RBE Target Eligibility

RBE Target Eligibility

GloriousFlywheel tracks remote-execution eligibility in config/rbe-target-eligibility.json. That manifest is the repo-owned TIN-668 gate between the narrow REAPI proof lane and any broader RBE product claim.

Validate it with:

just rbe-target-eligibility-check

Platform identity is validated separately by docs/contracts/rbe-platform-contracts.json. gloriousflywheel-rbe-linux-x86_64 is the current proved platform family. gloriousflywheel-rbe-darwin-aarch64 is a candidate platform until a forced Darwin proof lands with nonzero remote processes and the target class is added to this manifest. Do not infer tummycrypt macOS package/sign/notarize/staple eligibility from the platform contract alone.

The manifest is intentionally conservative:

  • tinyland-inc/tummycrypt //build/macos:darwin_package_release_artifacts_unsigned is a Darwin candidate for unsigned macOS package assembly from pinned v0.12.14 release artifacts. It requires a reachable operator-provided macOS REAPI endpoint, forced execution, and nonzero remote processes before promotion. It does not prove current-source Cargo/Swift builds, Developer ID signing, notarization, stapling, Finder/FileProvider lifecycle, or broad Darwin RBE.
  • //app:build is proved for the SvelteKit production build target class.
  • //app:unit_tests is proved for the SvelteKit Vitest unit-test target class.
  • tinyland-inc/omux.xoxd.ai //:unit_tests is proved for one public consumer Vite/SvelteKit Vitest unit-test target class. Run 25742782051 used bazel_command=test, forced execution, 4 remote processes, the browser-capable worker image, remote test-setup, and a passing Vitest invocation through unit_tests_/unit_tests ... ./vitest.config.ts. It does not prove all Vitest, all omux tests, private tinyland.dev package tests, browser E2E, or broad/default web RBE.
  • tinyland-inc/omux.xoxd.ai //:build is proved for one public consumer SvelteKit/Vite standalone build target class. Run 25891956165 used bazel_command=build, forced execution, non-secret GF_RBE_PROOF_NONCE action-key perturbation, 4 remote processes, the browser-capable worker image, remote @tailwindcss/oxide and esbuild lifecycle hooks, remote sveltekit_sync, and remote vite_build. It does not prove all Vite builds, all omux targets, private tinyland.dev package builds, or broad/default web RBE.
  • tinyland-inc/tinyland.dev //:playwright_local_route_smoke is proved for one private local-server Playwright route-smoke target class. Run 25989829826 used bazel_command=test, forced execution, GitHub App checkout, verified tummycrypt_tinyland_schemas:0.2.4 private distdir staging, proof nonce 20260517T114200Z-25989829826-1, 53 remote processes, the browser-capable worker image, remote TypeScript tsc, remote Vite build-tool execution, remote test-setup, and a passing Playwright route smoke using /bin/chromium. It does not prove all Playwright, all tinyland.dev routes, deployed E2E, payment/booking/auth flows, or broad/default web RBE.
  • tinyland-inc/tinyland.dev //:web_package_typecheck_fanout is proved for one bounded private package typecheck fanout class. Run 26001030662 used bazel_command=build for TIN-1299, forced execution, GitHub App checkout, verified tummycrypt_tinyland_schemas:0.2.4 private distdir staging, proof nonce 20260517T195322Z-26001030662-1, 3 remote processes, the browser-capable worker image, remote esbuild, and remote TypeScript tsc for package actions in the finite fanout graph. It does not prove all package typechecks, all TypeScript, Vite/SvelteKit builds, Vitest, Playwright/Puppeteer, deployed behavior, or broad/default web RBE.
  • tinyland-inc/tinyland.dev //:web_package_vitest_fanout is proved for one bounded private package Vitest fanout class. Run 26002645581 used bazel_command=test for TIN-1300, forced execution, GitHub App checkout, verified tummycrypt_tinyland_schemas:0.2.4 private distdir staging, proof nonce 20260517T210344Z-26002645581-1, 22 remote processes, and the browser-capable worker image. Bazel found three package Vitest targets: //packages/tinyland-color-utils:test, //packages/tinyland-forms:test, and //packages/tinyland-security:test. The REAPI worker log shows remote test-setup.sh execution for all three package tests. It does not prove all package tests, all Vitest, root app tests, Vite/SvelteKit builds, Playwright/Puppeteer, deployed behavior, or broad/default web RBE.
  • //:public_vendor_handoff_fixture is proved for the public WAS-110 injected repository handoff shape from the checked-out consumer workspace.
  • //:deployment_bundle is proved for deployment artifact tar packaging over declared Kubernetes YAML and Nix files.
  • //docs-site:build is proved for static docs-site rendering over declared docs-site files and //:docs_content.
  • //docs-site:playwright_chromium_smoke is proved for one Chromium-only static-site Playwright smoke class over built Vite/SvelteKit docs-site output. Run 25712694947 used bazel_command=test, forced execution, 1060 remote processes, browser-capable worker image sha256:a567696e341f6eb0589ece9efd6014a2133a4f10831bdad31e8dd84055eff8a0, remote sveltekit_sync, remote vite_build, remote test-setup, and a passing playwright-core smoke with /bin/chromium. It does not prove all Playwright, broad Puppeteer, Firefox, or deployed-environment E2E.
  • tinyland-inc/omux.xoxd.ai //:puppeteer_chromium_smoke is proved for one public consumer Chromium static-output Puppeteer smoke class over built Vite/SvelteKit output. Run 25826953857 used bazel_command=test, forced execution, 137 remote processes, the same browser-capable worker image, remote sveltekit_sync, remote vite_build, remote test-setup, and a passing puppeteer-core smoke with /bin/chromium. It does not prove all Puppeteer, all Vite/SvelteKit browser tests, Playwright, Firefox, or deployed-environment E2E.
