[napetrov]

Part of #41 (D3 follow-up: host requirements under --warm).

Summary

 check_task(task, warm)
-  reason = None if warm else host_reason(task, probed_host)
+  reason = host_reason(task, probed_host)     # same container view (affinity, cgroup quota) with or without network
   null   runs only when the host meets the task
   oracle runs when the host meets it, or only CPUs are short
   verdict: host miss -> unsupported (allowed by --allow-unsupported)

repo run already judged the host on every path; only tasks check --warm skipped it. The null/oracle step moves to _check_step (radon CC of check_task 21 -> 13).

Evidence

• Before: tasks check --warm on a host missing min_cpus: null ran on the untouched tree, task reported broken, --allow-unsupported could not pass it (test asserted verdict != "unsupported").
  After: test_warm_judges_the_host_like_an_offline_check: --warm -> unsupported/host, no null, exit 1; with --allow-unsupported exit 0.
• Full pytest -q: 7068 passed, 22 skipped; ruff check . and mypy (CI lock, py3.12) clean.
• Merges cleanly with feat(ci): allow-unsupported input for the repo-eval workflow #156, feat(repo): process metrics in result.json, manifest process_metrics, grade optional for dokimi: graders #157, fix(repo): PATH@REV takes a revision with a slash; flush progress per task #159.

Merge Danger

Door: two-way

Blast Radius: narrow

CI that runs tasks check --warm on a host missing a task's requirements now sees unsupported (exit 1 unless --allow-unsupported) instead of whatever null/oracle gave.

🤖 Generated with Claude Code

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.66%. Comparing base (5064dc2) to head (aeacdc0).
⚠️ Report is 1 commits behind head on main.
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #182      +/-   ##
==========================================
+ Coverage   91.64%   91.66%   +0.02%     
==========================================
  Files         222      222              
  Lines       27409    27410       +1     
  Branches     4508     4508              
==========================================
+ Hits        25118    25126       +8     
+ Misses       1620     1615       -5     
+ Partials      671      669       -2     

Files with missing lines	Coverage Δ
dokimi/dokimi/repos/selfcheck.py	95.95% <100.00%> (+3.10%)	⬆️

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[antonwolfy]

LGTM. The fix is right: --warm now judges the host through the same _host_reason path as an offline check, and the _check_step extraction keeps the old behaviour for the null/oracle steps. Two nits inline.

What I ran, on a Linux review host at 9598a29:

• make ci-local: 27 passed, 1 failed, 7 skipped. The failure is pip-audit, reporting a new gitpython 3.2.0 advisory (CVE-2026-114145) in the existing locks; it is not caused by the PR. 7089 tests passed; the changed-line coverage gate passed.
• Mutation run on selfcheck.py: 24 mutants against the host/runner/run test files. Every mutant that changes which steps run, including restoring None if warm, is killed. 8 survive, all in the moved _check_step failure paths (see the second inline comment).

Checked, no issues

• Equivalence: the old loop and _check_step match on prepare failure ("{kind}: {exc}", no verdict problems, other step still runs), on oracle non-zero/timeout, and on the skip condition (not reason / run_oracle).
• Probe cost: run_check probes once per check and passes host to every check_task, so --warm adds no probes.
• Probe view: probe_host runs with network="none" and the evaluation's runner flags, so --warm's network does not change the affinity or cgroup quota view.

[xaleryb]

• Run: tasks check with and without --warm on main and on this head, using real docker, against a toy repo with 5 tasks (a 64-CPU requirement, an AMD-vendor requirement, a requirement the host meets, and two tasks with no host block). Also ran the full suite, ruff, mypy strict, bandit, and a mutation pass over _check_step.
• Input: --warm on a host that does not meet a task's requirements. Main says ok and exits 0. This head says unsupported/host, runs no null, and exits 1. That matches the offline verdicts. --allow-unsupported exits 0 and lists the tasks it let through. This is the announced change and nothing else differs.
• Both earlier threads are fixed at this head: d459193 corrects the fragment and the docstring, and 10e5aa8 adds failure-path tests that kill the mutants listed in the thread.
• No open findings. No commits from us.

[xaleryb]

Approved at aeacdc0. Every earlier point re-run at this head passes and no must-fix or mid item is open; full suite, ruff and mypy clean on Linux; CI green.