fix(memory): require trusted jail observation status and enforce exec_jail target existence #234

Closed

clawdie wants to merge 0 commits from clawdie/fix/jail-observation-trust into main AGit

pull from: clawdie/fix/jail-observation-trust

merge into: clawdie:main

clawdie:main

clawdie:feat/sysctl-posture-oxy-hydration-0.15.1

Conversation 0 Commits - Files changed -

clawdie commented 2026-10-29 19:46:50 +01:00

Owner

Copy link

Require positively resolved JailObservation.StatusTrusted() (active or stopped) via a single table-driven Rule 3 precondition in checkJailTargetEligibility() (returning StatusMissingCapacity on jls/bastille conflict), add the missing exec_jail target existence check, and cover all 16 status x action cells in TestBoundary1Step3JailPolicyGate.

Require positively resolved JailObservation.StatusTrusted() (active or stopped) via a single table-driven Rule 3 precondition in checkJailTargetEligibility() (returning StatusMissingCapacity on jls/bastille conflict), add the missing exec_jail target existence check, and cover all 16 status x action cells in TestBoundary1Step3JailPolicyGate.

clawdie added 1 commit 2026-10-29 19:46:50 +01:00

fix(memory): require trusted jail observation status and enforce exec_jail target existence ... 813923f026

- Add JailObservation.StatusTrusted() (active or stopped) so per-jail unknown
  or empty status fails closed.
- Add existingTargetsFor() and Rule 3 in checkJailTargetEligibility() before the
  action switch: any existing target required by clone_jail (sources),
  destroy_jail (primary), or exec_jail (primary) with !StatusTrusted() fails
  closed with StatusMissingCapacity (jls/bastille conflict; re-probe).
- Add explicit exec_jail case in checkJailTargetEligibility() requiring an
  explicit jail:<name> target present in cap.JailObservations.
- Add 4x4 observation_trust_table_across_statuses_and_actions test matrix plus
  missing-target exec_jail check and refresh Go token badge.

clawdie added 1 commit 2026-10-29 20:23:38 +01:00

refactor(memory): rename obs to jailObserv and harden jail observation tests ... 756592164e

- Rename the Go local variable obs (and srcObs/obsList) to jailObserv across
  internal/memory production files; SPARQL ?obs variables, RDF predicates, JSON
  tags and the exported JailObservation type are unchanged.
- findJailObservation: reconcile duplicate observations for one jail
  fail-closed; any untrusted or status-disagreeing duplicate forces unknown.
- Tests: pin the production conflict shape (untrusted status while the jail
  stays in ActiveJails) for clone/destroy/exec/provision, and add a
  duplicate-observation conflict case.

clawdie added 1 commit 2026-10-29 20:28:06 +01:00

refactor(memory): replace obs/buf abbreviations with descriptive names ... 7a81fdb04a

- SPARQL variables: ?obs -> ?jailObserv, ?obsNodeID -> ?jailObservNodeID,
  ?obsAt -> ?nodeObservedAt, ?oldJailObs -> ?oldJailObserv (queries and the
  test assertions that match them).
- Go: obsURI -> jailObservURI, obsBuf -> jailObservationTurtle,
  insertBuf -> insertTriples, jailObs (slice) -> jailObservations, and the
  remaining test variables obs -> jailObservations / jailObserv.
- No behaviour change; RDF predicates, JSON tags and exported types unchanged.

clawdie added 1 commit 2026-10-29 20:32:54 +01:00

refactor(memory): name the jail observation builder by role, not syntax ... 16829f8c46

jailObservationTurtle -> jailObservationTriples. The variable holds the RDF
triples describing current jail observations; the Turtle syntax stays confined
to formatJailObservationTurtle. Matches insertTriples and projection.go wording.

clawdie added 1 commit 2026-10-29 20:44:25 +01:00

refactor(memory): rename HostHeadroom to HostLiveState ... 066afd0be0

HostHeadroom held everything volatile about a node (spare RAM/CPU/ZFS plus the
live jail and VM inventory), so jail fields under 'headroom' read wrongly. It
is now HostLiveState; Headroom() -> LiveState(), RefreshHeadroom ->
RefreshLiveState, HeadroomFn -> LiveStateFn, and local variables follow.

Stored and emitted names are unchanged: DynamicHeadroomObservedAt and its
JSON/RDF forms, the refresh-headroom daemon verb, SUFFICIENT_HEADROOM, and
user-facing messages. The Go token badge is refreshed.

clawdie closed this pull request 2026-10-30 13:31:16 +01:00

All checks were successful

Hide checks

CI / markdown (pull_request) Successful in 9s

Details

CI / packaging (pull_request) Successful in 2s

Details

CI / python-tests (pull_request) Successful in 20s

Details

CI / mcp-cross-language (pull_request) Successful in 25s

Details

CI / go (pull_request) Successful in 43s

Details

leak-guard / guard (pull_request) Successful in 9s

Details

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawdie/colibri!234

No description provided.