  • tinyland-inc/omux.xoxd.ai //:playwright_chromium_smoke is proved for one public consumer Chromium Playwright static-output smoke class over built Vite/SvelteKit output. Run 25897326537 used bazel_command=test, forced execution, proof nonce 20260515T024138Z-25897326537-1, 6 remote processes, the same browser-capable worker image, public main commit d3608a5a6325adee0a5e625cf7ad76b470e7b83f, remote @tailwindcss/oxide and esbuild lifecycle hooks, remote sveltekit_sync, remote vite_build, remote test-setup, remote generate-xml, and a passing Playwright Chromium smoke with /bin/chromium. It does not prove all Playwright, Vitest browser mode, Firefox, or deployed-environment E2E.
  • tinyland-inc/omux.xoxd.ai //:playwright_local_route_smoke is proved for one public consumer local-server Playwright route-smoke target class over declared adapter-static SvelteKit/Vite output. Run 26005817853 used bazel_command=test, forced execution, proof nonce 20260517T232840Z-26005817853-1, GitHub App checkout, public main commit cd730bdc432b6eb2af4cac7032c040e4ab734da7, 13 remote processes, remote @tailwindcss/oxide and esbuild lifecycle hooks, remote sveltekit_sync, remote vite_build, remote test-setup, remote generate-xml, and a passing Playwright route smoke for /agent-snippet with /bin/chromium. It does not prove all Playwright, all omux routes, Firefox, or deployed-environment E2E.
  • tinyland-inc/omux.xoxd.ai //:puppeteer_local_route_smoke is proved for one public consumer local-server Puppeteer route-smoke target class over declared adapter-static SvelteKit/Vite output. Run 26037732121 used bazel_command=test, forced execution, proof nonce 20260518T135044Z-26037732121-1, GitHub App checkout, public main commit 50e0b796cbc44bc82de67891b1999e7e48cff473, 10 remote processes, remote @tailwindcss/oxide and esbuild lifecycle hooks, remote sveltekit_sync, remote vite_build, remote test-setup, remote generate-xml, and a passing Puppeteer route smoke for /agent-snippet with /bin/chromium. It does not prove all Puppeteer, all omux routes, Playwright, Firefox, or deployed-environment E2E.
  • Jesssullivan/jesssullivan.github.io //:puppeteer_chromium_smoke is proved for a second public consumer Chromium static-output Puppeteer smoke class. Run 25777472760 used bazel_command=test, forced execution, 855 remote processes, the same browser-capable worker image, remote Puppeteer lifecycle-hook execution without a browser download, remote test-setup, and a passing Chromium smoke with /bin/chromium. It does not prove broad Puppeteer, broad Playwright, Firefox, or deployed E2E.
  • Jesssullivan/jesssullivan.github.io //:playwright_chromium_smoke is proved for one public consumer Chromium Playwright runtime-smoke target class. Run 25894297074 used bazel_command=test, forced execution, proof nonce 20260515T005745Z-25894297074-1, 855 remote processes, the same browser-capable worker image, PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1, remote lifecycle-hook execution without browser downloads, remote test-setup.sh playwright_chromium_smoke_/playwright_chromium_smoke, remote generate-xml.sh, and a passing Playwright Chromium runtime smoke with /bin/chromium. It does not prove all Playwright, built app output, Firefox, or deployed E2E.
  • Jesssullivan/jesssullivan.github.io //:sveltekit_vite_build_smoke is proved for one public consumer SvelteKit/Vite build-smoke test target class. Run 25779597385 used bazel_command=test, forced execution, 855 remote processes, the same browser-capable worker image, remote npm package extraction and lifecycle-hook execution, remote test-setup, and a passing SvelteKit/Vite build smoke. It does not prove publication, deployment, hosted E2E, or broad/default web RBE.
  • Jesssullivan/jesssullivan.github.io //:types_unit_tests is proved for one public consumer SvelteKit/Vite/Vitest types unit-test target class. Run 25892939448 used bazel_command=test, forced execution, non-secret GF_RBE_PROOF_NONCE action-key perturbation, 855 remote processes, the same browser-capable worker image, remote npm package extraction and lifecycle-hook execution for esbuild, sharp, and puppeteer without action-time browser downloads, remote test-setup, and a passing types_unit_tests_/types_unit_tests invocation. It does not prove all Vitest, all jesssullivan.github.io tests, private tinyland.dev or MassageIthaca package tests, deployed E2E, or broad/default web RBE.
  • //examples/hello-go:hello_test is proved for one trivial pure-Go rules_go unit-test class. Run 25634296833 used bazel_command=test, forced execution, 11 remote processes, worker image sha256:bb5455a038bdbff2560f22491c131c2163d3089ffafedee08f937d63f35fa848, and remote GoStdlib, compile, link, and test-setup evidence. It does not prove the separate cgo-backed class; run 25632300253 remains the cgo/cc evidence trail.
  • //examples/hello-go-cgo:cgo_test is proved for one trivial cgo-backed rules_go unit-test class. Run 25649628233 used bazel_command=test, forced execution, 11 remote processes, worker image sha256:98b78964245baf5d5fbb0ab382c1106c3d4006a3a30918c0a1a8f5e0fad9f62a, remote runtime/cgo, GoCompilePkg, GoLink, and test-setup evidence, and one passing cgo test. It does not prove all cgo-backed Go or all Go tests; run 25632300253 remains the evidence trail for the worker C/C++ closure required by this class.
  • //examples/hello-rust:hello_test is proved for one trivial rules_rust unit-test class. Run 25648670844 used bazel_command=test, forced execution, 5 remote processes, worker image sha256:98b78964245baf5d5fbb0ab382c1106c3d4006a3a30918c0a1a8f5e0fad9f62a, remote rules_rust compile and test-setup evidence, and one passing Rust test. It does not prove all Rust tests; runs 25647399161 and 25648006195 remain the evidence trail for the worker runtime closure required by this class.
