build-log, sessions, agents: row 92 landed, Filbert on Codex (#1586)

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-12 17:32:24 -05:00
parent 85fd3286e5
commit d5bca87a1e
3 changed files with 8 additions and 1 deletions
@@ -4436,3 +4436,9 @@ After (17ad6f35): Filbert's round 1, 10 files +460 -33. The Board's first sectio
 Before (f04185fc): the broker's `tasks` read returned the whole board in full, and in Jason's PM test the reply went over Claude Code's 50000-character tool-result threshold, so the PM's session got a file path under `~/.claude/projects/` instead of the tasks.

 After (ce104b27): Dewey's round 1, 12 files +491 -20. The broker's `tasks` takes optional filter and page arguments and returns a short form. The harness gives `list_tasks` those arguments (open tasks by default), adds `get_task`, replies in compact JSON through `replyText` capped below the threshold, and the bundle's tools line names the harness's own tools. Dewey found the threshold in the pinned binary (2.1.296) and confirmed it with a probe: 50000 characters came back inline, 50010 went to a file. Approved by Darkwing (27940) on manifest b8c5bb3a, base a3f6e9e6, no drift on the 12 paths. Sage's gate on f04185fc plus the patch, 22:00:55Z to 22:03:38Z: bus 108, harness 65, webui 86, cli 115, control-board 124, the nine `scripts/test-*.sh` 0 failed. `queue review verify-commit 89 ce104b27` matched 12 paths. Row 89 done at rev 788 (ac37cd17), #1583 closed with comment 27965. Mos had the decision-109 notice before the landing; the broker change is live at the next bus restart and the harness at the next role session launch, both Mos's call.
+
+### 2026-10-12 — Sage, row 92 landed: role sessions confined to their own files (#1586)
+
+Before (4835a8e2): the harness tool gate checked the paths of Read, Write, Edit, Grep and Glob and nothing else. A role session's Bash ran as the host user with only a user and PID namespace (`session.mjs:39`), so it saw the whole filesystem. In Jason's test the reviewer's Grep of the coder's workspace was refused, but its Bash `ls` of the same directory ran.
+
+After (57948a81): Darkwing's round 2, 13 files +800 -106. The launcher spawns each session through `packages/seat/src/sandbox.mjs`, a bwrap sandbox. It sees its own workspace, the adapter and harness paths, the broker and launch sockets and the pinned Claude binary. It also gets a private `/proc`, `/dev` and IPC namespace and only the variables `ENV_ALLOW` passes. Two new refusals come before a launch: `no-session-credential` for a Claude Code session with none of the session credential sets, and `sandbox-unavailable`. A runner killed from the host ends its launch as `killed`. The bus unit template adds `EnvironmentFile=-%h/.config/mosaic-dev/secrets/claude-session.env` (decision 119). The cli, seat and harness READMEs say what the sandbox hides and what it doesn't: the credential variable is readable from `bash`, and `/proc/net/unix` lists host socket names. Round 2 added Filbert's six asks from 27951: confined-shell rows for `/dev/shm`, `/proc` and SysV IPC, pi run inside the sandbox, the killed-runner test, a pi launch with no credential, and two README items. It was rebased on ac37cd17 after row 89 landed on the harness README. Approved by Dewey (27978) and Filbert (27984) on manifest 8bf4141c, with no drift on the 13 paths. Darkwing's mutants: 34/34 killed. Sage's gate on 1b7f3781 plus the patch ran from 22:27:37Z to 22:30:35Z: seat 33, cli 120, harness 65, bus 108, webui 86, control-board 124, and all nine `scripts/test-*.sh` with 0 failed. `queue review verify-commit 92` matched 13 paths. Row 92 went to done at rev 804 (85fd3286, which also carries Darkwing's rev 803, the row 86 approve 27986). #1586 is closed with comment 27987. Mos had the decision-109 notice before landing. The change goes live at the next bus restart and the next role session launch. The installed unit only gets the `EnvironmentFile` line when it is reinstalled, and both of those steps are Mos's call. This unblocks rows 91 and 93.
@@ -14,7 +14,7 @@ not fleet seats. Keep changes in `/mnt/storage/src/mosaic-stack`; do not modify
 | Darkwing | Hands-on engineering; collaborating seat under Sage | Pi, configured Mosaic model | `agents/darkwing/launch.sh` |
 | Dewey | Frontend design, UX, accessibility, and UI implementation | Pi, configured Mosaic model | `agents/dewey/launch.sh` |
 | Rocko | General development, investigation, testing, and review | T3 session (Claude Code, Opus 5.5, thread b84bb264, lead decision 69); launcher Claude Code, Sonnet model | `agents/rocko/launch.sh` |
-| Filbert | General development, investigation, testing, and review | T3 session (Claude Code, Opus 5.5); launcher Pi, `openai-codex/gpt-6-astra:low`, not to be used under R26 until it changes (lead decision 69) | `agents/filbert/launch.sh` |
+| Filbert | General development, investigation, testing, and review | T3 session (Codex, gpt-6.1-sol, thread 50342f6a, lead decision 122; Claude thread 9cb9731e retired 2026-10-12); launcher Pi, `openai-codex/gpt-6-astra:low`, not to be used under R26 until it changes (lead decision 69) | `agents/filbert/launch.sh` |
 | Researcher | Source-grounded technical research and evidence | Pi, configured Mosaic model | `agents/researcher/launch.sh` |
 | Sage | Project lead: coordination, review, integration; earlier DYOR strategy records retained | T3 session (Claude Code); Pi launcher `zai/glm-5.3:high` retained | `agents/sage/launch.sh` |

@@ -799,3 +799,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-12T22:25:55Z | filbert | row 92 (#1586) round 2 review on 8bf4141c (base ac37cd17) | approve, comment 27984, rev 801 (2a930d95); gate 14/14 rc=0, my mutants 10/13 killed (3 expected survivors), all six round 1 changes met
 2026-10-12T22:27:32Z | filbert | row 77 (#1571) round 3 review on d9880f4c (base 2e26fbe1) | approve, comment 27985, rev 802; only the webui README moved, its +/- lines identical to round 2's, other 7 digests unchanged, no drift
 2026-10-12T22:28:46Z | filbert | Codex gpt-6.1-sol onboarding, thread 50342f6a-fff7-437a-aa75-679554289732 (decision 122) | required context read; queue next filbert returned nothing; Sage notified through T3; row 93 gated on rows 91 and 92 landing; available for requested reviews
+2026-10-12T22:32:14Z | sage | row 92 (#1586) landing; Filbert moved to Codex gpt-6.1-sol (decision 122) | landed 57948a81 after gate 15/15 on 1b7f3781, rev 804 (85fd3286, sweeps darkwing rev 803), #1586 closed 27987, Mos noticed; Filbert thread 50342f6a, Claude thread 9cb9731e retired, agents/README.md updated. Process note: Darkwing's row 92 work tailed Dewey's scratch output and their mutant runs overlapped Filbert's (one at 22:21:09Z-22:21:52Z on filbert-scratch/r92w); told to check pgrep before mutant runs