fix(onboard): bind policy ownership to verified create receipts

nemoclaw/src/blueprint/runner-mock-fixtures.ts

@@ -22,7 +22,7 @@ export interface RunnerFsEntry {
 export const FAKE_HOME = "/fakehome";
 
 /** The deterministic UUID every runner suite mocks crypto.randomUUID() to. */
-export const FIXED_RUN_UUID = "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee";
+export const FIXED_RUN_UUID = "aaaaaaaa-bbbb-4ccc-addd-eeeeeeeeeeee";
 
 /** An in-memory filesystem store with its seeding helpers. */
 export interface RunnerFsStore {
@@ -59,6 +59,8 @@ export interface InMemoryFsOptions {
  */
 export function inMemoryFsMethods(store: Map<string, RunnerFsEntry>, options?: InMemoryFsOptions) {
   const spy = options?.spy ?? (<T>(fn: T): T => fn);
+  let nextFd = 100;
+  const openFiles = new Map<number, string>();
   return {
     existsSync: (p: string) => store.has(p),
     mkdirSync: spy((p: string) => void store.set(p, { type: "dir" })),
@@ -69,6 +71,18 @@ export function inMemoryFsMethods(store: Map<string, RunnerFsEntry>, options?: I
     writeFileSync: spy((p: string, data: string) => {
       store.set(p, { type: "file", content: String(data) });
     }),
+    openSync: spy((p: string) => {
+      if (!store.has(p)) return missingEntry(p);
+      const fd = nextFd++;
+      openFiles.set(fd, p);
+      return fd;
+    }),
+    fsyncSync: spy((fd: number) => {
+      if (!openFiles.has(fd)) throw new Error(`EBADF: ${fd}`);
+    }),
+    closeSync: spy((fd: number) => {
+      if (!openFiles.delete(fd)) throw new Error(`EBADF: ${fd}`);
+    }),
     renameSync: spy((source: string, destination: string) => {
       const entry = store.get(source);
       if (!entry) return missingEntry(source);
@@ -141,3 +155,12 @@ export function createStdoutCapture(): StdoutCapture {
     },
   };
 }
+
+/** Returns a callback that throws on one numbered invocation. */
+export function throwOnCall(callNumber: number, error: Error): () => void {
+  let calls = 0;
+  return () => {
+    calls += 1;
+    if (calls === callNumber) throw error;
+  };
+}

nemoclaw/src/blueprint/runner-name-validation.test.ts

@@ -20,6 +20,8 @@ import {
   minimalBlueprint,
   resultWithBlueprintPolicyAuthority,
   successResult,
+  TEST_SANDBOX_POLICY,
+  TEST_SANDBOX_POLICY_PATH,
 } from "./runner-test-fixtures.js";
 
 const { store, addFile, addDir } = createRunnerFsStore();
@@ -28,7 +30,8 @@ vi.mock("node:os", () => ({
   homedir: () => FAKE_HOME,
 }));
 
-vi.mock("node:crypto", () => ({
+vi.mock("node:crypto", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("node:crypto")>()),
   randomUUID: () => FIXED_RUN_UUID,
 }));
 
@@ -38,7 +41,10 @@ vi.mock("node:fs", async (importOriginal) => {
   return {
     ...original,
     existsSync: memory.existsSync,
+    closeSync: memory.closeSync,
+    fsyncSync: memory.fsyncSync,
     mkdirSync: memory.mkdirSync,
+    openSync: memory.openSync,
     readFileSync: memory.readFileSync,
     renameSync: memory.renameSync,
     writeFileSync: memory.writeFileSync,
@@ -116,6 +122,8 @@ describe("blueprint name validation (fail-closed integration)", () => {
 
   beforeEach(() => {
     store.clear();
+    addFile(TEST_SANDBOX_POLICY_PATH, TEST_SANDBOX_POLICY);
+    vi.stubEnv("OPENSHELL_SANDBOX_POLICY", TEST_SANDBOX_POLICY_PATH);
     stdout.reset();
     vi.clearAllMocks();
     vi.spyOn(process.stdout, "write").mockImplementation(stdout.write);
@@ -126,35 +134,38 @@ describe("blueprint name validation (fail-closed integration)", () => {
 
   afterEach(() => {
     vi.restoreAllMocks();
+    vi.unstubAllEnvs();
   });
 
-  it.each(
-    INVALID_NAME_CASES,
-  )("apply rejects a malformed %s and creates no sandbox", async (_label, corrupt, expected) => {
-    const bp = minimalBlueprint();
-    corrupt(bp.components as BlueprintComponents);
-
-    await expect(actionApply("default", bp)).rejects.toThrow(expected);
-    // Validation runs before any command, so no provider or sandbox command
-    // may have executed — not merely no sandbox create.
-    expect(mockExeca).not.toHaveBeenCalled();
-    expect(createCalls()).toEqual([]);
-  });
+  it.each(INVALID_NAME_CASES)(
+    "apply rejects a malformed %s and creates no sandbox",
+    async (_label, corrupt, expected) => {
+      const bp = minimalBlueprint();
+      corrupt(bp.components as BlueprintComponents);
+
+      await expect(actionApply("default", bp)).rejects.toThrow(expected);
+      // Validation runs before any command, so no provider or sandbox command
+      // may have executed — not merely no sandbox create.
+      expect(mockExeca).not.toHaveBeenCalled();
+      expect(createCalls()).toEqual([]);
+    },
+  );
 
-  it.each(
-    VALID_PROVIDER_NAMES,
-  )("apply accepts the supported provider name '%s'", async (providerName) => {
-    const bp = minimalBlueprint();
-    const components = bp.components as BlueprintComponents;
-    components.inference.profiles.default.provider_name = providerName;
-
-    await expect(actionApply("default", bp)).resolves.toBeUndefined();
-    expect(mockExeca).toHaveBeenCalledWith(
-      "openshell",
-      expect.arrayContaining(["provider", "create", "--name", providerName]),
-      expect.any(Object),
-    );
-  });
+  it.each(VALID_PROVIDER_NAMES)(
+    "apply accepts the supported provider name '%s'",
+    async (providerName) => {
+      const bp = minimalBlueprint();
+      const components = bp.components as BlueprintComponents;
+      components.inference.profiles.default.provider_name = providerName;
+
+      await expect(actionApply("default", bp)).resolves.toBeUndefined();
+      expect(mockExeca).toHaveBeenCalledWith(
+        "openshell",
+        expect.arrayContaining(["provider", "create", "--name", providerName]),
+        expect.any(Object),
+      );
+    },
+  );
 
   it("rollback rejects a plan whose sandbox_name is not OpenShell-compatible", async () => {
     const runDir = `${RUNS_DIR}/nc-run-1`;