Consume the EXT-16 exec backend interface (Backend #119) #285

Merged
weichen merged 6 commits from feature/ext-16-exec-backend into main 2026-10-09 17:14:11 +00:00
6 Commits
Author SHA1 Message Date
weichen bbdd3f4505 Disable auto-gc in the task-lifecycle remote fixture
ci / test (pull_request) Successful in 2m13s
Why: git receive-pack runs 'gc --auto' in the background after a push;
the fixture's TemporaryDirectory teardown then races the gc writer and
fails with OSError 39 (remote.git not empty) — observed on the PR #285
runner (job 1967). The fixture remote holds no durable value, so auto-gc
is pure flake surface.

Evidence: the failing test passes 5/5 locally after the fix; full
make test-governance green (104 tests).

Impact: test fixture only; no governance-script behavior change.

Refs: Dev CI run 1438 job 1967; same race family as the upload-host
TempDir flake fixed earlier.
2026-10-09 17:10:18 +00:00
weichen fdf373b78a Record the sync checkpoint
ci / test (pull_request) Failing after 45s
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=13e03ab15d89d13e0b1cc6848d76776c723a6f96; candidate=44c436ed339b3f2189ec8c426c18a9358eada63c.

Impact: task metadata only.

Refs: .task/feature-ext-16-exec-backend.md
2026-10-09 17:06:06 +00:00
weichen 44c436ed33 Record the sandbox escape-negative evidence row and fill the result summary
Why: the EXT-16 acceptance is escape-negative driven; the tool-written
evidence row captures the local bwrap run (all probes blocked, product
task visible) and the card summary states scope and follow-ups.

Evidence: go test -run 'TestSetExecBackendValidation|TestSandboxArgvShape|
TestSandbox|TestDirect' via CMD=... make evidence exit 0 (10 tests,
bwrap 0.11.1); make test row recorded earlier at this head.

Impact: task card only.

Refs: proposal 2026-10-09-ext-g1-b1-b3 (EXT-16); Backend #119.
2026-10-09 17:05:42 +00:00
weichen b46b0fefba Record the make test evidence row at the EXT-16 bump head 2026-10-09 17:05:19 +00:00
weichen efad2d1570 Bump backend to the EXT-16 exec backend merge (Backend #119)
Why: EXT-16 abstracts the interpreter launch point into an ExecBackend
port (direct = byte-identical status quo; sandbox = bwrap isolation:
ro root, tmpfs /home+/tmp, session/skills-only writable mounts, no
network, ulimit -u fork cap, timeout kills the namespace) with config
key execBackend, env AGENT_SYSTEM_EXEC_BACKEND, CLI --exec-backend and
extension.Options.ExecBackend (SurfaceVersion 2.6.0-experimental).
DisableExecTools stays the top-priority fail-closed switch; RDM keeps
DisableExecTools=true until G3-7.

Evidence: Backend #119 head 4badecb vet-and-test CI success, merged as
1a55089; local escape negatives all blocked (home secret, sibling
session, network, 400-proc spawn storm, 60s-sleep timeout kill,
orphan die-with-namespace) recorded in the task card evidence rows;
full make test at this head recorded on the card.

Impact: umbrella gitlink only; no source edits outside modules/backend.

Refs: proposal modules/documents docs/proposals/2026-10-09-ext-g1-b1-b3
(EXT-16); Backend #119; Backend #110 (DisableExecTools).
2026-10-09 17:03:12 +00:00
weichen ac0b616ae8 Record the task card for feature-ext-16-exec-backend
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-ext-16-exec-backend.md; R0=13e03ab15d89d13e0b1cc6848d76776c723a6f96.

Impact: task metadata only; the feature workspace starts at 13e03ab15d.

Refs: .task/feature-ext-16-exec-backend.md
2026-10-09 16:53:09 +00:00