Repository navigation
Rebuild guest consumers and compare runtime allocation and health - #408
Merged
Merged
Conversation
added 10 commits
October 7, 2026 14:13
…response Add bounded payment-owned backlog metrics and session-scoped policy observations with explicit freshness and unavailable states. Exercise authenticated destination denial and credential recovery on owned local fixtures, and document report handling and remaining operational acceptance. GitHub issues #116 and #19.
ctfbruce
changed the title
This was referenced Oct 7, 2026
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Experimental Rust and C guest checks now rebuild the current bindings with pinned compiler images, verify retained source hashes, and exercise consumers built from an isolated crate or copied header against the real host ABI. Python and JavaScript measurement inputs, archive hashes and commands are retained, and the measurement runner validates every recorded sample. A separate CI job runs the guest source checks.
Operator metrics now read bounded durable settlement obligations and current executor-session network admission refusals and revoked socket counts. The metrics preserve explicit unavailable states and distinguish these observations from dropped packets, verified enforcement and measured clock uncertainty. Local authenticated opt-out and credential recovery drills record receiver traffic termination and credential refusal; the abuse response guide retains the real contact and evidence-access requirements.
Validation: pinned compiler/consumer and language measurement checks passed on Linux; focused payment, metrics, network-policy and authenticated drill race checks passed. Related: #9, #22, #116, #19. Official language support/release decisions, independent enforcement/clock observations and real reporting-contact acceptance remain separate.
The simulator comparison now replays congestion, churn, hierarchical-prefix and shared-destination traces against runtime admission, floor/ceiling and resource conservation invariants. The companion allocator and deterministic replay correction are reviewed separately in simulator MR1. Related: #12.
Source checksum records use explicit path and SHA256 fields. The historical scanner match is limited to its exact reviewed source-checksum fingerprint; active scanning and digest checks remain enforced.