Repository navigation

Model runner depriv and deliver the unit fragment - #11307

Merged

briansrls merged 32 commits into

mainfrom

session/royal-fox-887-depriv

Sep 15, 2026

Merged

Model runner depriv and deliver the unit fragment#11307
briansrls merged 32 commits into
mainfrom
session/royal-fox-887-depriv

Commits on Sep 13, 2026
- Land one fleet systemctl-show observer for compile permit scope.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  7ee8ba7
- Refuse an invocation-local mint when CARGO_BUILD_JOBS was not read.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  114cb97
- Record why the observer will not fill jobs_per_slot from the allocation row.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  68ade4e
- Import cargo's env-name authority from extdeps.cargo, the module that owns it.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  0b4794c
- Spell the wet permit-scope entry as fn so module index can ingest the file.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  b0790a2
- Observe every committed slot and refuse malformed MAKEFLAGS as unreadable.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  2544fa7
- Give MAKEFLAGS and the fifo env key one home, and match List.first as Option.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  5030c80
- Match List.first as Present/Absent in the slot-realization join.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  8d3afbc
- Delete the slot-1 probe helper that had no production consumer.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  d60567a
- Merge origin/main so #11279 carries the fn-only grammar from #10850.
  gunbc-ci-auto-heal
  committed
  a2289a7
- Delete the test-only host standing and the wet-entry alias.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  1d94968
- Model runner depriv from existing authorities and deliver the unit fragment.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  ec3c6e3
- Depriv takes each host's unit_user and the reported ci-runner uid, or refuses.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  e9feeaa
- Refuse DOCKER_HOST unless a host-bound PosixAccountObservation grounds the uid.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  4a017a2
- Refuse the runner-host file population when depriv has no account observation.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  78cfe40
- Carry the job-user docker uid as TranscribedUncited and keep fragment User= on runner_user.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  15d894e
- Merge origin/main so #11307's diff is PR2 alone after #11279.
  gunbc-ci-auto-heal
  committed
  46cda25
- Refuse DOCKER_HOST while the job-user uid figure is TranscribedUncited.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  059fc4b
- Withhold uncited depriv per file so teardown and needrestart still converge.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  2cf0ac1
- Derive the job-user uid from the contradiction row and give the env name one home.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  1827cfc
Commits on Sep 14, 2026
- Stop driving run_runner_host_files on the hermetic floor.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  c3fa768
- Attach the Check-route note to the observe/apply witness.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  803a02c
- Declare the hermetic apply-route witness deletion as a rung drop.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  6362d19
- Withhold the unit fragment with depriv when the docker uid is uncited.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  a8414b2
- chore: regenerate drifted generated artifacts (ci auto-heal)
  gunbc-ci-auto-heal
  committed
  7a758bb
- Merge origin/main into session/royal-fox-887-depriv.
  gunbc-ci-auto-heal
  committed
  58c7f35
- chore: regenerate drifted generated artifacts (ci auto-heal)
  gunbc-ci-auto-heal
  committed
  90fc169
- Restore the rung-drop ledger projection from the merged roster.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  ac70145
- Merge remote session/royal-fox-887-depriv after ledger regen.
  gunbc-ci-auto-heal
  committed
  69371e7
- Track docker_rootless_unix_endpoint on the existing String-endpoint frontier.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  c3cc558
- Render the runner fragment from the already-bound deploy row.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  291fbbb
- Delete the host-only fragment helper; production already binds deploy.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  6b25eb1

Commits

Commits on Sep 13, 2026

Commits on Sep 14, 2026