contracts(ccpa): v1.27.0 → v1.28.0 — register FALSIFY-CCPA-017 project_scale_parity_bound (PROPOSED)

.github/workflows/ci.yml

@@ -110,6 +110,53 @@ jobs:
             sleep "$delay"
             delay=$((delay + 6))  # linear backoff: 4,10,16,22,28,34,...
           done
+      - name: Pre-flight target-dir consistency check
+        # Root cause (five-whys):
+        #   1. Why does workspace-test sometimes fail with "no such file or
+        #      directory .rcgu.o" / extern location missing / cc-rs can't
+        #      create .o? Cargo's incremental state on the per-PR target
+        #      dir is inconsistent.
+        #   2. Why inconsistent? A prior run was SIGKILL'd mid-compile and
+        #      left orphan .rmeta files (parts cargo had registered as built)
+        #      without the corresponding .rcgu.o codegen artifacts (which were
+        #      mid-write at the moment of the kill).
+        #   3. Why was it SIGKILL'd? concurrency.cancel-in-progress (line 22)
+        #      cancels the previous run as soon as a new commit lands on the
+        #      branch (and "Update branch" / strict-up-to-date triggers this
+        #      every time aprender main moves forward).
+        #   4. Why does this persist? The target dir is bind-mounted from a
+        #      per-PR persistent path /mnt/nvme-raid0/targets/aprender-ci/<PR>/,
+        #      so partial-compile state survives across runs.
+        #   5. Root cause: cargo's incremental state is not atomic-on-kill, so
+        #      a persistent shared target dir + cancel-in-progress = damage.
+        # Prevention (this step): BEFORE invoking cargo, check whether the
+        # immediately-preceding workflow run on this branch was cancelled. If
+        # yes, rm -rf the target dir contents. This is a one-time check at
+        # job start — NOT a retry-on-failure pattern (which the operator
+        # rejects under the "flake is not allowed" directive).
+        run: |
+          set -e
+          if [ -z "${{ github.event.pull_request.number }}" ]; then
+            echo "Not a PR run; skipping prior-cancel check"
+            exit 0
+          fi
+          # Find the immediately-preceding workflow run on this branch.
+          # status=completed filter excludes the current in-progress run.
+          PREV_CONCLUSION=$(gh api \
+            "repos/${GITHUB_REPOSITORY}/actions/runs?branch=${GITHUB_HEAD_REF}&status=completed&per_page=1" \
+            --jq '.workflow_runs[0].conclusion' 2>/dev/null || echo "")
+          echo "Previous run conclusion on ${GITHUB_HEAD_REF}: ${PREV_CONCLUSION:-<none>}"
+          if [ "$PREV_CONCLUSION" = "cancelled" ]; then
+            echo "::warning::Previous run was cancelled; nuking target dir to prevent cargo cancel-damage"
+            docker run --rm \
+              -v "/mnt/nvme-raid0/targets/aprender-ci/${PR_OR_REF}:/workspace/target" \
+              "$IMAGE" \
+              bash -c 'rm -rf /workspace/target/* /workspace/target/.[!.]* 2>/dev/null || true; ls -la /workspace/target/ || true'
+          else
+            echo "No cancel damage to clean (prior conclusion: ${PREV_CONCLUSION:-fresh-branch})"
+          fi
+        env:
+          GH_TOKEN: ${{ github.token }}
       - name: Workspace lib tests (25,300+)
         # Excluded: aprender-gpu (cuBLAS), aprender-cuda-edge (CUDA), aprender-compute (SIMD SIGSEGV at exit)
         # Timeout: 75min (was 55, was 40).