Repository navigation
Bound package proof publication to the current TTY generation - #509
Merged
Merged
Conversation
hanthor
marked this pull request as ready for review
September 27, 2026 18:53
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Run 36339827190 at 2e5f2d2 failed when the package helper wrote the old-phase installed record through a serial descriptor retained across package changes. The write, failure publication, and stream close returned EIO. The host never received the required later records. The original artifact and owned-process reap remain retained; package acceptance is unknown.
Open the current fixed serial device for each bounded record, require a character device and positive TTY observation, and close it after publication. Nonblocking writes have one three-second deadline and a 64 KiB record limit. A failed or partial publication refuses acceptance; bytes are never retried.
Four native private-PTY controls and all 119 package controls pass. The actual prior main AST fails after a native PTY hangup, while the current writer publishes through the fresh private generation. This establishes the descriptor mechanism, without identifying the actual guest actor. Unread PTY, dead current TTY,
/dev/null, regular files, and oversized records refuse. A removed TTY guard makes its consumer test red. Current source pins and preserved historical provenance pass.Current main a1b4974 is integrated. No corrected guest execution, package installation acceptance, firmware acceptance, or desktop acceptance is claimed. No runtime retry is dispatched by this PR.