feat(sandbox): restack exact patch quarantine on latest main

[seonghobae]

Purpose

Create a clean protected-main successor for stale/diverged Draft #262 without force-pushing, rebasing, or mutating its active branch. This successor starts directly from protected main and preserves only the exact patch-quarantine source, operator documentation, and regression-test blobs from the unchanged #262 live head.

Exact identity and ancestry

• protected base at construction and immediately before PR creation: 6bc8ed016dc07f95d4e041a3b79ac00c4086b182;
• exact successor head: ef5ef48dd60c1afc26e36a0a92cdb5eefc318f46;
• exact successor tree: 1e3606507b279df204c8654230d683d246d57406;
• source predecessor: Draft feat(sandbox): restack exact patch quarantine on current main #262 exact live head fbd418466708066e1630091e947379db4eff24df, unchanged through construction;
• ancestry: one commit ahead, zero behind, merge base exactly the protected base;
• scope: exactly 27 paths — two patch-quarantine documents, reviewer/noema_reviewer/__init__.py, the patch-validation implementation, and 23 focused reviewer regression suites;
• no workflow, package, lockfile, changelog, release, deployment, KPI, governance, license, or unrelated protected-main byte is replayed.

Fresh comparison showed protected main advanced seven commits after #262's original base, but those protected changes touch only production-evidence/workflow-registry paths and do not overlap this 27-path slice. Every source blob in this successor is byte-identical to the corresponding unchanged #262 live-head blob; all other bytes are inherited from current protected main.

Product and security boundary

The slice provides credential-free exact-source patch quarantine with bounded patch grammar, exact repository/base/head/tree/blob/profile binding, descriptor-safe and no-follow reads, object-store/alternate isolation, bounded archive materialization, mode/path/hunk/file-count controls, governance-surface exclusion, no-network/read-only/non-root execution, trusted-host result validation, bounded diagnostics, and realistic hostile-input regressions.

Sandbox output is evidence only. It cannot approve a pull request, satisfy a required Check or formal review, authorize merge/release/deployment, choose an outbound license, or establish production/acquisition readiness.

Evidence boundary

No CI, reviewer, scanner, review, model, release, deployment, production, KPI, licensing, or acquisition evidence transfers from #93 or #262. This exact successor head must obtain fresh terminal-success application ci, reviewer-ci, protected-base-eligible central Security Scan, CodeQL, and every other applicable check against an unchanged live base. Pending, queued, skipped, absent, neutral, failed, cancelled, stale, predecessor, status-only, model-only, or rate-limited evidence is non-passing.

Before Ready or merge, independently re-resolve live base/head and ancestry, verify workflow checkout SHAs, re-read live rulesets and the exact central .github Security Scan revision/triggers/base filters/thresholds, require exact 100% owned production statement/branch/function/line coverage and reviewer line/branch/docstring gates, and require zero valid unresolved findings. Independent non-author approval is required only if live policy genuinely requires it.

#262 remains open as the source predecessor until this exact successor is protected and independently reverified. This PR does not publish a release, deploy production, prove a real 30-day KPI window, select an outbound license, or claim commercial/acquisition readiness.

Related: #9, #66, #67, #262

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3aaf62da-54d1-4bd6-9269-46ec636441c9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}