Limit legacy worker mounts to selected inputs and state #1835

2026-10-29T05:22:37Z

mos commented

2026-10-29 05:22:37 +00:00

First-time contributor

Legacy workers received the whole data root RW, including sibling sessions/workspaces and host run evidence. Build typed per-launch RO input mounts plus only the selected RW workspace/session; keep prompt output inside the disposable container. Existing launchers pass explicit inputs and unsupported contracts refuse before dispatch. Preserve the original RO control directory so atomic processing-state replacement remains visible; its runtime/stop metadata is intentionally readable. Addresses #156 without adding #153 network mediation.

Parent caught and author repaired the initial single-file state-bind regression. Author final focused19/19; native container RO/RW, sibling/evidence/socket negatives and full CI remain unrun. No native confinement or full-CI claim. Cross-family review required before merge.

Fresh parent focused check: 19/19 after exact locked yaml fixture setup, zero failures or skips. Local commit: ee151685e9 on work/vikunja-19-156-q284-worker-mounts, base 09a847edaa25b609bac7728ff83f224708a29399. Fresh Claude Opus 5.5 effort high review running; no verdict yet. Mos publishes; #660 admitted CI remains required before merge.

Vikunja #156. Author: Sage seat (Codex, Daybreak Blue review lane, Q284). Pushed and opened by Mos (mos-2248) because seats hold no Gitea account before #436b (Q190). Base refactor 09a847ed. Merge waits for an independent Claude review plus the #660 gate runner (Q264).

Legacy workers received the whole data root RW, including sibling sessions/workspaces and host run evidence. Build typed per-launch RO input mounts plus only the selected RW workspace/session; keep prompt output inside the disposable container. Existing launchers pass explicit inputs and unsupported contracts refuse before dispatch. Preserve the original RO control directory so atomic processing-state replacement remains visible; its runtime/stop metadata is intentionally readable. Addresses #156 without adding #153 network mediation. Parent caught and author repaired the initial single-file state-bind regression. Author final focused19/19; native container RO/RW, sibling/evidence/socket negatives and full CI remain unrun. No native confinement or full-CI claim. Cross-family review required before merge. Fresh parent focused check: 19/19 after exact locked yaml fixture setup, zero failures or skips. Local commit: ee151685e9e15511407904397d73e4d82c37c85b on `work/vikunja-19-156-q284-worker-mounts`, base `09a847edaa25b609bac7728ff83f224708a29399`. Fresh Claude Opus 5.5 effort high review running; no verdict yet. Mos publishes; #660 admitted CI remains required before merge. Vikunja #156. Author: Sage seat (Codex, Daybreak Blue review lane, Q284). Pushed and opened by Mos (mos-2248) because seats hold no Gitea account before #436b (Q190). Base refactor 09a847ed. Merge waits for an independent Claude review plus the #660 gate runner (Q264).

mos added 1 commit 2026-10-29 05:22:38 +00:00

fix(worker): limit legacy mounts to selected inputs and outputs (#156 ) ee151685e9

mos added 1 commit 2026-10-29 05:49:13 +00:00

fix(worker): snapshot fork input before container binding (#156 ) 1d6dae6fe4

jason.woltje added 1 commit 2026-11-02 19:55:31 +00:00

chore(release): 0.0.13 for the #156 worker image contract 5514457dde

#156 changes src/run-agent.sh and src/load-contracts.sh, which are baked into
the worker image. Its run-agent.sh refuses to start unless the launcher sets
MOSAIC_SYSTEM_PROMPT_FILE, and no launcher before #156 does. Rebuilding the
shared 0.0.12 tag would break the live pinned copy and rollback targets, so the
new image gets its own tag. No code change.

jason.woltje referenced this issue from a commit

2026-11-02 19:55:33 +00:00

Merge PR #1835: Limit legacy worker mounts to selected inputs and state (#156)

jason.woltje referenced this issue from a commit

2026-11-02 19:55:33 +00:00

Merge PR #1835 follow-up: release 0.0.13 for the #156 worker image contract

jason.woltje commented

2026-11-02 19:57:08 +00:00

Landed on refactor by the Mosaic Stack lead: merge 664d8ef3d and 6951fb494 (this PR's head 5514457dd). refactor fast-forwarded 09a847eda..c1e9841d3. Gate: all package suites plus every scripts/test-*.sh green on c1e9841d3, GATE_PASSED 2026-11-02T19:55:06Z. This repo has manual-merge marking and autodetect turned off, so Gitea cannot show the PR as merged; closing it with this record. Vikunja #156 closed. Live state: dragon-lin still runs its pinned copy until a re-pin.

Landed on refactor by the Mosaic Stack lead: merge 664d8ef3d and 6951fb494 (this PR's head 5514457dd). refactor fast-forwarded 09a847eda..c1e9841d3. Gate: all package suites plus every scripts/test-*.sh green on c1e9841d3, GATE_PASSED 2026-11-02T19:55:06Z. This repo has manual-merge marking and autodetect turned off, so Gitea cannot show the PR as merged; closing it with this record. Vikunja #156 closed. Live state: dragon-lin still runs its pinned copy until a re-pin.

jason.woltje closed this pull request

2026-11-02 19:57:09 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: mosaicstack/stack#1835