coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record native sender acceptance and retained audit readback gate

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-11 14:23:07 +02:00
parent 1a12223574
commit c5367a5a54
4 changed files with 502 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tools/smoke_container.py
View file

@ -45,9 +45,9 @@ def main():
def volume(suffix):
name=prefix+'-'+suffix
docker('volume','create','--label','informed-decision.fixture='+prefix,name);volumes.append(name)
docker('run','--rm','--network','none','--read-only','--user','0:0','--cap-drop','ALL','--cap-add','CHOWN',
docker('run','--rm','--network','none','--read-only','--user','0:0','--cap-drop','ALL','--cap-add','CHOWN','--cap-add','FSETID',
'--mount','type=volume,src='+name+',dst=/data','--entrypoint','python',args.image,'-c',
"import os; os.chown('/data',0,10001); os.chmod('/data',0o2770)")
"import os,stat; os.chown('/data',0,10001); os.chmod('/data',0o2770); assert stat.S_IMODE(os.stat('/data').st_mode)==0o2770")
return name
def start(suffix,data,fixture,backup=None):
name=prefix+'-'+suffix;containers.append(name)