Merge branch 'main' into feat/recipes-l40-any

Author: ntheanh201

fern/docs.yml

@@ -30,6 +30,10 @@ products:
         path: ../docs/index.yml
         slug: latest
         availability: stable
+      - display-name: v0.20.0
+        path: versions/v0.20.0.yml
+        slug: v0.20.0
+        availability: stable
       - display-name: v0.19.0
         path: versions/v0.19.0.yml
         slug: v0.19.0
@@ -38,10 +42,6 @@ products:
         path: versions/v0.17.0.yml
         slug: v0.17.0
         availability: stable
-      - display-name: v0.16.0
-        path: versions/v0.16.0.yml
-        slug: v0.16.0
-        availability: stable
 redirects:
   - source: "/aicr/index.html"
     destination: "/aicr/"

fern/versions/v0.16.0.yml

@@ -0,0 +1,136 @@
+# Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES.  All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+navigation:
+  - section: Overview
+    contents:
+      - page: Introduction
+        path: v0.20.0-content/README.md
+
+  - section: User Guide
+    contents:
+      - page: Installation
+        path: v0.20.0-content/user/installation.md
+      - page: End-to-End Tutorial
+        path: v0.20.0-content/user/tutorial.md
+      - page: CLI Reference
+        path: v0.20.0-content/user/cli-reference.md
+      - page: Generating Bundles
+        path: v0.20.0-content/user/bundling.md
+      - page: Fabric-Attached Training
+        path: v0.20.0-content/user/fabric-attached-training.md
+      - page: CLI Configuration File
+        path: v0.20.0-content/user/cli-config.md
+      - page: Artifact Verification
+        path: v0.20.0-content/user/artifact-verification.md
+      - page: API Reference
+        path: v0.20.0-content/user/api-reference.md
+      - page: Agent Deployment
+        path: v0.20.0-content/user/agent-deployment.md
+      - page: Air-Gapped Mirroring
+        path: v0.20.0-content/user/air-gap-mirror.md
+      - page: Component Catalog
+        path: v0.20.0-content/user/component-catalog.md
+      - page: Recipe Health
+        path: v0.20.0-content/user/recipe-health.md
+      - page: TestGrid
+        path: v0.20.0-content/user/testgrid.md
+      - page: Evidence Dashboard
+        path: v0.20.0-content/user/evidence-dashboard.md
+      - page: Validation
+        path: v0.20.0-content/user/validation.md
+      - page: Coverage Matrix
+        path: v0.20.0-content/user/coverage-matrix.md
+      - page: Slurm Accounting
+        path: v0.20.0-content/user/slinky-slurm-accounting.md
+      - page: Slurm Enroot Configuration
+        path: v0.20.0-content/user/slinky-slurm-enroot.md
+      - page: Slurm Shared Storage
+        path: v0.20.0-content/user/slinky-slurm-storage.md
+
+  - section: Integrator Guide
+    contents:
+      - page: Automation
+        path: v0.20.0-content/integrator/automation.md
+      - page: Data Flow
+        path: v0.20.0-content/integrator/data-flow.md
+      - page: Kubernetes Deployment
+        path: v0.20.0-content/integrator/kubernetes-deployment.md
+      - page: AKS GPU Setup
+        path: v0.20.0-content/integrator/aks-gpu-setup.md
+      - page: GKE GPU Setup
+        path: v0.20.0-content/integrator/gke-gpu-setup.md
+      - page: EKS Dynamo Networking
+        path: v0.20.0-content/integrator/eks-dynamo-networking.md
+      - page: GKE TCPXO Networking
+        path: v0.20.0-content/integrator/gke-tcpxo-networking.md
+      - page: OpenShift Deployment
+        path: v0.20.0-content/integrator/openshift.md
+      - page: Talos Integration
+        path: v0.20.0-content/integrator/talos-integration.md
+      - page: Recipe Development
+        path: v0.20.0-content/integrator/recipe-development.md
+      - page: Data Extension
+        path: v0.20.0-content/integrator/data-extension.md
+      - page: Validator Extension
+        path: v0.20.0-content/integrator/validator-extension.md
+      - page: Supply Chain Verification
+        path: v0.20.0-content/integrator/supply-chain-verification.md
+      - page: Go Library Integration
+        path: v0.20.0-content/integrator/go-library.md
+      - page: Public API Surface
+        path: v0.20.0-content/integrator/public-api.md
+      - page: Measurement Schema
+        path: v0.20.0-content/integrator/measurement-api.md
+      - section: Components
+        contents:
+          - page: Nodewright
+            path: v0.20.0-content/integrator/components/nodewright.md
+
+  - section: Contributor Guide
+    contents:
+      - page: Architecture Overview
+        path: v0.20.0-content/contributor/index.md
+      - page: Recipes, Overlays, and Mixins
+        path: v0.20.0-content/contributor/recipe.md
+      - page: Components
+        path: v0.20.0-content/contributor/component.md
+      - page: Collectors
+        path: v0.20.0-content/contributor/collector.md
+      - page: Validators
+        path: v0.20.0-content/contributor/validator.md
+      - page: Evidence Ingest
+        path: v0.20.0-content/contributor/evidence-ingest.md
+      - page: Inference-Perf Fluctuation (investigation)
+        path: v0.20.0-content/contributor/inference-perf-fluctuation.md
+      - page: CLI
+        path: v0.20.0-content/contributor/cli.md
+      - page: API Server
+        path: v0.20.0-content/contributor/api-server.md
+      - page: Testing
+        path: v0.20.0-content/contributor/tests.md
+      - page: Registry Egress
+        path: v0.20.0-content/contributor/registry-egress.md
+      - page: Claude Skills
+        path: v0.20.0-content/contributor/skills.md
+      - page: Maintaining AICR
+        path: v0.20.0-content/contributor/maintaining.md
+      - page: Rekor v2 Signing
+        path: v0.20.0-content/contributor/rekor-v2-signing.md
+      - page: Publishing Recipe Evidence
+        path: v0.20.0-content/contributor/evidence-publishing.md
+      - page: Publishing the Evidence Dashboard
+        path: v0.20.0-content/contributor/evidence-dashboard-publish.md
+      - page: UAT Day/Night Cycle
+        path: v0.20.0-content/contributor/uat.md

