@mutmutco/codex-plugin 4.3.16 → 4.3.17

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.3.16",
+  "version": "4.3.17",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.3.16",
+  "version": "4.3.17",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/bootstrap/SKILL.md

@@ -381,6 +381,13 @@ collaborator list + the per-branch allowlist are the record — no separate rost
   $OWNER/$REPO` remains the supported fallback; confirm `product required-check ruleset enforcement active`
   with `bootstrap verify` before reporting bootstrap complete. MMI-Hub keeps its own three-job gate
   (`cli`/`infra`/`docs`) — never apply the product ruleset there.
+- **The ruleset requires an up-to-date head (#6263)** — the seeded reference sets
+  `strict_required_status_checks_policy: true` ("require branches to be up to date before merging"), so the
+  last of several parallel landings re-tests on the real combination instead of a base that lacked the
+  others (Jerv-JervCode#4289). `bootstrap apply --execute` and `ci reconcile --apply` re-PUT an existing
+  non-strict ruleset; `bootstrap verify` reports it as `product required-check ruleset requires an up-to-date
+  branch`. `pr merge` / `pr land` update a BEHIND head from the base with a merge commit and re-wait once —
+  see `docs/Guides/train-troubleshooting.md#head-behind-base`.
 - **A brand-new repo cannot pass the gate you just installed — its first commit must carry a real project
   (#2928).** The seeded `gate.yml` runs `GATE_INSTALL_CMD` + `GATE_CMD` (`npm ci` + `npm run check` by
   default) **unconditionally**. An empty repo has no `package.json`, so the gate **fails on the seed PR

package/skills/bootstrap/seeds/mmi-product-required-checks.template.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "Repository-level ruleset requiring the product gate job (#1333). Apply via GitHub repo rulesets (master-admin) after bootstrap seeds gate.yml — the job name gate must match this context.",
+  "_comment": "Repository-level ruleset requiring the product gate job (#1333). Apply via GitHub repo rulesets (master-admin) after bootstrap seeds gate.yml — the job name gate must match this context. strict_required_status_checks_policy=true (#6263): the head must be up to date with the base before merging, so the last of several parallel landings re-tests on the real combination.",
   "name": "mmi-product-required-checks",
   "target": "branch",
   "enforcement": "active",
@@ -13,7 +13,7 @@
     {
       "type": "required_status_checks",
       "parameters": {
-        "strict_required_status_checks_policy": false,
+        "strict_required_status_checks_policy": true,
         "required_status_checks": [
           { "context": "gate" }
         ]