  • //examples/hello-cc:hello_test is proved for one trivial cc_test target class. Run 25648975728 used bazel_command=test, forced execution, 4 remote processes, worker image sha256:98b78964245baf5d5fbb0ab382c1106c3d4006a3a30918c0a1a8f5e0fad9f62a, remote gcc compile/link and test-setup evidence, and one passing C++ test. It does not prove all C++ tests; run 25638930305 remains the evidence trail for the worker C/C++ toolchain closure required by this class.
  • opentofu-validate and opentofu-fmt are blocked until the OpenTofu toolchain, provider inputs, runfiles layout, and mutable state behavior are hermetic enough for remote workers.
  • //app:image, //app:push, and //app:dev remain blocked because image authority, registry publication, credentials, or interactive process shape do not match the current proof contract.
  • Deployed-environment browser E2E remains blocked. Live staging/production, payment, booking, auth, tailnet, and cluster-backed flows need separate network, secret, and environment custody. The local-server Playwright target is the next honest gate before any deployed-E2E RBE claim.
  • Jesssullivan/MassageIthaca //:booking_operation_unit_tests is proved for one private Vite/Vitest booking-operation unit-test class. Run 25928429263 used consumer_checkout_authority=repo-scoped-deploy-key, forced execution, proof nonce 20260515T161719Z-25928429263-1, worker image sha256:a567696e341f6eb0589ece9efd6014a2133a4f10831bdad31e8dd84055eff8a0, and reported 7662 processes: 7 action cache hit, 4343 internal, 3319 remote. The REAPI worker log includes remote sveltekit_sync, remote external/bazel_tools/tools/test/test-setup.sh booking_operation_unit_tests_/booking_operation_unit_tests, and remote generate-xml.sh evidence. This is private target RBE evidence for that narrow class only.
  • Jesssullivan/MassageIthaca //:svelte_check_test is proved for one private SvelteKit/svelte-check target class. Run 25938855554 used consumer_checkout_authority=repo-scoped-deploy-key, forced execution, proof nonce 20260515T200641Z-25938855554-1, the browser-runtime authority worker image recorded in the manifest, and reported 7662 processes: 3 action cache hit, 4343 internal, 3319 remote. The REAPI worker log includes remote sveltekit_sync_bin_/sveltekit_sync_bin, remote external/bazel_tools/tools/test/test-setup.sh svelte_check_test_/svelte_check_test, and remote generate-xml.sh evidence. This is private target RBE evidence for that narrow class only; it does not prove all MassageIthaca tests, browser tests, or deployed flows.
  • Jesssullivan/MassageIthaca //:tsc_noemit_test is proved for one private TypeScript no-emit target class. Run 25948484331 used consumer_checkout_authority=repo-scoped-deploy-key, forced execution, proof nonce 20260516T005553Z-25948484331-1, the browser-runtime authority worker image recorded in the manifest, and reported 7662 processes: 4 action cache hit, 4343 internal, 3319 remote. The REAPI worker log includes remote sveltekit_sync_bin_/sveltekit_sync_bin, remote external/bazel_tools/tools/test/test-setup.sh tsc_noemit_test_/tsc_noemit_test, and remote generate-xml.sh evidence. The test passed in 24.2s. This is private target RBE evidence for that narrow TypeScript no-emit class only; it does not prove all MassageIthaca tests, browser tests, or deployed flows.
  • Jesssullivan/MassageIthaca //:playwright_tmd_smoke is proved for one private Playwright TMD browser-smoke target class over built Vite/SvelteKit output. Run 25953478878 used consumer_checkout_authority=repo-scoped-deploy-key, forced execution, proof nonce 20260516T050753Z-25953478878-1, consumer commit 08555e16b9ee0504b1b23e6373b5b6bbfb799f5f, the browser-runtime authority worker image recorded in the manifest, and reported 7670 processes: 3 action cache hit, 4352 internal, 3318 remote. The REAPI worker log includes remote sveltekit_sync_bin_/sveltekit_sync_bin, remote vite_build_bin_/vite_build_bin, remote external/bazel_tools/tools/test/test-setup.sh playwright_tmd_smoke_/playwright_tmd_smoke, and remote generate-xml.sh evidence. The test passed in 4.5s. This is private target RBE evidence for that narrow Playwright TMD smoke class only; it does not prove all MassageIthaca tests, all Playwright, hosted E2E, or deployed flows.
  • Jesssullivan/MassageIthaca //:sveltekit_node_build is proved for one private SvelteKit/Vite production-build target class. Run 25983800544 used consumer_checkout_authority=repo-scoped-deploy-key, consumer commit e06a70d12417f04568092a62e225b6c6595c3b39, forced execution, proof nonce 20260517T064447Z-25983800544-1, bazel_command=build, and the browser-runtime authority worker image recorded in the manifest. Bazel reported 7379 processes: 2 action cache hit, 4186 internal, 3193 remote. The REAPI worker log includes remote lifecycle-hook execution for esbuild, msw, and sharp, remote sveltekit_sync_bin_/sveltekit_sync_bin, and remote vite_build_bin_/vite_build_bin evidence. The proof artifact verifier passed and Kubernetes restart evidence stayed at 0. This is private target RBE evidence for that narrow production-build class only; it does not prove all MassageIthaca builds/tests, deployed booking E2E, image publication, durable private mirror/repository-cache authority, broad/default web RBE, or RustFS-backed CAS/action-cache suitability.
