fix(ai): confine benchmark requests

Disable proxy discovery and redirect following so validated Ollama origins cannot escape the approved network boundary. Run the standard-library safety suite in CI.
2026-08-15 19:31:49 +02:00
parent f7312f4ba6
commit c0e190d5b5
3 changed files with 32 additions and 2 deletions
@@ -37,6 +37,11 @@ jobs:
          cache: 'npm'
          cache-dependency-path: job-tracker-ui/package-lock.json

+      - name: Test repository safety scripts
+        # Standard-library only and plan-only: this validates the synthetic benchmark harness
+        # without contacting Ollama, pulling a model, or requiring package installation.
+        run: python3 scripts/test-ollama-evaluation.py
+
      - name: Build backend
        run: dotnet build JobTrackerApi/JobTrackerApi.csproj --configuration Release