Repository navigation

Seal srv3's execution surface so no other module can name it - #8779

Closed

briansrls wants to merge 13 commits into

mainfrom

srv3-seal-execution

Commits on Aug 21, 2026
- Bind the websocat driver to the stage the sequence authority names
  
  Brian Searls
  and
  claude
  committed
  6836c03
- Ground the srv3 POSIX principal and privilege lowering; refuse degenerate ids
  
  Brian Searls
  and
  claude
  committed
  854b571
- Ensure srv3's bin directory ownership by readback, not by chown's exit status
  
  Brian Searls
  and
  claude
  committed
  0ae819f
- Repair the ownership cut: restore the deleted helpers, keep the chown as evidence, stop sequencing by argument position
  
  Brian Searls
  and
  claude
  committed
  61507c8
- Make each srv3 tool's acquisition mechanism a row, and derive the receipt from it
  
  Brian Searls
  and
  claude
  committed
  b7bbfd6
- Seal srv3's execution surface so no other module can name it
  
  Brian Searls
  and
  claude
  committed
  0edd976
- Merge origin/main into srv3-acquisition-rows
  Brian Searls
  committed
  cf76a31
- Merge origin/main into srv3-seal-execution
  Brian Searls
  committed
  e2b4d11
- Assemble elevated argv with one append instead of a snoc per element
  
  Brian Searls
  and
  claude
  committed
  64dcdd2
- Merge origin/main into srv3-acquisition-rows
  Brian Searls
  committed
  66a796e
- Merge origin/main into srv3-seal-execution
  Brian Searls
  committed
  7d2cc28
- Dissolve the last argv literal in the srv3 chain: chmod gets its authority
  
  Brian Searls
  and
  claude
  committed
  ae4f33a
- Merge srv3-acquisition-rows so the stack nests strictly
  Brian Searls
  committed
  51d879f

Navigation Menu

Repository navigation

Seal srv3's execution surface so no other module can name it - #8779

Seal srv3's execution surface so no other module can name it#8779
briansrls wants to merge 13 commits into
mainfrom
srv3-seal-execution

Commits on Aug 21, 2026

Bind the websocat driver to the stage the sequence authority names

Ground the srv3 POSIX principal and privilege lowering; refuse degenerate ids

Ensure srv3's bin directory ownership by readback, not by chown's exit status

Repair the ownership cut: restore the deleted helpers, keep the chown as evidence, stop sequencing by argument position

Make each srv3 tool's acquisition mechanism a row, and derive the receipt from it

Seal srv3's execution surface so no other module can name it

Merge origin/main into srv3-acquisition-rows

Merge origin/main into srv3-seal-execution

Assemble elevated argv with one append instead of a snoc per element

Merge origin/main into srv3-acquisition-rows

Merge origin/main into srv3-seal-execution

Dissolve the last argv literal in the srv3 chain: chmod gets its authority

Merge srv3-acquisition-rows so the stack nests strictly