  • tinyland-inc/tinyland.dev //packages/tinyland-grafana:test is proved for one private Grafana package Vitest target class. Run 25935041748 used consumer_checkout_authority=repo-scoped-deploy-key, --tinyland-schemas-private-handoff, forced execution, proof nonce 20260515T184435Z-25935041748-1, browser-capable worker image digest recorded in the manifest, and reported 1531 processes: 468 remote cache hit, 1059 internal, 4 remote. The artifact verifier passed with required distdir input tummycrypt_tinyland_schemas:0.2.4. The REAPI worker log includes remote esbuild lifecycle-hook execution, remote TypeScript compile evidence, remote external/bazel_tools/tools/test/test-setup.sh packages/tinyland-grafana/test_/test, and remote generate-xml.sh evidence. This is private target RBE evidence for that narrow class only; the codeload distdir handoff remains proof-run staging, not durable mirror, repository-cache, CAS/action-cache, or broad/default RBE authority.
  • tinyland-inc/tinyland.dev //:app_typecheck is proved for one private root SvelteKit app typecheck target class. Run 25970619559 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, forced execution, proof nonce 20260516T191944Z-25970619559-1, bazel_command=build, and the browser-capable worker image digest recorded in the manifest. Bazel reported 5578 processes: 1 action cache hit, 2567 remote cache hit, 2955 internal, 56 remote. The REAPI worker log includes remote TypeScript tsc, remote Svelte build tool, remote Vite build tool, and remote app_typecheck_tool evidence. The proof artifact verifier passed and Kubernetes restart evidence stayed at 0 before and after the proof. This is private target RBE evidence for that narrow root app typecheck class only; it does not prove all tinyland.dev builds, all tinyland.dev tests, browser E2E, the Vite production build class, durable private mirror authority, broad/default RBE, or CAS/action-cache backend suitability.
  • tinyland-inc/tinyland.dev //:app_build is proved for one private root Vite/SvelteKit production-build target class. Run 25978934708 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, forced execution, proof nonce 20260517T021820Z-25978934708-1, bazel_command=build, and the browser-capable worker image digest recorded in the manifest. Bazel reported 6146 processes: 3125 remote cache hit, 2959 internal, 62 remote. The REAPI worker log includes remote TypeScript package fanout and remote JsRunBinary app_build.log evidence. The proof artifact verifier passed and Kubernetes restart evidence stayed at 0 before and after the proof. This is private target RBE evidence for that narrow root production-build class only; it does not prove all tinyland.dev builds/tests, browser E2E, deployed app behavior, durable private mirror authority, broad/default RBE, or CAS/action-cache backend suitability.
  • tinyland-inc/tinyland.dev //packages/tinyland-activitypub:test is proved for one private ActivityPub package Vitest target class. Run 25981546207 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, workspace_path=consumer-workspace, forced execution, proof nonce 20260517T044208Z-25981546207-1, bazel_command=test, and the browser-capable worker image digest recorded in the manifest. Bazel reported 728 processes: 1 action cache hit, 299 remote cache hit, 415 internal, 14 remote. The REAPI worker log includes remote esbuild lifecycle-hook execution, remote TypeScript tsc for packages/tinyland-content-types, remote external/bazel_tools/tools/test/test-setup.sh packages/tinyland-activitypub/test_/test, and remote generate-xml.sh evidence. The proof artifact verifier passed with required distdir input tummycrypt_tinyland_schemas:0.2.4, and Kubernetes restart evidence stayed at 0. This is private target RBE evidence for that narrow package Vitest class only; it does not prove all tinyland.dev package tests, browser E2E, deployed app behavior, durable private mirror authority, broad/default RBE, or CAS/action-cache backend suitability.
  • tinyland-inc/tinyland.dev //packages/tinyland-a11y-engine:typecheck is proved for one private package TypeScript typecheck target class. Run 25984827370 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, workspace_path=consumer-workspace, forced execution, proof nonce 20260517T073751Z-25984827370-1, bazel_command=build, consumer checkout commit 3730c6966d5e069cff92abc7c606fca9db5b54af, and the browser-capable worker image digest recorded in the manifest. Bazel reported 553 processes: 223 remote cache hit, 328 internal, 2 remote. The REAPI worker log includes remote esbuild lifecycle-hook execution and remote TypeScript tsc for packages/tinyland-color-utils. The proof artifact verifier passed with required distdir input tummycrypt_tinyland_schemas:0.2.4, and Kubernetes restart evidence stayed at 0. This is private target RBE evidence for that narrow package typecheck class only; it does not prove all tinyland.dev package typechecks, all TypeScript, Vite/SvelteKit builds, deployed app behavior, durable private mirror authority, broad/default RBE, or CAS/action-cache backend suitability.
  • tinyland-inc/tinyland.dev //:web_package_typecheck_fanout is proved for one private bounded package typecheck fanout target class. Run 26001030662 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, workspace_path=consumer-workspace, forced execution, proof nonce 20260517T195322Z-26001030662-1, bazel_command=build, consumer main commit dcc20d11b8919ae259ce8b3e9b982a37e2d6b56b, and the browser-capable worker image digest recorded in the manifest. The consumer target was added by tinyland.dev PR #445 as a finite filegroup over //packages/tinyland-a11y-engine:typecheck, //packages/tinyland-color-utils:typecheck, and //packages/tinyland-security:typecheck. Bazel reported 789 processes: 321 remote cache hit, 465 internal, 3 remote. The REAPI worker log includes remote esbuild lifecycle-hook execution and remote TypeScript tsc for packages/tinyland-color-utils and packages/tinyland-auth. The proof artifact verifier passed with required distdir input tummycrypt_tinyland_schemas:0.2.4, and Kubernetes restart evidence stayed at 0. This is private target RBE evidence for that bounded fanout class only; it does not prove all tinyland.dev package typechecks, all TypeScript, Vite/SvelteKit builds, Vitest, Playwright/Puppeteer, deployed app behavior, durable private mirror authority, broad/default web RBE, or CAS/action-cache backend suitability.
