revert: remove portable GB300 packaging

Signed-off-by: Prekshi Vyas <prekshiv@nvidia.com>

Author: prekshivyas

crates/openshell-driver-mxc/qualification/README.md

@@ -84,33 +84,3 @@ and OpenClaw bundles, `evidence.json`, and the final validation log. Do not put
 provider credentials in command lines or retained files. Optional credential
 coverage must use a scoped non-production credential and prove that retained
 artifacts contain no secret value.
-
-## Build a portable collector
-
-Build one hash-manifested ZIP from a clean qualification revision:
-
-```powershell
-powershell -NoProfile -ExecutionPolicy Bypass `
-  -File crates/openshell-driver-mxc/qualification/package-gb300-woa.ps1
-```
-
-The archive contains `Run-Qualification.ps1`, the contract, validator, concise
-instructions, and a manifest that identifies and hashes the collector. Keep the
-extracted directory outside the checkout. Point it at the clean OpenShell branch
-being tested without copying qualification files into that branch:
-
-```powershell
-$env:OPENSHELL_GB300_REPO_ROOT = 'C:\path\to\OpenShell'
-$env:OPENSHELL_GB300_BASE_SHA = '<full reviewed origin/windows SHA>'
-$env:OPENSHELL_GB300_HARDWARE_ATTESTATION = 'GB300'
-$env:OPENSHELL_WXC_EXEC_PATH = 'C:\mxc-kit\bin\wxc-exec.exe'
-$env:OPENSHELL_GB300_NODE_PATH = 'C:\path\to\arm64\node.exe'
-$env:OPENSHELL_GB300_OPENCLAW_DIR = 'C:\path\to\node_modules\openclaw'
-$env:OPENSHELL_GB300_EVIDENCE_DIR = 'D:\evidence\openshell-gb300-<run-id>'
-
-powershell -NoProfile -ExecutionPolicy Bypass -File .\Run-Qualification.ps1
-```
-
-The target checkout does not need to contain this qualification directory, but
-it must have canonical `origin`, descend directly from the reviewed `windows`
-SHA, and be clean. Share the ZIP's SHA256 out of band with the tester.

crates/openshell-driver-mxc/qualification/package-gb300-woa.ps1

@@ -6,7 +6,6 @@
 
 [CmdletBinding()]
 param(
-    [string] $RepoRoot = $env:OPENSHELL_GB300_REPO_ROOT,
     [string] $ExpectedBaseSha = $env:OPENSHELL_GB300_BASE_SHA,
     [string] $WxcExecPath = $env:OPENSHELL_WXC_EXEC_PATH,
     [string] $NodeExePath = $env:OPENSHELL_GB300_NODE_PATH,
@@ -20,10 +19,7 @@ Set-StrictMode -Version Latest
 $ErrorActionPreference = "Stop"
 $PSNativeCommandUseErrorActionPreference = $false
 
-if ([string]::IsNullOrWhiteSpace($RepoRoot)) {
-    $RepoRoot = Join-Path $PSScriptRoot "..\..\.."
-}
-$RepoRoot = (Resolve-Path -LiteralPath $RepoRoot).Path
+$RepoRoot = (Resolve-Path (Join-Path $PSScriptRoot "..\..\..")).Path
 $ManifestPath = Join-Path $PSScriptRoot "gb300-woa.json"
 $ValidatorPath = Join-Path $PSScriptRoot "validate.py"
 $WindowsWrapper = Join-Path $RepoRoot "tasks\scripts\windows-msvc.ps1"
@@ -246,7 +242,7 @@ $Durations["source-provenance"] = [Math]::Round($sourceTimer.Elapsed.TotalSecond
 
 $uv = Get-Command uv -ErrorAction Stop
 Invoke-LoggedProcess "contract-integrity" "contract-validation.log" $uv.Source @(
-    "run", "python", $ValidatorPath, "--repo-root", $RepoRoot, "contract"
+    "run", "python", $ValidatorPath, "contract"
 )
 