fern/versions/v0.20.0.yml

@@ -147,51 +147,6 @@ reservations:
     nightly-intent-min-versions:
       inference: v0.18.0
       training: v0.18.0
-  - name: aws-gb200
-    slug: ag2
-    cloud: aws
-    # CROSS-ACCOUNT: the GB200 Capacity Block lives in a SEPARATE tenancy
-    # (dgx-cloud-runai-prod-22, account 897722687756), not the standard UAT
-    # account. The account is NOT a field here: the AWS pipeline derives the
-    # tenancy it assumes the OIDC role into from the target cluster-config's
-    # .deployment.tenancy (cluster-config-gb200.yaml sets it to 897722687756),
-    # the single source of truth. Prereq: apply infra/uat-aws-account in
-    # 897722687756 (GitHub OIDC provider + github-actions-role-aicr).
-    # GB200 reservations are Capacity Blocks (marketType: capacity-block in
-    # cluster-config-gb200.yaml), not standing on-demand CRs like the h100 rows,
-    # so a run must fall inside the block's active window or actuator apply
-    # fails to acquire capacity. This particular block (cr-0e2f3833a602809a6,
-    # CapacityBlockId cbr-0a6a5543dd5c74727) is booked long: State=active,
-    # StartDate 2025-11-15, EndDate 2029-08-22 (TotalInstanceCount 18). A 04:00
-    # UTC nightly cron therefore always falls inside the window today, which is
-    # why nightly enrollment below is safe without broker window-awareness. If
-    # the block is ever re-booked to a shorter window, add a scheduling gate to
-    # the broker (or revert to `nightly-intents: []`) before it lapses.
-    reservation-id: cr-0e2f3833a602809a6
-    accelerator: gb200
-    # 4 Blackwell GPUs per p6e-gb200.36xlarge node; the cluster-config runs 2
-    # nodes (activates the multi-node NCCL East-West fabric check).
-    gpu-count: 4
-    cluster-config-path: tests/uat/aws/cluster-config-gb200.yaml
-    test-config-dir: tests/uat/aws/tests
-    # Enrolled in the nightly batch with both intents, matching the aws-h100
-    # row. Training runs the Kubeflow TrainJob CUJ; inference stands up and
-    # validates the served inference stack (the vLLM serve run itself stays
-    # disabled repo-wide, #1644). Each (version × intent) is a full
-    # provision→CUJ→teardown cell dispatched through the shared per-reservation
-    # lease, so the two intents serialize with no contention. Safe to enroll
-    # because the Capacity Block is booked active through 2029 (see the block
-    # note above) and the GB200 EKS UAT config first shipped in v0.18.0.
-    nightly-intents: [training, inference]
-    # Gate release cells to v0.18.0: cluster-config-gb200.yaml and the GB200 EKS
-    # UAT lane first shipped in v0.18.0 (absent in v0.17.0 and earlier), so a
-    # release cell below that tag has no GB200 config to run and would fail
-    # closed. `main` always runs both intents (built from source); older
-    # releases are skipped until v0.18.0 is the oldest cell in the window. Bump
-    # if the actual first-supported tag differs.
-    nightly-intent-min-versions:
-      training: v0.18.0
-      inference: v0.18.0
   - name: kind-h100
     slug: kh1
     cloud: kind

