Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Record available

At the snapshots LH008 to LH010 timed, does some job in a pinned project's CI workflows install the library's version from the file that held the pin or lock, and in particular from the lockfile, including where the project's own container recipe leaves that file unread?

The question

Do pinned projects’ CI jobs install from the timed pin or lockfile, including where container recipes leave it unread?

What the record says

Of 469 timed pairs, 395 kept CI; instructions showed some job would take the timed pinned file in 282 of 291 decided pairs, and the timed lockfile itself in 164 of 188. In 83 of those 164 pairs, all lock-reading jobs used commands that could re-lock, and lockfile-only pairs’ pin-reading share carries no label because too many are undetermined.

Check the summary against the record

Read the study record

Follow the connections

These are explicit references between records. The link itself does not establish support or intellectual influence.

Records that refer back here

Navigation summary checked against the retained record. A record being written does not by itself mean that its study or investigation has ended.