docs: row 41 round 3 build-log entry and session line (filbert)

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-09 21:51:25 -05:00
parent a8ee6cc1df
commit 74d9810389
2 changed files with 5 additions and 0 deletions
@@ -3828,3 +3828,7 @@ Row 41 is in-review round 2: revs 253-254 in b887ee1e, request posted as #1523 c
 ### 2026-10-10 — Filbert, row 41 slice 1 S6 round 3 started (#1523)

 Before: Darkwing's round 2 asked for changes (#1523 comment 27010, rev 259). R4: Pi's `read` tool opens a different spelling when the given path doesn't exist. It tries U+202F before AM/PM, then NFD, then a curly apostrophe, then curly NFD (`path-utils.js`, `resolveReadPathAsync`). The gate checks only the given name, so a read of `it's.txt` can open a link `it’s.txt` that points outside the workspace. Darkwing's probe read `SECRET-OUTSIDE-THE-WORKSPACE` that way through a real Pi session. Sage ruled R4 is fixed in round 3: fail closed, test each variant family with a real Pi-shaped read, add one case where the variant target is inside the workspace and is still allowed, and don't reopen R1 to R3. Row 41 is in-progress again (rev 261, e211d384). Plan: for `read` (and Claude Code's `Read`, which Darkwing's note 3 asks for), build Pi's candidate list from the resolved path and refuse if any variant that exists resolves outside the workspace or through a dangling link. The harness README pin note names `path-utils.js` for recheck on a Pi upgrade. Darkwing's notes on Mv (a per-test timeout for `launcher.test.mjs`) and Mr are optional. No push; landing waits on Q14.
+
+### 2026-10-10 — Filbert, row 41 slice 1 S6 round 3 in review (#1523)
+
+After: R4 is fixed in `packages/harness/src/gate.mjs`. For Pi's `read` and Claude Code's `Read`, the gate builds every spelling Pi's `resolveReadPathAsync` would try: U+202F before AM/PM, NFD, U+2019, and NFD with U+2019. It builds them from both the workspace path and its real path, since the adapter starts Pi with `cd "$MOSAIC_WORKSPACE"`. A spelling that exists and resolves outside the workspace, or through a dangling link, refuses the read whichever spelling Pi would open. A missing spelling or ENOTDIR is skipped, and any other lstat error refuses. Tests: two gate tests (six names covering each family and their mixes, relative and absolute, both harnesses, each with an inside case that is allowed; plus directories, dangling links, ENOTDIR and Pi's cwd) and one real Pi 0.85.1 session reading all six plus an inside one. Ten mutants are all killed. The first test draft let the single-feature NFD and U+2019 mutants survive, and two single-feature names were added. Darkwing's `pi-variant.sh` probe refuses all four modes. From Darkwing's notes: Mr has a test (fails under the mutant), every `launcher.test.mjs` test has a 30 s timeout (Mv now ends in 62 s instead of hanging), the Ma leftover is a follow-up. A conversation `shim.mjs` left by my round 2 gate was still running, ignored SIGTERM and was killed by PID; recorded as a row 40 follow-up. Candidate manifest 9f0593af (42 files, 6 changed). Gate at 66b9e082: all green but test-task's two Docker recall checks, same on the unpatched base. Packet 0f38236f, revs 262-263 (a8ee6cc1), request comment 27012, REQUEST to Darkwing. No push; landing waits on Q14.
@@ -554,3 +554,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-10T02:00:23Z | filbert | review row 40 (#1522) slice 1 S5 round 2 | changes, comment 27005, rev 255 (27805a4e); T1 blocks (reproduced Darkwing's hold-order probe); F1, F2, N1 resolved, N2 and N3 addressed; N4 held-chunk error shares the holder's promise, not blocking; mutants noapprove and queuecatch fail; gate at ac7dae3e + candidate 5cbf22c0 green except test-task 26/2, Docker, same as base
 2026-10-10T02:31:10Z | Darkwing (T3 Claude Code, thread 7525c8e4) | review row 41 (#1523) slice 1 S6 round 2 | changes, comment 27010, rev 259 (c26feca7), packet 2d36c6ff; R1, R2, R3 and notes 1-5 hold; R4 blocks (Pi read opens a U+202F/NFD/U+2019 variant of a missing name the gate never checked; a variant-named workspace link reads outside; real Pi on a mock API; present in round 1, missed then); mutants 21/22 killed, Mr survives; manifest fd21bdc2 42 OK on 8dd5ff00, suites green but test-task live recall (same on base); no push
 2026-10-10T02:32:12Z | filbert | review row 40 (#1522) slice 1 S5 round 3 | approve, comment 27011, rev 260 (a248ec64); T1 fixed (Darkwing's hold-order probe plus my reload, nested-hold and throwing-takeover edges), N4 settled; mutants drainany, heldpromise, chunkcatch, inputreport, Mm, Mp all killed; gate at 86b22cc2 + candidate d0aa0ded green except test-task 26/2, Docker, same as base
+2026-10-10T02:51:25Z | filbert | row 41 (#1523) slice 1 S6 round 3 | R4 other-spelling check for read/Read, Mr test, launcher timeouts; packet agents/filbert/work/s6/ (0f38236f), manifest 9f0593af; gate at 66b9e082 green but test-task Docker recall (same on base); in-review revs 262-263 (a8ee6cc1), #1523 comment 27012; REQUEST to darkwing; no push