infra/uat/reservations.yaml

@@ -809,15 +809,14 @@ func TestDaytimeAssignmentsNone(t *testing.T) {
 }
 
 // TestCommittedRegistryValid guards the actual checked-in registry: it must
-// parse, validate, and carry the launch reservations plus the aws-gb200
-// bring-up row. A bad data edit fails here before it can break the broker
-// workflows.
+// parse, validate, and carry the launch reservations. A bad data edit fails
+// here before it can break the broker workflows.
 func TestCommittedRegistryValid(t *testing.T) {
 	reg, err := LoadRegistryFile(filepath.Join("..", "..", "infra", "uat", "reservations.yaml"))
 	if err != nil {
 		t.Fatalf("committed reservations.yaml invalid: %v", err)
 	}
-	want := map[string]string{"aws-h100": CloudAWS, "gcp-h100": CloudGCP, "azure-h100": CloudAzure, "aws-gb200": CloudAWS, "kind-h100": CloudKind}
+	want := map[string]string{"aws-h100": CloudAWS, "gcp-h100": CloudGCP, "azure-h100": CloudAzure, "kind-h100": CloudKind}
 	for name, cloud := range want {
 		res, err := reg.Lookup(name)
 		if err != nil {
@@ -829,6 +828,17 @@ func TestCommittedRegistryValid(t *testing.T) {
 		}
 	}
 
+	// The registry must carry EXACTLY these reservations. The positive lookup
+	// loop above would still pass if the retired aws-gb200 row (or any other)
+	// were re-added, so lock the full set here — a re-add or a stray row fails
+	// closed rather than sliding in unnoticed.
+	gotNames := append([]string(nil), reg.Names()...)
+	slices.Sort(gotNames)
+	wantNames := []string{"aws-h100", "azure-h100", "gcp-h100", "kind-h100"}
+	if !slices.Equal(gotNames, wantNames) {
+		t.Errorf("committed registry reservations = %v, want exactly %v", gotNames, wantNames)
+	}
+
 	// The committed daytime-name discovery slugs (ADR-017). Locked here so a
 	// future edit cannot silently rename or collide a slug — the daytime
 	// cluster name (aicr-uat-day-<slug>-<slot>-<run_id>) and its guard/teardown
@@ -837,7 +847,6 @@ func TestCommittedRegistryValid(t *testing.T) {
 		"aws-h100":   "ah1",
 		"gcp-h100":   "gh1",
 		"azure-h100": "zh1",
-		"aws-gb200":  "ag2",
 		"kind-h100":  "kh1",
 	}
 	for name, slug := range wantSlug {
@@ -890,13 +899,6 @@ func TestCommittedRegistryValid(t *testing.T) {
 		// acceptance run (29125390442); inference joined after a green
 		// manual intent=inference dispatch.
 		"azure-h100": {IntentTraining, IntentInference},
-		// aws-gb200 enrolled with both intents once the GB200 EKS UAT lane
-		// shipped (v0.18.0) and the Capacity Block was confirmed booked active
-		// through 2029 (cr-0e2f3833a602809a6). Release cells are gated to
-		// v0.18.0 via nightly-intent-min-versions (the config first shipped
-		// there), so only `main` runs GB200 nightly until v0.18.0 ages into the
-		// window.
-		"aws-gb200": {IntentTraining, IntentInference},
 		// kind-h100 (nvkind real-silicon lane, DC5 #1278) enrolled with both
 		// intents after green manual H100 acceptance runs (training 29954092703,
 		// inference 29965464868). Release cells are gated to v0.18.0 via
@@ -920,12 +922,10 @@ func TestCommittedRegistryValid(t *testing.T) {
 	// a future edit cannot silently drop a gate — which would let a release cell
 	// run a pre-fix aicr and emit failing/unusable evidence. azure-h100 gates its
 	// AKS perf + driver-only fixes; kind-h100 gates the uat-kind lane + the
-	// os-agnostic coordinate fix (#1851); aws-gb200 gates the GB200 EKS UAT
-	// config, which first shipped in v0.18.0. All landed post-v0.17.0.
+	// os-agnostic coordinate fix (#1851). All landed post-v0.17.0.
 	wantMinVersions := map[string]map[string]string{
 		"azure-h100": {IntentTraining: "v0.18.0", IntentInference: "v0.18.0"},
 		"kind-h100":  {IntentTraining: "v0.18.0", IntentInference: "v0.18.0"},
-		"aws-gb200":  {IntentTraining: "v0.18.0", IntentInference: "v0.18.0"},
 	}
 	for name, want := range wantMinVersions {
 		res, lookupErr := reg.Lookup(name)