fix(quality): prove criterion binding semantics

scripts/gate-history.mjs

@@ -1,5 +1,5 @@
 import { existsSync } from 'node:fs';
-import { createHash } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import { access, lstat, mkdir, mkdtemp, readFile, readdir, readlink, rm } from 'node:fs/promises';
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
@@ -40,7 +40,9 @@ async function snapshotAuthoritativeTree(root) {
       } else if (stats.isSymbolicLink()) {
         snapshot.set(relative, `symlink:${stats.mode}:${await readlink(absolute)}`);
       } else if (stats.isFile()) {
-        const digest = createHash('sha256').update(await readFile(absolute)).digest('hex');
+        const digest = createHash('sha256')
+          .update(await readFile(absolute))
+          .digest('hex');
         snapshot.set(relative, `file:${stats.mode}:${digest}`);
       }
     }
@@ -59,7 +61,9 @@ async function authoritativeTreeChanges(root, snapshot) {
       if (stats.isSymbolicLink()) {
         actual = `symlink:${stats.mode}:${await readlink(absolute)}`;
       } else if (stats.isFile()) {
-        const digest = createHash('sha256').update(await readFile(absolute)).digest('hex');
+        const digest = createHash('sha256')
+          .update(await readFile(absolute))
+          .digest('hex');
         actual = `file:${stats.mode}:${digest}`;
       } else {
         actual = `other:${stats.mode}`;
@@ -108,8 +112,24 @@ function bubblewrap(root, command, args, { storePath, timeout = 300_000 } = {})
   );
   if (storePath) sandboxArgs.push('--setenv', 'NPM_CONFIG_STORE_DIR', '/pnpm-store');
   if (existsSync(corepackHome)) sandboxArgs.push('--setenv', 'COREPACK_HOME', '/corepack');
-  sandboxArgs.push(command, ...args);
-  return spawnSync('bwrap', sandboxArgs, { encoding: 'utf8', timeout });
+  const enteredMarker = `__MOSAIC_BWRAP_ENTERED_${randomUUID()}__`;
+  sandboxArgs.push(
+    '/bin/sh',
+    '-c',
+    'printf "%s\\n" "$1"; shift; exec "$@"',
+    'mosaic-bwrap-entry',
+    enteredMarker,
+    command,
+    ...args,
+  );
+  const result = spawnSync('bwrap', sandboxArgs, { encoding: 'utf8', timeout });
+  const sandboxEntered = result.stdout?.includes(enteredMarker) === true;
+  return {
+    ...result,
+    stdout: (result.stdout ?? '').replace(`${enteredMarker}\n`, ''),
+    sandboxLauncher: 'bwrap',
+    sandboxEntered,
+  };
 }
 
 export async function replayCommit(root, commit) {