 $probePath = Join-Path $ExampleSource "probe-mxc-host.ps1"
@@ -485,8 +481,7 @@ $record = [ordered]@{
 }
 Write-Json $record $recordPath
 Invoke-LoggedProcess "evidence-validation" "evidence-validation.log" $uv.Source @(
-    "run", "python", $ValidatorPath, "--repo-root", $RepoRoot,
-    "evidence", "--record", $recordPath,
+    "run", "python", $ValidatorPath, "evidence", "--record", $recordPath,
     "--artifact-root", $EvidenceDir, "--expected-base-sha", $ExpectedBaseSha
 )
 

crates/openshell-driver-mxc/qualification/run-gb300-woa.ps1

@@ -37,6 +37,7 @@
     "crates/openshell-driver-mxc/examples/probe-mxc-host.ps1",
     "crates/openshell-driver-mxc/examples/run-mxc-e2e.ps1",
     "crates/openshell-driver-mxc/examples/run-openclaw-forward-test.ps1",
+    "crates/openshell-driver-mxc/qualification/gb300-woa.json",
     "tasks/scripts/windows-msvc.ps1",
     "tasks/windows.toml",
 }
@@ -270,10 +271,9 @@ def validate_evidence(
     record: dict[str, Any],
     artifact_root: Path,
     expected_base_sha: str,
-    repo_root: Path | None = None,
 ) -> list[str]:
     """Validate one retained evidence record against the static matrix."""
-    errors = validate_contract(contract, repo_root=repo_root)
+    errors = validate_contract(contract, repo_root=None)
     if not SHA_PATTERN.fullmatch(expected_base_sha):
         errors.append("expected base SHA must be 40 lowercase hexadecimal characters")
     if record.get("schema_version") != 1:
@@ -485,12 +485,6 @@ def main(argv: list[str] | None = None) -> int:
         default=script_dir / "gb300-woa.json",
         help="Path to the qualification contract",
     )
-    parser.add_argument(
-        "--repo-root",
-        type=Path,
-        default=repo_root,
-        help="OpenShell checkout to validate (required for an external bundle)",
-    )
     subparsers = parser.add_subparsers(dest="mode", required=True)
     subparsers.add_parser("contract", help="Validate the static scope contract")
     evidence = subparsers.add_parser(
@@ -504,15 +498,14 @@ def main(argv: list[str] | None = None) -> int:
     try:
         contract = load_json(args.manifest)
         if args.mode == "contract":
-            errors = validate_contract(contract, repo_root=args.repo_root)
+            errors = validate_contract(contract, repo_root=repo_root)
         else:
             record = load_json(args.record)
             errors = validate_evidence(
                 contract,
                 record,
                 args.artifact_root,
                 args.expected_base_sha,
-                repo_root=args.repo_root,
             )
     except (OSError, ValueError, json.JSONDecodeError) as error:
         print(f"ERROR: {error}", file=sys.stderr)

crates/openshell-driver-mxc/qualification/validate.py

@@ -8,8 +8,6 @@
 import copy
 import hashlib
 import importlib.util
-import subprocess
-import sys
 from pathlib import Path
 from typing import TYPE_CHECKING, TypedDict, cast
 
@@ -163,41 +161,6 @@ def test_runner_hash_binds_a_versioned_openclaw_package() -> None:
     assert "openclaw_package_json_sha256" in source
 
 
-def test_runner_supports_an_external_qualification_bundle() -> None:
-    source = (QUALIFICATION_DIR / "run-gb300-woa.ps1").read_text(encoding="utf-8")
-
-    assert "OPENSHELL_GB300_REPO_ROOT" in source
-    assert '"--repo-root", $RepoRoot' in source
-
-
-def test_portable_bundle_does_not_require_qualification_files_in_target() -> None:
-    assert not any(
-        "qualification" in relative for relative in VALIDATOR.REQUIRED_REPOSITORY_PATHS
-    )
-
-
-def test_validator_cli_honors_external_repo_root(tmp_path: Path) -> None:
-    for relative in VALIDATOR.REQUIRED_REPOSITORY_PATHS:
-        path = tmp_path / relative
-        path.parent.mkdir(parents=True, exist_ok=True)
-        path.write_text("fixture\n", encoding="utf-8")
-
-    result = subprocess.run(
-        [
-            sys.executable,
-            str(QUALIFICATION_DIR / "validate.py"),
-            "--repo-root",
-            str(tmp_path),
-            "contract",
-        ],
-        check=False,
-        capture_output=True,
-        text=True,
-    )
-
-    assert result.returncode == 0, result.stderr
-
-
 def test_repository_contract_is_valid() -> None:
     errors = VALIDATOR.validate_contract(_load_contract(), repo_root=REPO_ROOT)
     assert errors == []