docs(row253): pin mos1298 session assertion candidate

agents/gander/work/queue-253/BUILD.md

@@ -306,3 +306,8 @@ Seven-path manifesta2ac57342d9c59ddaebddade0fa475a9568719fed50c132bd7bb141167c7e
 ### mos-1297 fresh gate under sage-2768, stopped
 
 Ran on pushed e1bc766d8, manifest a2ac5734, no carry. Both intendedREDs observed; touched whole43/0/0 and34/0/0,17fresh controls passed. M1-M37 killed including M21 by named P10 assertion; M38 survived (drop setsid, signals killer). M39-M40 and full package/union/shell stages NOTRUN. Wall404.837s,0timeouts,0skips,N9passed. Exact restoration and all7manifest checks pass; sweep0run-created leftovers. Stopped unplaced to Sage/Mos/Duckworth as gander-0116 and returned slot; no repair or rerun. run4-gate/ preserves raw logs,commands,counts and timing.
+
+
+### mos-1298: pin the direct query session
+
+M38 drops setsid but a blocking signals query can still fail closed with inner-timeout; the old kill rule was wrong. The named killer stays row253 C4 signals query. Every sleep/signals/member case in both exec/hop modes now reads the first query-pids line and asserts exact equality of its numeric PID and kernel SID. M38 must fail this new assertion, never a timeout or a cleanup-only assertion. Every old line of the C4 query test is preserved byte for byte. Product scripts remain byte-identical. No test or Node preflight run; fresh whole gate from start follows new candidate review and Sage CLEAR, with nothing carried. Base assertion failure, another survivor or any mismatch goes to Mos before a further change.

agents/gander/work/queue-253/CANDIDATE-SHAS.json

@@ -2,7 +2,7 @@
   "docs/plans/DEFERRED.md": "f8ad28aa8dc0f12b2c6dddb3b5dc805da05a97c7723e0525905456c064d0cfa3",
   "packages/cli/tests/case-sudo-fixture.mjs": "b259b8c7926e49829c8a956674021cb0cc85ddd65aebdc786d05cc08d7790008",
   "packages/cli/tests/case1-accept.test.mjs": "27378eb1297dc6115b4b1ce849de6ffdb3adccf5249783106fa0570c9d696e8a",
-  "packages/cli/tests/case2-unit.test.mjs": "1e0696eb196e83a0766b433ef71f27df0a3f8fcb6399787ab8c1c0f05c54dc44",
+  "packages/cli/tests/case2-unit.test.mjs": "9ca67403d8614266061624ab5fbf4ea8e8a54cbd08f5b569c95592ab5ed40472",
   "packages/webui/README.md": "ce9054060867120798c6b26737ac7d910d8cfbc7aa4ad614f4295619c7605e46",
   "scripts/case1-accept.sh": "c02bef6b3495e5a4548d7b4e89675ed52be26a0c9ccce4d9d5cfc5fe2ce437bd",
   "scripts/case2-unit.sh": "d7670bdb049ae41ba3774fc83de633636859b6723be858cfb31ea106b0e8812b"

agents/gander/work/queue-253/MANIFEST.md

@@ -21,3 +21,6 @@ Focused27 under sage-2709 now passed on0604d91fc:604/0/0, no timeouts, no retrie
 Whole gate2737 stopped atM21 survivor after20kills. No final acceptance. run3-gate/STOP-SUMMARY.json andSTATIC-TRACE.md preserve the stop. Mos1293requires diagnostic thennewcandidate/review/fullgatefromstart. Current7sourceblobs remain573c51cf; no test/product repair made.
 
 Mos1297 supersedes573c51cf after one fixture-only repair and17exactreasonassertions: source362ec674c9e7aa8cef0c26f4d7448f459171dbd4, digesta2ac57342d9c59ddaebddade0fa475a9568719fed50c132bd7bb141167c7e72e. Onlycase1testchanges. repair-1297/ is the new review packet. Tests unrun; Duckworthreview and fullfreshgatepending.
+
+
+mos-1298 candidate source 14e46006171ef700a72f971fda5cb3a0b8dcc4f2, seven-path manifest 591020a1096a1606c11f2ee34b37243acddf83d91c69922ccc5cfe22d6180d3a. Only case2-unit.test.mjs changes among manifest paths from e1bc766d8. Pending review and fresh full gate; no carry.

agents/gander/work/queue-253/MANIFEST.sha256

@@ -1,7 +1,7 @@
 f8ad28aa8dc0f12b2c6dddb3b5dc805da05a97c7723e0525905456c064d0cfa3  docs/plans/DEFERRED.md
 b259b8c7926e49829c8a956674021cb0cc85ddd65aebdc786d05cc08d7790008  packages/cli/tests/case-sudo-fixture.mjs
 27378eb1297dc6115b4b1ce849de6ffdb3adccf5249783106fa0570c9d696e8a  packages/cli/tests/case1-accept.test.mjs
-1e0696eb196e83a0766b433ef71f27df0a3f8fcb6399787ab8c1c0f05c54dc44  packages/cli/tests/case2-unit.test.mjs
+9ca67403d8614266061624ab5fbf4ea8e8a54cbd08f5b569c95592ab5ed40472  packages/cli/tests/case2-unit.test.mjs
 ce9054060867120798c6b26737ac7d910d8cfbc7aa4ad614f4295619c7605e46  packages/webui/README.md
 c02bef6b3495e5a4548d7b4e89675ed52be26a0c9ccce4d9d5cfc5fe2ce437bd  scripts/case1-accept.sh
 d7670bdb049ae41ba3774fc83de633636859b6723be858cfb31ea106b0e8812b  scripts/case2-unit.sh

agents/gander/work/queue-253/c4/REPAIR-README.md

@@ -6,7 +6,7 @@ REPAIR.diff compares the repaired scripts against their original frozen source,
 