  • tinyland-inc/tinyland.dev //:web_package_vitest_fanout is proved for one private bounded package Vitest fanout target class. Run 26002645581 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, workspace_path=consumer-workspace, forced execution, proof nonce 20260517T210344Z-26002645581-1, bazel_command=test, consumer main commit 8ee22a2a0130f7241a42c2e3666e310c89a5cfdf, and the browser-capable worker image digest recorded in the manifest. The consumer target was added by tinyland.dev PR #447 and repaired by PR #449 as a finite test_suite over //packages/tinyland-color-utils:test, //packages/tinyland-forms:test, and //packages/tinyland-security:test. Bazel reported 1102 processes: 1 action cache hit, 438 remote cache hit, 642 internal, 22 remote. The REAPI worker log includes remote test-setup.sh actions for all three package Vitest targets. The proof artifact verifier passed with required distdir input tummycrypt_tinyland_schemas:0.2.4, and Kubernetes restart evidence stayed at 0. This is private target RBE evidence for that bounded Vitest fanout class only; it does not prove all tinyland.dev package tests, all Vitest, root app tests, Vite/SvelteKit builds, Playwright/Puppeteer, deployed app behavior, durable private mirror authority, broad/default web RBE, or CAS/action-cache backend suitability.
  • tinyland-inc/tinyland.dev //:playwright_local_route_smoke is proved for one private local-server Playwright route-smoke target class. Run 25989829826 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, workspace_path=consumer-workspace, forced execution, proof nonce 20260517T114200Z-25989829826-1, bazel_command=test, consumer main commit efa977e701c449dce84065e138f3c8a303ce8334, and the browser-capable worker image digest recorded in the manifest. Bazel reported 6155 processes: 3139 remote cache hit, 2963 internal, 53 remote. The REAPI worker log includes remote TypeScript tsc, remote Vite build-tool execution, remote external/bazel_tools/tools/test/test-setup.sh playwright_local_route_smoke_/playwright_local_route_smoke, and remote generate-xml.sh. The target starts a loopback SvelteKit Node server inside the Bazel test action, fetches /legal/privacy, renders the returned route HTML through Playwright page.setContent with JavaScript disabled, asserts DOM textContent, and shuts the server down. The proof artifact verifier passed with required distdir input tummycrypt_tinyland_schemas:0.2.4, and Kubernetes restart evidence stayed at 0. This is private target RBE evidence for that narrow local-server route smoke only; it does not prove all Playwright, all tinyland.dev routes, deployed E2E, full app behavior, durable private mirror authority, broad/default RBE, or CAS/action-cache backend suitability.
  • tinyland-inc/tinyland.dev //:puppeteer_local_route_smoke is proved for one private local-server Puppeteer route-smoke target class. Run 26051698671 used consumer_checkout_authority=github-app, --tinyland-schemas-private-handoff, workspace_path=consumer-workspace, forced execution, proof nonce 20260518T181314Z-26051698671-1, bazel_command=test, consumer main commit dcb859f658092dc2a6c0f33223cb9ec9a4055c18, and the browser-capable worker image digest recorded in the manifest. Bazel reported 6319 processes: 1 action cache hit, 3135 remote cache hit, 3052 internal, 132 remote. The REAPI worker log includes remote npm lifecycle-hook execution for @tailwindcss/oxide, sharp, and esbuild, remote TypeScript tsc, remote Svelte build-tool execution, remote Vite build-tool execution, remote external/bazel_tools/tools/test/test-setup.sh puppeteer_local_route_smoke_/puppeteer_local_route_smoke, and remote generate-xml.sh. The target starts a loopback SvelteKit Node server inside the Bazel test action, fetches /legal/privacy, renders the returned route HTML through Puppeteer page.setContent with JavaScript disabled, asserts DOM textContent, and shuts the server down. The proof artifact verifier passed with required distdir input tummycrypt_tinyland_schemas:0.2.4, and Kubernetes restart evidence stayed at 0. This is private target RBE evidence for that narrow local-server route smoke only; it does not prove all Puppeteer, all tinyland.dev routes, deployed E2E, full app behavior, durable private mirror authority, broad/default RBE, or CAS/action-cache backend suitability.
  • Jesssullivan/darkmap.phasi.space //:playwright_webkit_shell_smoke and //:playwright_webkit_mobile_hud_smoke are proved for one consumer WebKit Playwright static-smoke target class. Run 27330688866 was driven by the consumer browser-rbe-proof dispatch 27330681726 (workflow_dispatch, target //:webkit_smoke_suite, force_execution=true) on 2026-06-11 with bazel_command=test, forced execution, and worker image digest sha256:9db80cc90cb6736430cdbfcf0a0773fd89073d897ec084b9b141ded1d58661af — the first image carrying the PR #885 gf-webkit-launcher shim. Bazel reported 1703 processes: 985 internal, 718 remote; the shell smoke passed in 4.5s, the mobile-HUD smoke passed in 14.1s, and the consumer pins @playwright/test exactly to 1.59.1 against the worker webkit-2272 runtime through GF_RBE_WEBKIT_EXECUTABLE. The negative control (darkmap run 27329374675, cell run 27329382732) failed closed in 1.1s per target on the image-global LD_LIBRARY_PATH glibc poisoning before the shim landed. This proves one consumer WebKit static-smoke class only; it does not prove all WebKit targets, all Playwright, Firefox, deployed E2E, broad/default web RBE, or CAS/action-cache backend suitability.

