Repository navigation

Dissolve the srv3 shell execution surface, and close the same-module hole in admit_callers - #8796

Merged

briansrls merged 24 commits into

mainfrom

srv3-consolidated

Aug 21, 2026

Commits on Aug 21, 2026
- Bind fleet-converge's build job to capability closure; widen the role to a relation
  Brian Searls
  committed
  2ae7506
- Merge remote-tracking branch 'origin/main' into fleet-converge-capability-binding
  Brian Searls
  committed
  0ebae58
- Restore what my stale-branch squash silently reverted in witness_floor_workflow
  
  Brian Searls
  and
  claude
  committed
  dfeb66e
- Merge origin/main into restore-clobbered-receipt-annotation
  Brian Searls
  committed
  81ad470
- Merge origin/main into fleet-converge-capability-binding
  Brian Searls
  committed
  a4a8aad
- Merge restore-clobbered-receipt-annotation so this branch cannot re-drop the restored block
  Brian Searls
  committed
  c545854
- Bind the websocat driver to the stage the sequence authority names
  
  Brian Searls
  and
  claude
  committed
  6836c03
- Ground the srv3 POSIX principal and privilege lowering; refuse degenerate ids
  
  Brian Searls
  and
  claude
  committed
  854b571
- Ensure srv3's bin directory ownership by readback, not by chown's exit status
  
  Brian Searls
  and
  claude
  committed
  0ae819f
- Repair the ownership cut: restore the deleted helpers, keep the chown as evidence, stop sequencing by argument position
  
  Brian Searls
  and
  claude
  committed
  61507c8
- Make each srv3 tool's acquisition mechanism a row, and derive the receipt from it
  
  Brian Searls
  and
  claude
  committed
  b7bbfd6
- Seal srv3's execution surface so no other module can name it
  
  Brian Searls
  and
  claude
  committed
  0edd976
- Merge origin/main into srv3-acquisition-rows
  Brian Searls
  committed
  cf76a31
- Merge origin/main into srv3-seal-execution
  Brian Searls
  committed
  e2b4d11
- Assemble elevated argv with one append instead of a snoc per element
  
  Brian Searls
  and
  claude
  committed
  64dcdd2
- Merge origin/main into srv3-acquisition-rows
  Brian Searls
  committed
  66a796e
- Merge origin/main into srv3-seal-execution
  Brian Searls
  committed
  7d2cc28
- Dissolve the last argv literal in the srv3 chain: chmod gets its authority
  
  Brian Searls
  and
  claude
  committed
  ae4f33a
- Merge srv3-acquisition-rows so the stack nests strictly
  Brian Searls
  committed
  51d879f
- Merge the srv3 stack
  Brian Searls
  committed
  070b782
- Merge the fleet-converge capability binding
  Brian Searls
  committed
  7ec3267
- Close the same-module hole in admit_callers
  
  Brian Searls
  and
  claude
  committed
  0a335b7
- Admit the sibling constructor route the closed hole exposed
  
  Brian Searls
  and
  claude
  committed
  37938e3
- Ground the build-step chmod invocation on the cited chmod authority
  
  Brian Searls
  and
  claude
  committed
  1bec66c

Navigation Menu

Repository navigation

Dissolve the srv3 shell execution surface, and close the same-module hole in admit_callers - #8796

Dissolve the srv3 shell execution surface, and close the same-module hole in admit_callers#8796
briansrls merged 24 commits into
mainfrom
srv3-consolidated

Commits on Aug 21, 2026

Bind fleet-converge's build job to capability closure; widen the role to a relation

Merge remote-tracking branch 'origin/main' into fleet-converge-capability-binding

Restore what my stale-branch squash silently reverted in witness_floor_workflow

Merge origin/main into restore-clobbered-receipt-annotation

Merge origin/main into fleet-converge-capability-binding

Merge restore-clobbered-receipt-annotation so this branch cannot re-drop the restored block

Bind the websocat driver to the stage the sequence authority names

Ground the srv3 POSIX principal and privilege lowering; refuse degenerate ids

Ensure srv3's bin directory ownership by readback, not by chown's exit status

Repair the ownership cut: restore the deleted helpers, keep the chown as evidence, stop sequencing by argument position

Make each srv3 tool's acquisition mechanism a row, and derive the receipt from it

Seal srv3's execution surface so no other module can name it

Merge origin/main into srv3-acquisition-rows

Merge origin/main into srv3-seal-execution

Assemble elevated argv with one append instead of a snoc per element

Merge origin/main into srv3-acquisition-rows

Merge origin/main into srv3-seal-execution

Dissolve the last argv literal in the srv3 chain: chmod gets its authority

Merge srv3-acquisition-rows so the stack nests strictly

Merge the srv3 stack

Merge the fleet-converge capability binding

Close the same-module hole in admit_callers

Admit the sibling constructor route the closed hole exposed

Ground the build-step chmod invocation on the cited chmod authority