Production hardening: runtime, registry, packaging and CI #14

Merged
Otto merged 3 commits from otto/production-hardening-20260611 into main 2026-06-11 21:15:27 +02:00
Collaborator

30-minute stabilization pass based on the verified audit.

  • unify HA and ML routes in app.main
  • honor documented HA environment settings and return 503 when unconfigured
  • return defined 404/422/503 ML errors
  • persist model metadata safely with validation and atomic writes
  • fix evaluation coverage
  • make editable installation reproducible
  • add Ruff, strict Mypy, Pytest CI gates
  • harden Docker/Compose as non-root, read-only and localhost-bound
  • document current ML implementation honestly

Verified locally: 56 tests, Ruff, strict Mypy, package install, Compose config, Docker build, non-root/read-only container smoke tests and mocked Home Assistant integration.

30-minute stabilization pass based on the verified audit. - unify HA and ML routes in app.main - honor documented HA environment settings and return 503 when unconfigured - return defined 404/422/503 ML errors - persist model metadata safely with validation and atomic writes - fix evaluation coverage - make editable installation reproducible - add Ruff, strict Mypy, Pytest CI gates - harden Docker/Compose as non-root, read-only and localhost-bound - document current ML implementation honestly Verified locally: 56 tests, Ruff, strict Mypy, package install, Compose config, Docker build, non-root/read-only container smoke tests and mocked Home Assistant integration.
Otto added 3 commits 2026-06-11 21:14:26 +02:00
harden delivery pipeline and production runtime
Some checks failed
quality / test (3.11) (push) Has been cancelled
quality / test (3.13) (push) Has been cancelled
quality / test (3.11) (pull_request) Has been cancelled
quality / test (3.13) (pull_request) Has been cancelled
aaf319ff14
Otto merged commit ecd32d4813 into main 2026-06-11 21:15:27 +02:00
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: pino/sillyhome-next#14