Promotion Rule

A target class moves to proved only after a cited workflow or default-branch proof shows nonzero remote processes through --remote_executor, a separate --remote_cache, the backend-neutral gloriousflywheel-rbe-linux-x86_64 platform identity, and worker provenance. Remote cache hits, ARC runner dispatch, and GitHub job placement do not count.

OpenTofu target classes need a separate fix before promotion:

  • remove use_default_shell_env = True from the validation action path
  • stop resolving tofu from ambient PATH
  • declare provider plugin mirrors, checksums, and network posture
  • stop preferring BUILD_WORKSPACE_DIRECTORY for formatting tests
  • prove one module through forced REAPI execution before expanding the class

This file does not promote RustFS to CAS/action-cache authority and does not turn BCR/Bzlmod package authority into RBE evidence.

The web-stack proofs are deliberately target-class scoped. The first was //docs-site:playwright_chromium_smoke: it serves already-built static docs-site output inside the test action and launches Chromium through playwright-core using a system browser from the worker image. The acceptance gate is deliberately narrower than “Playwright RBE”: one Chromium smoke test, no action-time browser download, no Firefox, no deployed-environment E2E, and no broad Puppeteer/Mermaid promotion (WebKit has since earned its own proof — one consumer static-smoke class via run 27330688866 — and stays just as narrowly scoped). First forced run 25711894340 confirmed the build/test graph is remote-executable at meaningful scale (2548 processes: 1489 internal, 1059 remote) and failed only in the browser action because Chromium crashpad had no writable home/cache directory in the non-root read-only proof cell. Run 25712694947 passed after the harness created writable HOME, XDG_CONFIG_HOME, and XDG_CACHE_HOME under remote scratch space and fixed static route fallback for generated Vite/SvelteKit output. The passing proof reported 2549 processes: 1489 internal, 1060 remote and remote worker evidence for sveltekit_sync, vite_build, and external/bazel_tools/tools/test/test-setup.sh docs-site/playwright_chromium_smoke_/playwright_chromium_smoke.