 ## Conditions mapped to the diff
 
-C1: fixed setsid without -f/-w; confirm the direct child's kernel SID equals its PID. M38 drops setsid; exact inner-timeout tests must kill it by observing inner-session instead.
+C1: fixed setsid without -f/-w; confirm the direct child's kernel SID equals its PID. M38 drops setsid; the named row253 C4 signals query killer must fail the exact numeric PID/SID equality assertion on the first query-pids line, in each kind and both sudo modes, without a timeout. A blocking child can still reach inner-timeout without setsid, so the refusal reason alone does not prove session creation (mos-1298).
 
 C2: exact inner/outer/output-limit refusals in both fake modes, query 5/7 s and probe 2/4 s. Outer cases require at least the outer duration and less than outer + 2 s. Root discards the valid-looking stdout of a stalled supervisor. A trusted notice plus status 137 identifies the outer timer.
 

agents/gander/work/queue-253/repair-1298/NOTES.md

@@ -0,0 +1,3 @@
+# mos-1298 candidate
+
+Source 14e46006171ef700a72f971fda5cb3a0b8dcc4f2; manifest 591020a1096a1606c11f2ee34b37243acddf83d91c69922ccc5cfe22d6180d3a. Two inserted lines read the first query-pids record as numbers and assert PID equals SID, inside the existing per-kind/per-mode loop. All prior test bytes remain. Both product scripts match e1bc766d8 exactly. BUILD.md and c4/REPAIR-README.md correct the M38 kill rule. No execution since the stop; fresh whole gate after review and CLEAR, no carry.

agents/gander/work/queue-253/repair-1298/REPAIR.diff

@@ -0,0 +1,13 @@
+diff --git a/packages/cli/tests/case2-unit.test.mjs b/packages/cli/tests/case2-unit.test.mjs
+index 834f8d848..78dd77721 100644
+--- a/packages/cli/tests/case2-unit.test.mjs
++++ b/packages/cli/tests/case2-unit.test.mjs
+@@ -199,6 +199,8 @@ for(const kind of ['sleep','signals','member']) test(`row253 C4 ${kind} query ha
+   const capture=cleanupFixture(t,files);const stopGuard=fixtureGuard(t,files);
+   const start=performance.now(),r=unit(h,{profile:'factory'}),seconds=(performance.now()-start)/1000;capture();
+   refuses(r,/^case2-unit: tester config query inner-timeout\n$/);
++  const [queryPid,querySid]=read(queries).trim().split('\n')[0].trim().split(/\s+/).map(Number);
++  assert.equal(queryPid,querySid,`${kind}/${mode}: direct query PID must equal its kernel SID`);
+   assert.ok(seconds<7,`${kind}/${mode}: ${seconds}s exceeds outer bound`);
+   assert.deepEqual(await pollFixtureGone(files),[],mode);
+   if(kind==='member')assert.ok(read(proof).includes('('+member.split('/').at(-1)+') '),'member comm with newline and closing parenthesis was observed');

agents/gander/work/queue-253/repair-1298/SOURCE.json

@@ -0,0 +1,20 @@
+{
+  "source": "14e46006171ef700a72f971fda5cb3a0b8dcc4f2",
+  "previous": "e1bc766d87a0c6b8894aff93a221315a044cb36a",
+  "manifest": "591020a1096a1606c11f2ee34b37243acddf83d91c69922ccc5cfe22d6180d3a",
+  "paths": {
+    "docs/plans/DEFERRED.md": "f8ad28aa8dc0f12b2c6dddb3b5dc805da05a97c7723e0525905456c064d0cfa3",
+    "packages/cli/tests/case-sudo-fixture.mjs": "b259b8c7926e49829c8a956674021cb0cc85ddd65aebdc786d05cc08d7790008",
+    "packages/cli/tests/case1-accept.test.mjs": "27378eb1297dc6115b4b1ce849de6ffdb3adccf5249783106fa0570c9d696e8a",
+    "packages/cli/tests/case2-unit.test.mjs": "9ca67403d8614266061624ab5fbf4ea8e8a54cbd08f5b569c95592ab5ed40472",
+    "packages/webui/README.md": "ce9054060867120798c6b26737ac7d910d8cfbc7aa4ad614f4295619c7605e46",
+    "scripts/case1-accept.sh": "c02bef6b3495e5a4548d7b4e89675ed52be26a0c9ccce4d9d5cfc5fe2ce437bd",
+    "scripts/case2-unit.sh": "d7670bdb049ae41ba3774fc83de633636859b6723be858cfb31ea106b0e8812b"
+  },
+  "existing_test_lines_byte_identical": true,
+  "scripts_unchanged": {
+    "scripts/case1-accept.sh": "c02bef6b3495e5a4548d7b4e89675ed52be26a0c9ccce4d9d5cfc5fe2ce437bd",
+    "scripts/case2-unit.sh": "d7670bdb049ae41ba3774fc83de633636859b6723be858cfb31ea106b0e8812b"
+  },
+  "execution": "No test, Node preflight or experiment run; pending Duckworth review and Sage CLEAR"
+}