Skip to content

Pin the root states production builds in three main reds - #2881

Merged
trissim merged 2 commits into
mainfrom
fix/three-main-reds
Oct 23, 2026
Merged

trissim merged 2 commits into
mainfrom
fix/three-main-reds

Conversation

@trissim

@trissim trissim commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

test_native_root_checks_relative_and_absolute_ancestor_permissions and
test_private_issuer_rejects_untrusted_ancestor_and_collision turned red at
4ab345b (#2854): root adoption now creates every root's empty bus
(root_runtime.py adopt), and wire() adopts, so a bus exists before
prepare_native_root refuses the untrusted ancestor. Both tests still
asserted the old creation owner (bus created at native prepare). The
invariant they exist for is that a refused root gains no private
authority: both now assert the registry guard is never created.

test_newer_read_moves_past_a_line_still_being_appended installed
PrivateCoordinatorTable on a bare wire() root with no registry guard, a
state registry_store.py:357-360 refuses ("Native runtime has no registry
authority"). It now builds on private_comms, whose prepare_native_root is
the one production owner of the private runtime, as #2872 did for nine
other tests.

Tests: the three files at the head, 71 passed, 1 skipped, under a 0700 basetemp.

🤖 Generated with Claude Code

test_native_root_checks_relative_and_absolute_ancestor_permissions and
test_private_issuer_rejects_untrusted_ancestor_and_collision turned red at
4ab345b (#2854): root adoption now creates every root's empty bus
(root_runtime.py adopt), and wire() adopts, so a bus exists before
prepare_native_root refuses the untrusted ancestor. Both tests still
asserted the old creation owner (bus created at native prepare). The
invariant they exist for is that a refused root gains no private
authority: both now assert the registry guard is never created.

test_newer_read_moves_past_a_line_still_being_appended installed
PrivateCoordinatorTable on a bare wire() root with no registry guard, a
state registry_store.py:357-360 refuses ("Native runtime has no registry
authority"). It now builds on private_comms, whose prepare_native_root is
the one production owner of the private runtime, as #2872 did for nine
other tests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@trissim
trissim marked this pull request as ready for review October 23, 2026 19:18
Copilot AI balanced review requested due to automatic review settings October 23, 2026 19:18

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@trissim
trissim merged commit 46606ec into main Oct 23, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants