[benjaminshafii]

Summary

• Allow the optional HEADLESS_COMPUTER_SNAPSHOT variable in the celld-production environment to override the snapshot slug in CELLD_RUNNER_VARS.
• Use the same override for the pre-deploy compatibility check and the runner bundle; when unset, the current JSON-secret value remains the fallback.
• Document the setting in the Workbot and celld runner operations guides.

Evidence

Build verification

• actionlint .github/workflows/celld-runner-deploy.yml — passed.
• Snapshot override/fallback smoke test using jq — passed for both unset and set variable cases.
• git diff --check — passed.

API verification

No API changes.

UI verification

No UI changes; screenshots not applicable.

Test instructions

1. In GitHub Settings → Environments → celld-production, set the plain variable HEADLESS_COMPUTER_SNAPSHOT to the current Freestyle snapshot slug.
2. Run or rerun “Deploy runner to celld”.
3. Confirm the snapshot check accepts that slug and the runner bundle contains it. Unset the variable to verify the CELLD_RUNNER_VARS value remains the fallback.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
openwork-app	Ready	Preview	Oct 25, 2026 1:07am UTC
openwork-den	Ready	Preview	Oct 25, 2026 1:07am UTC
openwork-diagnostics	Ready	Preview	Oct 25, 2026 1:07am UTC
openwork-landing	Ready	Preview, v0	Oct 25, 2026 1:07am UTC

[benjaminshafii]

Verification

• actionlint .github/workflows/celld-runner-deploy.yml — passed.
• git diff --check — passed.
• A local jq smoke test confirmed both paths: a set environment variable overrides the JSON secret for the check and bundle; an unset variable retains the JSON-secret value.
• No API or UI changes; no screenshots applicable.

The production workflow was not dispatched: this PR only adds support for the optional override, and the production environment setting should be changed after merge/approval.

[github-actions]

OpenWork evidence

Status	Commit	Preview	Updated
🟢 Ready · evidence passed	22881af	Open preview	2026-10-25 01:14:04 UTC

Run details · Open the preview to inspect evidence and sandbox options.

[diff-warden]

Warden clearance. Complete security and confidentiality review of 22881afd08528b32f94f35a8baa55300437c249c found no high or medium security findings and no confidentiality findings. Any new push dismisses this approval. Analysis run

[diff-warden]

Warden: approved

No high or medium security findings and no confidentiality findings.

_{Reviewed 22881afd0852 · Warden run · Updates after every Warden run.}