Protect host-qualified source ownership and dispatch admission (#61) #75

Merged

kilo merged 5 commits from issue-61-source-ownership into develop

2026-10-08 07:46:46 +00:00

kilo commented

2026-10-08 06:12:22 +00:00

Member

Refs #61

Scope

Canonical HTTPS-origin-qualified v2 cache namespace; verified inode/UID/token ownership; stable bounded native acquisition/fetch/use locks; unique staging and atomic no-replace publication.
Preserve unknown, foreign, corrupt, hostless and interrupted entries. No destructive replacement, adoption, cleanup or immutable-identity rewrite.
Retain the lease through no-hardlink copying and explicit transfer/verification of the exact admitted base, including remote-tracking-only commits. Native Git children inherit the lease; model sessions do not.
Shared canonical-origin/clean/base/structural admission for preflight and new native starts, including explicit CLI/config overrides; revalidate copied objects and current authority after blocking callbacks.
Use Git's inert no-include configuration grammar, refuse executable/indirect configuration and gitlinks/submodules, validate Git-root mounts, and reject multi-URL origins before fetch or dispatch.
Recover original literal source paths and frozen #143/#166 identities/receipts without reacquisition or deadline renewal. Existing Attempts refuse missing original controller objects; pre-Attempt stopped recovery needs no fresh source.
Closed diagnostics, operator/migration/reuse docs and installed offline source smoke.

Frozen Subjects

Base/mergebase: 1deb32900d10dab6a3baad0c454ef9aa19c58733
Final HEAD: 6b8074484fcde26c4d0089bb593401f344139b59
Final tree: 24c516c6cdca6e368eb5bdf639f1fe65fe12e87b

Validation And Review

Closed synthetic environment; no live workload acquisition, model call or remote workload mutation.

uv sync --locked: passed offline.
Final parent make check package-check audit && git diff --check: passed. Ruff format/lint, basedpyright, inward imports, secret scan and audit passed; 1321 tests +57 subtests passed, 53 optional native verification tests skipped.
Reproducible sdist/wheel, isolated installed CLI/intake and host-qualified source acquisition/admission smoke passed.
Real-Git/native-filesystem forced process/thread interleavings, controller-death lease retention, interrupted publication, legacy-byte preservation and zero-start negatives; regression evidence for exact-base transfer, root mounts, hidden configuration/helpers, gitlinks, multi-URL origin and stopped/missing-object recovery.
Five fresh independent whole-PR reviews: ordinals1-4 REQUEST_CHANGES, scoped normal remediation commits retained; ordinal5 APPROVE with findings[] on the exact final HEAD/base. Reviewer independently reran make check package-check: 1321+57 passed, 53 optional skips.
Exact-head canonical CI2377 / Actions133: SUCCESS.

Limits

Trusted cooperative local Linux ownership, not hostile same-UID isolation, complete multi-task control, NFS or universal executor enforcement. Existing verification-only #50 proof is separate; #53 remains gated on universal worker/executor conformance. No main/release/deployment/product GO. Merge/completion uses only the existing owner-authorized Kernel /loop gates.

Refs #61 ## Scope - Canonical HTTPS-origin-qualified v2 cache namespace; verified inode/UID/token ownership; stable bounded native acquisition/fetch/use locks; unique staging and atomic no-replace publication. - Preserve unknown, foreign, corrupt, hostless and interrupted entries. No destructive replacement, adoption, cleanup or immutable-identity rewrite. - Retain the lease through no-hardlink copying and explicit transfer/verification of the exact admitted base, including remote-tracking-only commits. Native Git children inherit the lease; model sessions do not. - Shared canonical-origin/clean/base/structural admission for preflight and new native starts, including explicit CLI/config overrides; revalidate copied objects and current authority after blocking callbacks. - Use Git's inert no-include configuration grammar, refuse executable/indirect configuration and gitlinks/submodules, validate Git-root mounts, and reject multi-URL origins before fetch or dispatch. - Recover original literal source paths and frozen #143/#166 identities/receipts without reacquisition or deadline renewal. Existing Attempts refuse missing original controller objects; pre-Attempt stopped recovery needs no fresh source. - Closed diagnostics, operator/migration/reuse docs and installed offline source smoke. ## Frozen Subjects Base/mergebase: `1deb32900d10dab6a3baad0c454ef9aa19c58733` Final HEAD: `6b8074484fcde26c4d0089bb593401f344139b59` Final tree: `24c516c6cdca6e368eb5bdf639f1fe65fe12e87b` ## Validation And Review Closed synthetic environment; no live workload acquisition, model call or remote workload mutation. - `uv sync --locked`: passed offline. - Final parent `make check package-check audit && git diff --check`: passed. Ruff format/lint, basedpyright, inward imports, secret scan and audit passed; 1321 tests +57 subtests passed, 53 optional native verification tests skipped. - Reproducible sdist/wheel, isolated installed CLI/intake and host-qualified source acquisition/admission smoke passed. - Real-Git/native-filesystem forced process/thread interleavings, controller-death lease retention, interrupted publication, legacy-byte preservation and zero-start negatives; regression evidence for exact-base transfer, root mounts, hidden configuration/helpers, gitlinks, multi-URL origin and stopped/missing-object recovery. - Five fresh independent whole-PR reviews: ordinals1-4 REQUEST_CHANGES, scoped normal remediation commits retained; ordinal5 APPROVE with findings[] on the exact final HEAD/base. Reviewer independently reran `make check package-check`: 1321+57 passed, 53 optional skips. - Exact-head canonical CI2377 / Actions133: SUCCESS. ## Limits Trusted cooperative local Linux ownership, not hostile same-UID isolation, complete multi-task control, NFS or universal executor enforcement. Existing verification-only #50 proof is separate; #53 remains gated on universal worker/executor conformance. No main/release/deployment/product GO. Merge/completion uses only the existing owner-authorized Kernel /loop gates.

kilo added 1 commit

2026-10-08 06:12:22 +00:00