchung
michaellchung changed the base branch from s24-pr5-tb2-support to main October 26, 2026 14:54
@michaellchung
michaellchung marked this pull request as ready for review October 26, 2026 14:54
@michaellchung
michaellchung merged commit f07801a into main Oct 26, 2026
1 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants