The dev deploy candidate rolled back at startup: sandbox doctor tried to execute runtime/envs/python/current/bin/python3, but /home is masked and only the resolved Python prefix is remounted. The current symlink path was therefore unavailable inside bwrap.
Evidence
Backend: GOWORK=off go test ./internal/tools ./cmd/agent-system passed at integrated pin b00e192.
Candidate runtime: GOWORK=off go run ./cmd/agent-system env doctor --root /home/weichen/projects/Agent-System-Dev/runtime/envs printed doctor ok.
Dev composition: make build passed.
Source fix reuses the minimal interpreter-realpath change already merged in Backend PR #207; this Dev PR updates the Backend gitlink to b00e1924407989e52350ecdfa17f16640815ed89.
Impact
The sandbox can execute the interpreter inside its mounted prefix without weakening isolation. No runtime data or Python environment files are changed.
Refs
Deployment blocker from dev@6455b54+rdm@7476a04d986d
## Why
The dev deploy candidate rolled back at startup: sandbox doctor tried to execute `runtime/envs/python/current/bin/python3`, but `/home` is masked and only the resolved Python prefix is remounted. The `current` symlink path was therefore unavailable inside bwrap.
## Evidence
- Backend: `GOWORK=off go test ./internal/tools ./cmd/agent-system` passed at integrated pin `b00e192`.
- Candidate runtime: `GOWORK=off go run ./cmd/agent-system env doctor --root /home/weichen/projects/Agent-System-Dev/runtime/envs` printed `doctor ok`.
- Dev composition: `make build` passed.
- Source fix reuses the minimal interpreter-realpath change already merged in Backend PR #207; this Dev PR updates the Backend gitlink to `b00e1924407989e52350ecdfa17f16640815ed89`.
## Impact
The sandbox can execute the interpreter inside its mounted prefix without weakening isolation. No runtime data or Python environment files are changed.
## Refs
- Deployment blocker from dev@6455b54+rdm@7476a04d986d
- Backend PR #207
- Task card: `.task/feature-execenv-python-sandbox-path.md`
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-execenv-python-sandbox-path.md; R0=39ee3d1155140ccc1ec4b9c738cb27eaf8cdbef2.
Impact: task metadata only; the feature workspace starts at 39ee3d1155.
Refs: .task/feature-execenv-python-sandbox-path.md
Why: the deployment-blocking fix was ready, but its task card still contained template placeholders and omitted the reviewed candidate, queue window, and prior CI result.
Evidence: git diff --check; host review of Dev 56ac94b and Backend b00e192; GATE run 3701 on the reviewed product candidate.
Impact: records the authorized merge and deployment scope without changing product code.
Refs: Agent-System-Dev PR #606
weichen
merged commit 6c90e6c92a into main2026-10-17 16:59:27 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Why
The dev deploy candidate rolled back at startup: sandbox doctor tried to execute
runtime/envs/python/current/bin/python3, but/homeis masked and only the resolved Python prefix is remounted. Thecurrentsymlink path was therefore unavailable inside bwrap.Evidence
GOWORK=off go test ./internal/tools ./cmd/agent-systempassed at integrated pinb00e192.GOWORK=off go run ./cmd/agent-system env doctor --root /home/weichen/projects/Agent-System-Dev/runtime/envsprinteddoctor ok.make buildpassed.b00e1924407989e52350ecdfa17f16640815ed89.Impact
The sandbox can execute the interpreter inside its mounted prefix without weakening isolation. No runtime data or Python environment files are changed.
Refs
.task/feature-execenv-python-sandbox-path.md