fix(pi-workflow): suppress verification bytecode

2026-08-25 20:19:53 -04:00
parent 141fcd145f
commit 8086247f26
3 changed files with 46 additions and 2 deletions
@@ -402,6 +402,7 @@ Mutating Assignments run in the Workflow Run's worktree.
 - All mutating Assignments are serialized in the first version. Concurrency remains available for read-only Assignments.
 - Mutating child sessions do not receive `bash` or other process-execution tools. Assignment-scoped file operations reject symlink traversal and require canonical containment beneath both the worktree root and the Assignment's owned path roots.
 - Plan-approved verification and generation commands run separately through a host executor using fixed executable/argument arrays, never agent-authored shell strings.
+- The host executor sets `PYTHONDONTWRITEBYTECODE=1` so Python-backed checks do not create out-of-scope `__pycache__` artifacts.
 - The engine records branch, HEAD, worktree identity, and Git diff state before and after every mutating Assignment and host command.
 - Out-of-scope changes, branch movement, commits, or worktree metadata changes invalidate the Assignment and open a Recovery Gate before more mutation starts.
 - The scheduler reserves capacity synchronously before launching children.