The production image build invalidates expensive operating-system, Node.js, Codex, and OpenCode layers for every source SHA because OPENAGENTS_BUILD_REVISION becomes an ENV value before those installation steps. Move revision-dependent instructions below stable toolchain installation, or split the stable toolchain into a pinned base image. Keep the embedded revision label and OpenAgents.BuildInfo exact-SHA checks unchanged. Acceptance: two adjacent source revisions reuse all dependency-independent toolchain layers, the image still embeds the exact candidate SHA, and the release gate verifies both properties.
The production image build invalidates expensive operating-system, Node.js, Codex, and OpenCode layers for every source SHA because
OPENAGENTS_BUILD_REVISIONbecomes anENVvalue before those installation steps. Move revision-dependent instructions below stable toolchain installation, or split the stable toolchain into a pinned base image. Keep the embedded revision label andOpenAgents.BuildInfoexact-SHA checks unchanged. Acceptance: two adjacent source revisions reuse all dependency-independent toolchain layers, the image still embeds the exact candidate SHA, and the release gate verifies both properties.