From efad2d15705e87b3733f2a75c245632a4c46ab14 Mon Sep 17 00:00:00 2001 From: weichen Date: Fri, 9 Oct 2026 17:03:12 +0000 Subject: [PATCH] Bump backend to the EXT-16 exec backend merge (Backend #119) Why: EXT-16 abstracts the interpreter launch point into an ExecBackend port (direct = byte-identical status quo; sandbox = bwrap isolation: ro root, tmpfs /home+/tmp, session/skills-only writable mounts, no network, ulimit -u fork cap, timeout kills the namespace) with config key execBackend, env AGENT_SYSTEM_EXEC_BACKEND, CLI --exec-backend and extension.Options.ExecBackend (SurfaceVersion 2.6.0-experimental). DisableExecTools stays the top-priority fail-closed switch; RDM keeps DisableExecTools=true until G3-7. Evidence: Backend #119 head 4badecb vet-and-test CI success, merged as 1a55089; local escape negatives all blocked (home secret, sibling session, network, 400-proc spawn storm, 60s-sleep timeout kill, orphan die-with-namespace) recorded in the task card evidence rows; full make test at this head recorded on the card. Impact: umbrella gitlink only; no source edits outside modules/backend. Refs: proposal modules/documents docs/proposals/2026-10-09-ext-g1-b1-b3 (EXT-16); Backend #119; Backend #110 (DisableExecTools). --- modules/backend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/backend b/modules/backend index 31965fd8..1a550895 160000 --- a/modules/backend +++ b/modules/backend @@ -1 +1 @@ -Subproject commit 31965fd837f186baf33e8b6f2714ce386a534dd4 +Subproject commit 1a550895c3c14c52c88dac0271a7f11f4874cf24