You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Validate unrelated chart releases without retirement lookup data #4857
Offline validation of an unrelated chart release can establish that it is not a retirement consumer without needing live retirement state. Real consumers must still fail closed on missing, malformed or failed lookup evidence.
Actual Behavior
The chart-consumer retirement rule asks for lookup-dependent state before checking whether a resource consumes the captured chart. The standard offline validator therefore stops on unrelated chart releases, blocking otherwise unrelated manifest fixes.
Steps to Replicate
Run the production manifest validator with the committed tool version.
Observe an unavailable-context error on an unrelated chart release.
Compare the independent consumer predicate with the lookup-dependent precondition order.
Acceptance criteria
Reproduce the ordering failure using the real policy engine and offline validator.
Preserve all consumer and retained-data denials, including failed API lookups.
Prefer an equivalent condition-order correction; reject it if actual controls show weakened enforcement or no repair.
Pass affected regressions, current-head CI/review and normal merge/deployment verification.
Related to #4266 and #4856. Priority rationale: a validation blocker on live observability restoration; a narrow ordering repair is preferable to disabling a safety check.
Activity
chore: agent-claim #4857 nonce=31bcef834cc39277809f1f64eb82a19d
chore: agent-claim #4857 nonce=f375a69c0c58128103a7c44b92e46040