From Inventory Drift to Integrated Truth: How a Canonical OSS Inventory Makes Our Automation Safer

02

What changed

In a single closed UTC day, 118 merged PRs across 10 repos moved this from intention to fact.

The day’s work pulled a fragmented OSS picture into one canonical, machine-readable inventory and made it discoverable the same way from every repository. Module identity was reconciled against the live tool-registry, so the names the platform uses and the names the inventory records finally agree. A crosswalk now ties the integrated-system view together, and the directory prefers trustworthy current copies over stale snapshots - so “where does this component really live, and at what version” has exactly one answer.

In parallel, the CI substrate got more honest about where it runs. Jobs now fail closed when they land on a runner that cannot actually execute them - a host without Node on its PATH, for example - instead of flapping between green and red depending on which machine picked up the work. A build that cannot be trusted to run is now treated as a build that did not run, which is exactly the behaviour you want guarding a publish lane.

03

Why it holds better

The combination is what matters. A canonical inventory gives every consumer one truth to read; fail-closed runners make sure the automation that reads it only proceeds on infrastructure it can actually trust. Drift has fewer places to hide, and the failure modes that used to look like flakiness now surface as explicit, debuggable stops. That is less exciting than a feature launch and far more valuable: it is the difference between automation you supervise and automation you can rely on.