The second browser proof is tinyland-inc/omux.xoxd.ai //:puppeteer_chromium_smoke. Run 25826953857 proved one public consumer static-output Puppeteer smoke with puppeteer-core@24.43.1, explicit GF_RBE_CHROMIUM_EXECUTABLE=/bin/chromium, forced execution, 137 remote processes, remote sveltekit_sync, remote vite_build, and remote external/bazel_tools/tools/test/test-setup.sh puppeteer_chromium_smoke_/puppeteer_chromium_smoke. This corrects the earlier consumer failure mode from run 25747017023, where Puppeteer tried to fetch a browser during the proof path. It does not promote broad Puppeteer or deployed browser E2E.

The public omux Playwright proof is tinyland-inc/omux.xoxd.ai //:playwright_chromium_smoke. Run 25897326537 checked out public main commit d3608a5a6325adee0a5e625cf7ad76b470e7b83f, used bazel_command=test, forced execution, proof nonce 20260515T024138Z-25897326537-1, and reported 3162 processes: 1 action cache hit, 1174 remote cache hit, 1982 internal, 6 remote. The REAPI worker log includes remote @tailwindcss/oxide and esbuild lifecycle-hook actions, remote sveltekit_sync, remote vite_build, remote external/bazel_tools/tools/test/test-setup.sh playwright_chromium_smoke_/playwright_chromium_smoke, and remote generate-xml.sh. This promotes one public omux Chromium Playwright static-output smoke class only; it does not prove all Playwright, Vitest browser mode, private package builds, deployed E2E, or broad/default web RBE.

The public omux local-server Playwright proof is tinyland-inc/omux.xoxd.ai //:playwright_local_route_smoke. Run 26005817853 checked out public main commit cd730bdc432b6eb2af4cac7032c040e4ab734da7 with GitHub App contents:read authority, used bazel_command=test, forced execution, proof nonce 20260517T232840Z-26005817853-1, and reported 3162 processes: 1167 remote cache hit, 1982 internal, 13 remote. The REAPI worker log includes remote @tailwindcss/oxide and esbuild lifecycle-hook actions, remote sveltekit_sync, remote vite_build, remote external/bazel_tools/tools/test/test-setup.sh playwright_local_route_smoke_/playwright_local_route_smoke, and remote generate-xml.sh. The proof artifact gf-reapi-cell-proof-26005817853 has artifact id 7047042599 and sha256 9b4509a1095f707678d2e13a4f78861db74d55cb5af2538e8c277ec3bae1e4c4; worker restart evidence stayed at 0. This promotes one public omux local-server Playwright route-smoke class over declared adapter-static output only; it does not prove all Playwright, all omux routes, private package builds, deployed E2E, broad/default web RBE, or RustFS-backed CAS/action-cache suitability.

The public omux local-server Puppeteer proof is tinyland-inc/omux.xoxd.ai //:puppeteer_local_route_smoke. Run 26037732121 checked out public main commit 50e0b796cbc44bc82de67891b1999e7e48cff473 with GitHub App contents:read authority, used bazel_command=test, forced execution, proof nonce 20260518T135044Z-26037732121-1, and reported 3162 processes: 2 action cache hit, 1170 remote cache hit, 1982 internal, 10 remote. The REAPI worker log includes remote @tailwindcss/oxide and esbuild lifecycle-hook actions, remote sveltekit_sync, remote vite_build, remote external/bazel_tools/tools/test/test-setup.sh puppeteer_local_route_smoke_/puppeteer_local_route_smoke, and remote generate-xml.sh. The proof artifact gf-reapi-cell-proof-26037732121 has artifact id 7059740497 and sha256 cf768f62b03f84e3246a2adc012fa14b6c7026ede1bcb2e0d8352f8221b1dd4c; worker restart evidence stayed at 0. This promotes one public omux local-server Puppeteer route-smoke class over declared adapter-static output only; it does not prove all Puppeteer, all omux routes, Playwright, deployed E2E, broad/default web RBE, or RustFS-backed CAS/action-cache suitability.

The private tinyland.dev local-server Puppeteer proof is tinyland-inc/tinyland.dev //:puppeteer_local_route_smoke. Run 26051698671 checked out private main commit dcb859f658092dc2a6c0f33223cb9ec9a4055c18 with GitHub App contents:read authority, used bazel_command=test, verified the private tummycrypt_tinyland_schemas:0.2.4 distdir handoff, forced execution, proof nonce 20260518T181314Z-26051698671-1, and reported 6319 processes: 1 action cache hit, 3135 remote cache hit, 3052 internal, 132 remote. The REAPI worker log includes remote @tailwindcss/oxide, sharp, and esbuild lifecycle-hook actions, remote TypeScript tsc, remote Svelte and Vite build-tool execution, remote external/bazel_tools/tools/test/test-setup.sh puppeteer_local_route_smoke_/puppeteer_local_route_smoke, and remote generate-xml.sh. The proof artifact gf-reapi-cell-proof-26051698671 has artifact id 7065881708 and sha256 270bcb553348afb4ae8a77f2954bb4f9fa75c2570b6d2d26a6eef9dbc612ea99; worker restart evidence stayed at 0. This promotes one private tinyland.dev local-server Puppeteer route-smoke class over declared SvelteKit/Vite output only; it does not prove all Puppeteer, all tinyland.dev routes, deployed E2E, broad/default web RBE, durable private mirror authority, or RustFS-backed CAS/action-cache suitability.

