| name | gomboc_community_flow_apply_fix |
| description | Use when applying a fix with an existing ORL rule or by generating a new one. Does not own save/release โ callers (e.g. flow_fix Phase 3) handle enrich and push. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_remediate, gomboc_community_task_setup_rule_workspace, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop. |
Flow: Apply Fix
Apply a fix for a finding โ reuse an existing rule or generate one. Do not inline Docker/orl commands; use the listed dependencies.
Does not enrich or release rules. When a new package is generated under .orl-fixes/, leave it in place and return; save/release is owned by gomboc_community_flow_fix Phase 3 (or other explicit callers of enrich/release).
Inputs
From gomboc_community_flow_diagnose (or the user):
| Parameter | Description |
|---|
| Finding | Policy violation, file, classification |
| Target path(s) | Code to fix |
| Language | ORL language id |
| Rule status | existing / partial / none |
Path A โ Existing rule
- Resolve a rule path with
gomboc_community_task_resolve_existing_rules.
- Dry-run with
gomboc_community_cap_orl_remediate (dry_run: true).
- Show the diff; on confirmation, remediate with
dry_run: false.
- Report changed files.
Path B โ New rule needed
- Load
gomboc_community_know_language_guidance for language/AST notes.
gomboc_community_task_setup_rule_workspace under .orl-fixes/<rule-name>/ using the engineerโs real files as fixtures (no comments in workspace files).gomboc_community_task_write_orl_rule (uses gomboc_community_cap_orl_walk).gomboc_community_task_run_orl_test_loop (max 5 attempts).- Dry-run then apply via
gomboc_community_cap_orl_remediate against the userโs target path (confirm before apply).
- Report the package path under
.orl-fixes/ so the caller can optionally save/release.
Constraints
- Never apply without engineer confirmation.
- Prefer caps/tasks over ad-hoc
docker run.
- Do not call
gomboc_community_task_enrich_rule or gomboc_community_task_release_rule from this flow.
