3 Commits

Include renames

Author	SHA1	Message	Date
3 people	cb26ccd9a7	test: skip native bash tool tests on Windows (2 modules) (#6872) ... * tests: skip native bash behavior test on Windows in test_production_external_bridge On Windows the only containment mechanism (windows_tree) enforces wall-clock only; ENFORCING mode refuses bash (filesystem/process_tree unavailable), so exit_code is 1. The test asserts bubblewrap/process_group: POSIX-only by design. Part of #4287 Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * tests: skip native bash exit-status test on Windows in test_preview_execution_evidence BashTool needs enforcing containment (filesystem/process_tree); Windows windows_tree gives wall-clock only, so the command is not executed and exit_code is 1 instead of 7. POSIX-only by design. Part of #4287 Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> Co-authored-by: Alexandre Teixeira <general@alexandreteixeira.dev>	2026-11-01 01:47:57 +00:00
Alexandre Teixeira	db41d7e822	feat(runtime): bind process and job resources to authority	2026-10-02 18:54:09 +01:00
Alexandre Teixeira	037c5f51bf	fix(runtime): resolve Wave 3-S audit findings (P2-1, P2-2, P2-3) ... - P2-1: reject non-process PID values (None, 0, negative integers) in pid_alive without invoking underlying process probe. - P2-2: truthfully represent production external bridge executions as uncontained, external, non-authoritative grants carrying sanitized endpoint metadata. - P2-3: reject writable_extra overlay bindings over protected system roots and their descendants while preserving legitimate scratch destinations.	2026-10-02 00:07:44 +01:00