The next public consumer proofs are Jesssullivan/jesssullivan.github.io //:puppeteer_chromium_smoke, //:playwright_chromium_smoke, and //:sveltekit_vite_build_smoke. Runs 25777472760, 25894297074, and 25779597385 each reported 2331 processes: 1477 internal, 855 remote with bazel_command=test, forced execution, and remote test-setup on the GF REAPI worker. The Puppeteer proof used the same pinned worker Chromium path and disabled Puppeteer browser downloads; the Playwright proof used PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 and explicit browser executablePath; the SvelteKit/Vite proof is a build-smoke test target, not publication or deployment.

The public omux Vitest proof is tinyland-inc/omux.xoxd.ai //:unit_tests. Run 25742782051 checked out consumer PR #62, used bazel_command=test, forced execution, worker image sha256:a567696e341f6eb0589ece9efd6014a2133a4f10831bdad31e8dd84055eff8a0, and reported 1437 processes: 2 action cache hit, 551 remote cache hit, 882 internal, 4 remote. The REAPI worker log includes remote external/bazel_tools/tools/test/test-setup.sh unit_tests_/unit_tests run --reporter=verbose --config ./vitest.config.ts with exit_code=0. This promotes one public consumer Vite/SvelteKit Vitest unit-test class only; it does not generalize to all private tinyland.dev package tests. The separate tinyland-inc/tinyland.dev //packages/tinyland-grafana:test proof promotes only one private Grafana package Vitest class; broader tinyland.dev targets still need their own input, environment, and remote-action evidence.

The public omux standalone build proof is tinyland-inc/omux.xoxd.ai //:build. Run 25891956165 used bazel_command=build, forced execution, proof nonce 20260514T234057Z-25891956165-1, the same browser-capable worker image, and reported 3155 processes: 1 action cache hit, 1173 remote cache hit, 1978 internal, 4 remote. The REAPI worker log includes remote @tailwindcss/oxide and esbuild lifecycle-hook actions, remote sveltekit_sync, and remote vite_build with exit_code=0. This promotes one public consumer SvelteKit/Vite standalone build target class only; it does not prove broad Vite/SvelteKit build RBE or private package builds.

The browser runtime authority for that class is now explicit in Browser Runtime Authority: Chromium 138.0.7204.49 from pkgs.chromium at locked nixpkgs revision 9b008d60392981ad674e04016d25619281550a9d, carried by worker image sha256:a567696e341f6eb0589ece9efd6014a2133a4f10831bdad31e8dd84055eff8a0 and exposed as GF_RBE_CHROMIUM_EXECUTABLE=/bin/chromium. Future Playwright/Puppeteer target classes must use that or another declared browser authority by executablePath; npm lifecycle downloads, playwright install, and Puppeteer postinstall Chrome downloads do not count as RBE proof. docs/contracts/browser-runtime-authority.json is the machine-checkable copy of that authority, and just browser-runtime-authority-contract-check keeps the contract, docs, eligibility manifest, worker image source, and public pilot guidance aligned.

//docs-site:build is now proved by GF REAPI Cell run 25608601158. That default-branch proof used bazel_command=build, GF_RBE_PROOF_FORCE_EXECUTION=true, worker image sha256:be2832171ac69cc9a2d012b3c789e8b765afb7cae0df8f7e9677dd6d8542dbc0, and reported 2529 processes: 1483 internal, 1046 remote. The Bazel log shows remote JsRunBinary actions for docs-site/.svelte-kit and docs-site/build. Earlier run 25607350105 remains candidate inventory only: it found the old package-boundary blocker before remote execution. The next remote-test promotion is //examples/hello-go:hello_test: run 25631848864 exposed the gf-reapi-cell output inlining bug fixed by PR #605, retry 25632300253 reached rules_go remote execution before GoStdlib failed in runtime/cgo with cc: no such file or directory, and run 25634296833 proved the pure = "on" target with 20 processes: 9 internal, 11 remote. After the worker image carried the C/C++ wrapper closure, run 25649628233 proved the separate cgo-backed Go target with 18 processes: 7 internal, 11 remote, remote runtime/cgo, GoCompilePkg, GoLink, and test evidence, and one passing test. Broader cgo-backed Go remains unproved. Rust run 25647399161 reached remote execution but failed because the remote worker runtime lacked libz.so.1 for the rules_rust rustc binary. The follow-up image fixed that runtime library, and run 25648006195 moved the Rust blocker to the same missing Nix gcc-wrapper linker path that blocks C++. Run 25648670844 then proved the trivial Rust unit-test class with 175 processes: 170 internal, 5 remote and a passing test. The C++ attempt run 25638930305 reached remote execution but failed on the missing Nix gcc-wrapper path before the worker image carried the C/C++ wrapper closure. Run 25648975728 then proved the trivial C++ unit-test class with 8 processes: 4 internal, 4 remote, remote gcc compile/link and test evidence, and one passing test.

GloriousFlywheel