Repository navigation

D13 audit: requires none / opaque on extdeps ops (134 none, 120 opaque; 267 Network) - #12972

Merged

gunbai-bot[bot] merged 11 commits into

mainfrom

session/loyal-crab-214-requires-none-opaque

Oct 2, 2026

Commits on Oct 2, 2026

WIP: XL-2: D13 Network audit — requires Network on extdeps ops
gunbc-ci-auto-heal
committed
07b6e25
Merge remote-tracking branch 'origin/main' into lc214
gunbc-ci-auto-heal
committed
92ce6f9
Floor: import GET in docker inspect/stats; retire coreutils_stat/sha256sum get rows as ImportsFixed

gunbc-ci-auto-heal
and
claude
committed
1b8efa4
Floor: runner_microvm_boot_probe imports Filesystem from its service declarer

gunbc-ci-auto-heal
and
claude
committed
402ceb4
D13 audit: runtime-program and remote-option classes; reclassify 26 rows (210 none / 19 opaque / 291 Network)

gunbc-ci-auto-heal
and
claude
committed
4f3b4fb
D13 audit rulings: live browser page Network, unverifiable runner opaque, partial-clone git reads Network; NSS boundary (170 none / 29 opaque / 321 Network)

gunbc-ci-auto-heal
and
claude
committed
400fc3e
D13 audit: repository-selected executables are opaque (hooks, filters, drivers, transport helpers, cargo build scripts, npmrc git, agent hooks); 149 none / 91 opaque / 280 Network

gunbc-ci-auto-heal
and
claude
committed
2b86269
Merge remote-tracking branch 'origin/main' into lc214
gunbc-ci-auto-heal
committed
1cf8e48
D13: shell.Exec.RunArgvStdin (new on main, #12973) requires opaque, like its RunArgv siblings

gunbc-ci-auto-heal
and
claude
committed
8c9c3cc
D13 audit: index reads (fsmonitor on first load, :path revisions) and toolchain proxies in an input cwd are opaque; 135 none / 119 opaque / 267 Network

gunbc-ci-auto-heal
and
claude
committed
60e301d
D13: roster get rows in coreutils_stat/sha256sum are NotAReference, not ImportsFixed; codex GenerateJsonSchema opaque (runtime argv[0]); 134 none / 120 opaque / 267 Network

gunbc-ci-auto-heal
and
claude
committed
0f6bd55

Navigation Menu

Repository navigation

D13 audit: requires none / opaque on extdeps ops (134 none, 120 opaque; 267 Network) - #12972

D13 audit: requires none / opaque on extdeps ops (134 none, 120 opaque; 267 Network)#12972
gunbai-bot[bot] merged 11 commits into
mainfrom
session/loyal-crab-214-requires-none-opaque

Commits on Oct 2, 2026

WIP: XL-2: D13 Network audit — requires Network on extdeps ops

Merge remote-tracking branch 'origin/main' into lc214

Floor: import GET in docker inspect/stats; retire coreutils_stat/sha256sum get rows as ImportsFixed

Floor: runner_microvm_boot_probe imports Filesystem from its service declarer

D13 audit: runtime-program and remote-option classes; reclassify 26 rows (210 none / 19 opaque / 291 Network)

D13 audit rulings: live browser page Network, unverifiable runner opaque, partial-clone git reads Network; NSS boundary (170 none / 29 opaque / 321 Network)

D13 audit: repository-selected executables are opaque (hooks, filters, drivers, transport helpers, cargo build scripts, npmrc git, agent hooks); 149 none / 91 opaque / 280 Network

Merge remote-tracking branch 'origin/main' into lc214

D13: shell.Exec.RunArgvStdin (new on main, #12973) requires opaque, like its RunArgv siblings

D13 audit: index reads (fsmonitor on first load, :path revisions) and toolchain proxies in an input cwd are opaque; 135 none / 119 opaque / 267 Network

D13: roster get rows in coreutils_stat/sha256sum are NotAReference, not ImportsFixed; codex GenerateJsonSchema opaque (runtime argv[0]); 134 none / 120 opaque / 267 Network