Bundles the documentation and lightweight tooling landed during the
2026-04-23 ops/triage session. Pure additions — no behavior changes.
## Added
### docs/architecture/backends.md
Parity matrix for Docker vs EC2 (SaaS) workspace backends. 18 features
tabulated with current status; 6 ranked drift risks; enforcement
hooks (parity-lint + contract tests). Living document — owners are
workspace-server + controlplane teams.
### docs/engineering/testing-strategy.md
Tiered test-coverage floors instead of a blanket 100% target. Seven
tiers by code class (auth/crypto → generated DTOs). Per-package
current-state snapshot + targets. Tracks the 3 biggest coverage gaps
(tokens.go 0%, workspace_provision.go 0%, wsauth ~48%) against their
tier-1/2 floors.
### docs/engineering/pr-hygiene.md
Captures the patterns that keep diffs reviewable. Motivated by the
2026-04-23 backlog audit where 8 of 23 open PRs had 70-380-file bloat
from stale branch drift. Covers: small-PR sizing, rebase-not-merge,
cherry-pick-onto-fresh-base for recovery, targeting staging first,
describing why-not-what.
### docs/engineering/postmortem-2026-04-23-boot-event-401.md
Postmortem for the /cp/tenants/boot-event 401 race. Root cause (DB
INSERT ordered AFTER readiness check), detection path (E2E + manual
log inspection), lessons (write-before-read pattern, integration
tests needed, E2E alerting gap, invariants-as-comments).
### tools/check-template-parity.sh
CI lint for template repos — diffs the `${VAR:+VAR=${VAR}}` provider-
key forwarders between install.sh (bare-host / EC2 path) and start.sh
(Docker path). Catches the #5 drift risk from backends.md before it
ships.
### workspace-server/internal/provisioner/backend_contract_test.go
Shared behavioral contract scaffold for Provisioner + CPProvisioner.
Compile-time assertions catch method-signature drift today; scenario-
level runs are t.Skip'd pending backend nil-hardening (drift risk #6,
see backends.md).
## Updated
### README.md
Links the new engineering docs + backends parity matrix into the
Documentation Map so agents and humans can actually find them.
## Related issues
- #1814 — unblock workspace_provision_test.go (broadcaster interface)
- #1813 — nil-client panic hardening (drift risk #6)
- #1815 — Canvas vitest coverage instrumentation
- #1816 — tokens.go 0% → 85%
- #1817 — 5 sqlmock column-drift failures
- #1818 — Python pytest-cov setup
- #1819 — wsauth middleware coverage gap
- #1821 — tiered coverage policy (meta)
- #1822 — backend parity drift tracker
Co-authored-by: Hongming Wang <hongmingwang.rabbit@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: molecule-ai[bot] <276602405+molecule-ai[bot]@users.noreply.github.com>
5.6 KiB
Pull Request Hygiene
Status: Guide. Violations are a review-time flag, not a CI gate. Audience: Humans and agents opening PRs in this repo. Cross-refs: testing-strategy.md, backends.md
Why this exists
On 2026-04-23 a backlog audit found 23 open PRs on molecule-core, of which 8 had accumulated 70-380 files of bloat (+2000/-8000 lines) from stale branch drift. The underlying fix in each was 1-5 files; the rest was merge artifact. Half the PRs were closed that day because they weren't reviewable and the real fix had to be re-extracted onto a clean branch.
This document captures the patterns that avoid that outcome.
The rules
1. Small PRs, single concern
| Change size | Reviewability |
|---|---|
| ≤100 lines | ✅ Good. One sitting. |
| 100-300 lines | ⚠️ Acceptable if genuinely one logical change. |
| 300-1000 lines | 🔴 Too large. Split. |
| 1000+ lines | 🚫 Unreviewable — split before opening. |
Exception: complete file deletions and automated refactors where the reviewer only needs to verify intent.
2. Branch hygiene — rebase, don't merge-in
When your branch falls behind the base:
Do:
git fetch origin staging
git rebase origin/staging
# resolve conflicts
git push --force-with-lease
Don't:
git fetch origin staging
git merge origin/staging # creates merge commit + pulls ALL of base's files into your diff
A merge commit from origin/staging brings every base-branch commit into your PR's diff. That's where the 235-file bloat comes from. Once you have it, you can't get rid of it without resetting the branch.
3. If your branch has already drifted — cherry-pick onto fresh base
# Identify your real commits
git log origin/staging..HEAD
# Create a fresh branch off current base
git checkout -b your-branch-clean origin/staging
# Cherry-pick only the commits you actually authored
git cherry-pick abc1234 def5678
# Push and open a new PR; close the old one as "superseded by #N"
git push -u origin your-branch-clean
Don't try to rebase a drifted branch interactively to remove the base-branch commits. It fights you every merge.
4. Target staging unless you're doing a staging→main promote
Per branching policy (feedback memory rule): every change lands on staging first. Once validated there, a periodic chore: sync staging → main PR promotes the bundle.
Exception: hotfixes that also land on main directly with CEO approval.
5. Describe the why, not the what
A good PR title:
fix(provision): write org_instances row BEFORE readiness check to unblock boot-event auth
A bad PR title:
Update orgs.goFix bugPhase 1
The body should explain:
- What's broken / missing (or what's the opportunity)
- Why this fix — especially if there are alternatives you considered
- What's tested — which scenarios the test plan covers
- What's deferred — if there are follow-ups, file issues and link them
Anti-pattern: ## Summary\n- Fix bug. That's not a summary; that's a stub.
6. Close the loop on review comments
- Comments labeled
Nit:/Optional:/FYIcan be left for follow-up — but leave a reply acknowledging. - Critical/required comments need a fix or a justified reply before merge.
- Don't resolve threads without replying — silent resolves read as dismissal.
7. CI must be green (or the failure must be acknowledged)
- Never push
--no-verifyunless explicitly requested. - If a pre-existing failure is blocking merge, document it inline and file a tracking issue — don't silently let it erode the "all green" norm.
Patterns for specific situations
Re-targeting an old branch
When a PR was opened weeks ago against main but policy now says staging:
git fetch origin staging
git rebase --onto origin/staging old-base HEAD
git push --force-with-lease
# Edit the PR's base branch in GitHub UI
Splitting a large PR
If your PR is already open and the reviewer asks for a split:
- Identify the cleanest split boundary — usually along file groups or dependency layers.
- Create two new branches off current staging.
- Cherry-pick the commits for each concern into its branch.
- Open two new PRs, close the original as "superseded by #A and #B".
Marketing / docs-heavy PRs
Marketing content has been moved to an internal repo per commit 93324e7. If your PR modifies files under docs/marketing/campaigns/, docs/marketing/plans/, or docs/marketing/briefs/ (with non-public-facing strategy content):
- Check if the file still exists on
origin/staging. - If deleted, open the PR in the internal marketing repo instead.
- Public-facing marketing (blog posts, SEO pages under
docs/blog/) stays in this repo.
Signs your PR has a hygiene problem
- 70+ files changed when your commit message mentions 2-3 files
- +2000/-3500 lines but the actual fix is ~100 lines
- State: DIRTY in GitHub for >1 day
- Filenames in the diff you don't recognize (someone else's changes in your PR)
- Merge commits in your branch's log named
Merge remote-tracking branch 'origin/staging' into ...
If you see any of these, don't try to "clean it up in place" — cherry-pick onto a fresh branch (rule 3 above).
Related
- Issue #1822 — backend parity drift tracker (example of docs that have to stay current)
- Postmortem: CP boot-event 401 — caught before shipping because a reviewer could read the diff