Repository navigation
test: pin persisted-nonce reuse, foreign-owned token refusal, weight-body caps - #10
SaulBuilds wants to merge 2 commits into
Conversation
…efusal - execution: after a restart before the commitment lands, the executor must commit to the nonce already persisted for the job, not the static fallback. Revert check: ignoring the persisted nonce turns it red (the existing suite stayed green). - supervision/auth: read_existing_token refuses an inode owned by another uid (stat + read of a root-owned system file only; skipped when running as its owner). Revert check: dropping the uid comparison turns it red. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KGMeatV8UjtCB4CTbWuAv4
Loopback servers: a declared Content-Length over the cap is refused before the body is read; a chunked body with no length is refused once it streams past the cap; a body within the cap is returned. Revert check: each cap removed on its own went undetected by the existing suite; each now turns its named test red. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KGMeatV8UjtCB4CTbWuAv4
BerryManifold
left a comment
There was a problem hiding this comment.
Automated Codex static review of b94fdc2c211535ecec98508d2bb5631f10799211 is complete. Result: incomplete; details retained privately. Details and coverage limits are recorded in the project's private review log. No tests were executed by this reviewer. Both account submissions represent the same Codex review, not independent reviews.
Matr0xshka
left a comment
There was a problem hiding this comment.
Automated Codex static review of b94fdc2c211535ecec98508d2bb5631f10799211 is complete. Result: incomplete; details retained privately. Details and coverage limits are recorded in the project's private review log. No tests were executed by this reviewer. Both account submissions represent the same Codex review, not independent reviews.
Tests only.
What
executor_reuses_the_persisted_nonce_after_a_restart. After a restart before the commitment lands, the executor must commit to the nonce already persisted for the job.read_existing_token_refuses_a_file_owned_by_another_uid. It uses a root-owned system file and only stats and reads it, never writes. It's skipped when the test runs as that file's owner.tests/weight_body_cap.rs, using loopback servers:Standard: met
cargo test -p node-agent -p supervision -p executorgreen.cargo fmt --checkreports diffs across most files with rustc 1.93, and clippy-D warningsfails in theconfigcrate.🤖 Generated with Claude Code
https://claude.ai/code/session_01KGMeatV8UjtCB4CTbWuAv4