coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Exercise fsGroup startup through the corrected producer helper
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-11 12:41:50 +02:00
parent aaa4b8e686
commit 9654f9e8cf
4 changed files with 15 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/credential-lane-designs/factory-native-acceptance.md
View file

@ -82,3 +82,9 @@ For independent readback, use `readback` inside a fresh attended envelope with
the exact packet/run/event identities and reads only those already stored
probe records and chain metadata. It creates no Job and emits no new event.
The operator login remains required for that separate registry-backed reader.
The native local rehearsal uses a setgid tmpfs root to represent fsGroup
volume inheritance. Informed Decision initializes its store through its actual
container helper; unsafe existing private directories remain refused. Failed
Jobs retain only allowlisted assertion codes and HTTP status numbers before
UID-scoped cleanup; arbitrary container output is discarded.